8u6-57r34k / apparmorprofiles

AppArmor Profiles for Personal System and Server

AppArmor Profiles

AppArmor profiles for my personal computer and server
Report Bug · Request Feature

Table of Contents

1. About The Project
2. Getting Started
3. Usage
4. Contributing
5. License

About The Project

Contains all of personal important apparmor profiles used in my system and server.

This repo will always be updating to improve security of interactions between said software and the system. There are multiple profiles out in the internet, but these profiles are implemented and improved focusing on particular preferences.

Getting Started

To use the same profiles, I recommend to follow the following steps:

1. As the mentioned system runs Void Linux:

sudo xbps-install apparmor libapparmor libapparmor-devel runit-void-apparmor

2. Append the following to GRUB_CMDLINE_LINUX_DEFAULT in /etc/default/grub

apparmor=1 security=apparmor

3. Set default mode to complain by changing the variable APPARMOR in /etc/default/apparmor

APPARMOR=complain

4. Clone the repository

git clone github.com/70xH/AppArmorProfs

5. Copy the files in the repo to the folder /etc/apparmor.d/

6. Enforce the profile rules by using aa-enforce. For example

sudo aa-enforce <program_path>

Usage

This section will cover a simple example of how to write your own profile

TODO

Contributing

Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

1. Fork the Project
2. Create your Feature Branch (git checkout -b profile/NewProfile)
3. Commit your Changes (git commit -m 'Add some NewProfile')
4. Push to the Branch (git push origin profile/NewProfile)
5. Open a Pull Request

License

Distributed under the MIT License. See LICENSE for more information.