Add requirements section, learn more section, profiles sources and section titles.
|Deletions are marked like this.||Additions are marked like this.|
|Line 25:||Line 25:|
|See what running executable is currently confined by an AppArmor profile:||See what running executables are currently confined by an AppArmor profile:|
A Debian 7.0 (Wheezy) or newer GNU/Linux system is required.
Install AppArmor userspace tools and some contributed profiles:
$ sudo apt-get install apparmor apparmor-profiles apparmor-utils
Enable the AppArmor LSM:
$ sudo perl -pi -e 's,GRUB_CMDLINE_LINUX="(.*)"$,GRUB_CMDLINE_LINUX="$1 apparmor=1 security=apparmor",' /etc/default/grub $ sudo update-grub $ sudo reboot
Inspect the current state
See what running executables are currently confined by an AppArmor profile:
$ ps auxZ | grep -v '^unconfined'
Enable / install more profiles
Find more profiles:
in the apparmor-profiles package
- in Ubuntu
Once you've dropped the new profile into /etc/apparmor.d/, use apparmor_parser(8) to insert it into the kernel.
AppArmor audit logs can be found in /var/log/kern.log.
See the "External links" section on the main AppArmor page.