Talk:AppArmor

About the order of Install, kernel parameter, and apparmor.service

I guess Apparmor 's order seem some messy. Mybe we should give a list to make people have a more easy way to read this wiki?

Such:

For linux

1. Install apparmor

2. Modify your kernel parameter

3. Enable apparmor.service

For custom kernel

......

Dragonwater (talk) 03:37, 28 July 2020 (UTC)

What really do profiles do?

I don't really understand how exactly profiles work. I've just installed apparmor and I've got a bunch of profiles in /etc/apparmor.d/. These are named after, in some cases, applications and, in other cases, something else (maybe?). If I enable apparmor.service, I'm enabling all these profiles? Why would I want to do that when half the things I've never even heard of? If I use different applications, am I supposed to write different profiles? I don't really get any sense from the article as it stands of what I might reasonably expect apparmor to do for me and how to get it to do it. I feel as if it's designed for a different system, but I don't know if that just means it makes no sense to use it or if I'm not understanding what it does. --cfr (talk) 01:01, 16 November 2022 (UTC)

See AppArmor FAQ: What is a Profile? Policy?.

If no profile applies to an application, it is not confined. In that case you can write a profile yourself.

-- nl6720 (talk) 10:14, 18 November 2022 (UTC)

should apparmor.d be recommended?

https://github.com/roddhjav/apparmor.d features around 1500+ profiles by default.

Quelln (talk) 05:27, 30 March 2024 (UTC)

As the author of apparmor.d, I think the project is not stable enough to be recommended by default. It could however be mentioned. Roddhjav (talk) 11:15, 30 March 2024 (UTC)

Awesome! Thanks a lot for creating that amazing project :) Quelln (talk) 14:33, 30 March 2024 (UTC)

Should I mention the aur package or the git repository?

```

A set of prewritten AppArmor profiles can be found in the apparmor.d project, however, as of writing, the project is not currently stable.

```

does this sound good? I am new to the wiki. Quelln (talk) 14:41, 30 March 2024 (UTC)

It sound good to me. Roddhjav (talk) 11:20, 31 March 2024 (UTC)

maybe remove "prewritten". Roddhjav (talk) 11:22, 31 March 2024 (UTC)

Alright, thank you! Quelln (talk) 14:28, 31 March 2024 (UTC)

I've moved your addition a little with Special:diff/805369. Closing the item. Cheers. --Indigo (talk) 19:06, 5 April 2024 (UTC)

Sure, thank you! Quelln (talk) 11:53, 7 April 2024 (UTC)