Differences between revisions 2 and 4 (spanning 2 versions)
Revision 2 as of 2013-04-05 15:05:15
Size: 897
Editor: ?IntRigeri
Comment: Converting from early-tester to to end-user documentation.
Revision 4 as of 2013-04-05 15:13:11
Size: 1207
Editor: ?IntRigeri
Comment: Grammar fix.
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was renamed from AppArmor/Testing == Requirements ==

A Debian 7.0 (Wheezy) or newer GNU/Linux system is required.

== Install software ==
Line 7: Line 12:

== Enable AppArmor ==
Line 16: Line 23:
See what running executable is currently confined by an AppArmor profile: == Inspect the current state ==

See what running executables are currently confined by an AppArmor profile:
Line 22: Line 31:
One place to find more profiles is [[http://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=new-profile;users=apparmor@packages.debian.org|the patches, with new profiles included, that were submitted to Debian]]. == Enable / install more profiles ==

Find more profiles:

 * in the `apparmor-profiles` package
 *
[[http://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=new-profile;users=apparmor@packages.debian.org|the patches, with new profiles included, that were submitted to Debian]]
 * in Ubuntu
Line 27: Line 42:

== Learn more ==

See the "External links" section on [[AppArmor|the main AppArmor page]].

Requirements

A Debian 7.0 (Wheezy) or newer GNU/Linux system is required.

Install software

Install AppArmor userspace tools and some contributed profiles:

$ sudo apt-get install apparmor apparmor-profiles apparmor-utils

Enable AppArmor

Enable the AppArmor LSM:

$ sudo perl -pi -e 's,GRUB_CMDLINE_LINUX="(.*)"$,GRUB_CMDLINE_LINUX="$1 apparmor=1 security=apparmor",' /etc/default/grub
$ sudo update-grub
$ sudo reboot

Inspect the current state

See what running executables are currently confined by an AppArmor profile:

$ ps auxZ | grep -v '^unconfined'

Enable / install more profiles

Find more profiles:

Once you've dropped the new profile into /etc/apparmor.d/, use apparmor_parser(8) to insert it into the kernel.

AppArmor audit logs can be found in /var/log/kern.log.

Learn more

See the "External links" section on the main AppArmor page.