Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #197594

Apparmor: 1 processes are unconfined but have a profile defined

Show all headers | View raw

Hello
Im trying to make my own profiles for apparmor.

I made a profile for firefox-esr but for some reason i cant get apparmor
to confine it.  I run aa-enforce firefox-esr but nothing change.

Any ideas?
Thanks in advance for your help.

$sudo aa-status
apparmor module is loaded.
21 profiles are loaded.
21 profiles are in enforce mode.
   /etc/apparmor.d/usr.lib.firefox-esr.firefox-esr
   /usr/bin/exo-open
   /usr/bin/firefox
   /usr/bin/freshclam
   /usr/bin/gsettings-data-convert
   /usr/bin/liferea
   /usr/bin/lsb_release
   /usr/bin/mupdf
   /usr/bin/proxy
   /usr/bin/vlc
   /usr/lib/firefox-esr/firefox-esr
   /usr/lib/firefox-esr/plugin-container
   /usr/lib/mupdf/mupdf-x11
   /usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitNetworkProcess
   /usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitWebProcess
   /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1
   thunderbird
   thunderbird//browser_java
   thunderbird//browser_openjdk
   thunderbird//gpg
   thunderbird//sanitized_helper
0 profiles are in complain mode.
4 processes have profiles defined.
3 processes are in enforce mode.
   /usr/bin/freshclam (689)
   /usr/lib/firefox-esr/plugin-container (1843)
   thunderbird (925)
0 processes are in complain mode.
1 processes are unconfined but have a profile defined.
   /usr/lib/firefox-esr/firefox-esr (1798)

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Apparmor: 1 processes are unconfined but have a profile defined Ge <gpdsbe@mailbox.org> - 2018-07-13 18:20 +0200
  Re: Apparmor: 1 processes are unconfined but have a profile defined Reco <recoverym4n@gmail.com> - 2018-07-13 21:50 +0200
    Re: Apparmor: 1 processes are unconfined but have a profile defined Reco <recoverym4n@gmail.com> - 2018-07-13 22:50 +0200
      Re: Apparmor: 1 processes are unconfined but have a profile defined Ge <gpdsbe@mailbox.org> - 2018-07-13 23:00 +0200
        Re: Apparmor: 1 processes are unconfined but have a profile defined Reco <recoverym4n@gmail.com> - 2018-07-14 12:10 +0200

csiph-web