Questions tagged [apparmor]
AppArmor is a Mandatory Access Control (MAC) mechanism which can be used to confine processes on Linux systems. Use AppArmor tag in questions about AppArmor in general, AppArmor profiles or AppArmor related problems.
116 questions
0 votes
1 answer
27 views
AppArmor "network netlink raw" vs "network raw"
I am using Debian 13. I am trying to define AppArmor rules that would prevent a program from accessing the internet. I am currently using these rules: deny network inet deny network inet6 deny network ...
1 vote
1 answer
81 views
AppArmor Weird Behavior Debian 13.1
I'm new to AppArmor. I'm trying to create a more restrictive AppArmor configuration for my plex server. I used chatgpt to walk me through this process, but it has seemingly broken my AppArmor install ...
1 vote
0 answers
22 views
Restricting access to all subpaths inside a folder except for one using AppArmor
To allow access to all paths in AppArmor, one uses allow file /{,**}. Now, suppose we want to deny access to all subpaths in a folder in except for one, e.g., allow access to /upper/lower but deny ...
2 votes
1 answer
101 views
transmission-gtk spamming dmesg with messages about /proc/sys/net/ipv6/conf/all/disable_ipv6
I'm using transmission-gtk 4.1.0-beta.2 on Devuan GNU/Linux Excalibur. My dmesg log is spammed with the following kind of message: [Jul 4 14:47] audit: type=1400 audit(1751629628.491:75895): apparmor=&...
1 vote
0 answers
132 views
Getting a large number of type=1400 apparmor=ALLOWED dmesg lines
My dmesg log is littered with the following kind of lines: [ +0.000009] audit: type=1400 audit(1745688898.020:223710): apparmor="ALLOWED" operation="getattr" class="file"...
0 votes
0 answers
215 views
Weird apparmor unix socket denial for sudo
I have a custom SSH server written in go that wraps commands called by the client in apparmor. One of the profiles confines sudo and what commands it can call. It started failing on a proxmox backup ...
2 votes
1 answer
773 views
Debian 12 App Armor Enabled but aa-status does not work. Why?
I've installed Debian 12 Bookworm recently and, as far as I could read about a fresh installation, it comes with app-armor pre-installed by default. I'm running the command aa-status as root but it's ...
0 votes
2 answers
2k views
AppArmor Error preventing removing AA, Repairing AA or install new apps with Apt
AppArmor is causing problems with my system. I have AppArmor disabled now because it was preventing me from booting. I am unable to install new apt apps. When I try anyway I get... E: dpkg was ...