Differences between revisions 1 and 2
Revision 1 as of 2012-05-11 15:40:30
Size: 854
Editor: ?IntRigeri
Comment: Initial instructions draft.
Revision 2 as of 2013-04-05 15:05:15
Size: 897
Editor: ?IntRigeri
Comment: Converting from early-tester to to end-user documentation.
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was renamed from AppArmor/Testing

Install AppArmor userspace tools and some contributed profiles:

$ sudo apt-get install apparmor apparmor-profiles apparmor-utils

Enable the AppArmor LSM:

$ sudo perl -pi -e 's,GRUB_CMDLINE_LINUX="(.*)"$,GRUB_CMDLINE_LINUX="$1 apparmor=1 security=apparmor",' /etc/default/grub
$ sudo update-grub
$ sudo reboot

See what running executable is currently confined by an AppArmor profile:

$ ps auxZ | grep -v '^unconfined'

One place to find more profiles is the patches, with new profiles included, that were submitted to Debian.

Once you've dropped the new profile into /etc/apparmor.d/, use apparmor_parser(8) to insert it into the kernel.

AppArmor audit logs can be found in /var/log/kern.log.