Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #238977 > unrolled thread

apparmors extra profiles.

Back to article view | Back to linux.debian.user

Contents

  apparmors extra profiles. Georgios <gpdsbe+debian@mailbox.org> - 2021-08-18 21:40 +0200
    Re: apparmors extra profiles. "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-08-18 22:00 +0200
    Re: apparmors extra profiles. raf <debian@raf.org> - 2021-08-19 11:00 +0200

#238977 — apparmors extra profiles.

Hi!
Im trying to install debian 11 on virtual machine manager in order to
prepare my self for moving my laptop to debian 11.

Default install leaves unconfined a lot of apps so I tried to install
extra profiles.
According to documentation it supposed to install extra profiles at
/usr/share/apparmor/extra-profiles/
but there is no apparmor folder. only apparmor-features.

I would like to ask if anyone knows where apparmor-profiles-extra
install its profiles?

Thanks in advance
George

[toc] | [next] | [standalone]

#238979

Le 18/08/2021 à 21:32, Georgios a écrit :
> Hi!
> Im trying to install debian 11 on virtual machine manager in order to
> prepare my self for moving my laptop to debian 11.
> 
> Default install leaves unconfined a lot of apps so I tried to install
> extra profiles.
> According to documentation it supposed to install extra profiles at
> /usr/share/apparmor/extra-profiles/
> but there is no apparmor folder. only apparmor-features.
> 
> I would like to ask if anyone knows where apparmor-profiles-extra
> install its profiles?
> 
> Thanks in advance
> George
> 

Hello,

I have "/usr/share/apparmor/extra-profiles" on my system. It is created 
by the "apparmor-profiles" package:

$ dpkg -S /usr/share/apparmor/extra-profiles/

apparmor-profiles: /usr/share/apparmor/extra-profiles

I guess you can just create it yourself.

All the best.

[toc] | [prev] | [next] | [standalone]

#239024

On Wed, Aug 18, 2021 at 10:32:11PM +0300, Georgios <gpdsbe+debian@mailbox.org> wrote:

> Hi!
> Im trying to install debian 11 on virtual machine manager in order to
> prepare my self for moving my laptop to debian 11.
> 
> Default install leaves unconfined a lot of apps so I tried to install
> extra profiles.
> According to documentation it supposed to install extra profiles at
> /usr/share/apparmor/extra-profiles/
> but there is no apparmor folder. only apparmor-features.
> 
> I would like to ask if anyone knows where apparmor-profiles-extra
> install its profiles?
> 
> Thanks in advance
> George

Strangely, it's the apparmor-profiles package that includes
/usr/share/apparmor/extra-profiles:

  > dpkg-query -L apparmor-profiles
  [...]
  /usr/share/apparmor/extra-profiles
  /usr/share/apparmor/extra-profiles/README
  /usr/share/apparmor/extra-profiles/bin.netstat
  /usr/share/apparmor/extra-profiles/etc.cron.daily.logrotate
  [...]

The apparmor-profiles-extra package only contains:

  > dpkg-query -L apparmor-profiles-extra
  /etc
  /etc/apparmor.d
  /etc/apparmor.d/abstractions
  /etc/apparmor.d/abstractions/gstreamer
  /etc/apparmor.d/abstractions/totem
  /etc/apparmor.d/local
  /etc/apparmor.d/usr.bin.irssi
  /etc/apparmor.d/usr.bin.pidgin
  /etc/apparmor.d/usr.bin.totem
  /etc/apparmor.d/usr.bin.totem-previewers
  /etc/apparmor.d/usr.sbin.apt-cacher-ng
  /usr
  /usr/share
  /usr/share/doc
  /usr/share/doc/apparmor-profiles-extra
  /usr/share/doc/apparmor-profiles-extra/README.Debian
  /usr/share/doc/apparmor-profiles-extra/changelog.gz
  /usr/share/doc/apparmor-profiles-extra/copyright

So you probably haven't installed the apparmor-profiles package.

  apt install apparmor-profiles

Check what apparmor packages you have with:

  dpkg-query -l | grep apparmor

And compare it with what is available:

  apt-cache search apparmor

And install any you think you'd like.

cheers,
raf

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web