|
698.
|
|
|
sudo apt-get install apparmor-profiles
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:656(command) serverguide/C/security.xml:925(command)
|
|
699.
|
|
|
AppArmor profiles have two modes of execution:
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:927(para)
|
|
700.
|
|
|
Complaining/Learning: profile violations are permitted and logged. Useful for testing and developing new profiles.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:932(para)
|
|
701.
|
|
|
Enforced/Confined: enforces profile policy as well as logging the violation.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:937(para)
|
|
702.
|
|
|
Using AppArmor
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:943(title)
|
|
703.
|
|
|
The <application>apparmor-utils</application> package contains command line utilities that you can use to change the <application>AppArmor</application> execution mode, find the status of a profile, create new profiles, etc.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:944(para)
|
|
704.
|
|
|
<application>apparmor_status</application> is used to view the current status of AppArmor profiles.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:950(para)
|
|
705.
|
|
|
sudo apparmor_status
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:954(command)
|
|
706.
|
|
|
<application>aa-complain</application> places a profile into <emphasis>complain</emphasis> mode.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:958(para)
|
|
707.
|
|
|
sudo aa-complain /path/to/bin
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/security.xml:962(command)
|