What is AppArmor | AppArmor commands

Channel:

Chris Titus Tech

Subscribers:

688,000

Published on November 28, 2018 4:00:03 PM ● Video Link: https://www.youtube.com/watch?v=KYM-Dzivnjs

Category:

Tutorial

Duration: 8:23

27,829 views

444

In this video, you will learn what is AppArmor, how to use it, and basic AppArmor commands. AppArmor is basically the Debian alternative to RHEL's SELinux.

systemctl status apparmor # Checks status of the AppArmor service and tells you if it is enabled on boot

https://medium.com/information-and-technology/so-what-is-apparmor-64d7ae211ed

sudo aa-status

3 modes
-enforcing
-complain
-unconfined

aa-genprof program.sh
Scan then

Inherit: Creates a rule that is denoted by “ix” within the profile, causes the executed binary to inherit permissions from the parent profile.

Child: Creates a rule that is denoted by “Cx” within the profile, requires a sub-profile to be created within the parent profile and rules must be separately generated for this child (prompts will appear when running scans on the parent).

Deny: Creates a rule that AppArmor prepends with “deny” at the start of the line within the profile, causes the parents access to the resource be denied.

Abort: Exits the AppArmor program without saving any changes.

Finish: Exits the AppArmor program but WILL save changes.


aa-logprof

Checks for program updates.


Live Streams
-----------------------------------------------------------------------------------
►► Every Friday on YouTube
►► Future and Past Streams @ https://www.youtube.com/c/ChrisTitusTech
►► Chill and Hangout Streams on Weekdays @ https://www.twitch.tv/christitustech

Support My Work
-----------------------------------------------------------------------------------
►► Chris Titus Tech Digital Downloads ➜ https://www.cttstore.com/downloads
►► Product and Service Recommendations ➜ https://www.christitus.com/recommendations
►► My YouTube Gear and Computers ➜ https://www.amazon.com/shop/christitustech

Other Places to Find Me
-----------------------------------------------------------------------------------
►► Titus Tech Talk ➜ https://www.youtube.com/c/TitusTechTalk
►► Twitter ➜ https://twitter.com/christitustech

DISCLAIMER: This video and description contain affiliate links, which means that if you click on one of the product links, I’ll receive a small commission. This helps supports the channel and allows us to continue to make videos like this. Thank you for your support!