Whonix AppArmor Profiles Development Discussion

AppArmor
722
723
724

Now merged.

1 Like
725

I am going to give this a try, will report if i encounter any problem

1 Like
726

So far, absolutely no problems! everything works as expected

2 Likes
727

Thanks for everyone who has been testing this!

As a result, the next security improvement install apparmor-profiles apparmor-profiles-extra apparmor-profiles-kicksecure by default could be moved forward.

1 Like
728
729

Old:

Previously the Enabling instructions only mentioned one example for one profile only:

  • sudo cp /usr/share/apparmor/extra-profiles/bin.netstat /etc/apparmor.d
  • sudo aa-enforce /etc/apparmor.d/bin.netstat

New:

The Enabling instructions have been edited by me just now.

  • Option B) Copy all profiles.
sudo cp /usr/share/apparmor/extra-profiles/* /etc/apparmor.d
  • Option B) Enable all profiles.
sudo aa-enforce /etc/apparmor.d/*
730

Call for Testers

  1. Did anyone test command…?
sudo cp /usr/share/apparmor/extra-profiles/* /etc/apparmor.d

and / or

  1. Did anyone test command…?
sudo aa-enforce /etc/apparmor.d/*
731

did both, it loaded a lot of profiles but at the end it printed this error
/etc/apparmor.d/usr.sbin.anondate-get doesn't contain a valid profile (syntax error?)

1 Like
732

That error is fixed in the stable repository.

733
734

2 posts were split to a new topic: apparmor-profile-torbrowser allows access to user home folder

735