User Tools

Site Tools


модуль_apparmor

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revision Both sides next revision
модуль_apparmor [2020/11/11 09:59]
val [Определение наличия профилей для служб]
модуль_apparmor [2023/09/08 13:16]
val [Определение наличия и правка профилей для служб]
Line 10: Line 10:
  
   * В Debian 10 включен по умолчанию   * В Debian 10 включен по умолчанию
-  * [[https://​wiki.debian.org/​AppArmor/​HowToUse|AppArmor HowToUse]]+  * [[https://​wiki.debian.org/​AppArmor/​HowToUse|debian ​AppArmor HowToUse]] 
 +  * [[https://​help.ubuntu.com/​community/​AppArmor|ubuntu AppArmor]]
  
 +=== Debian 11 (enable) ===
 <​code>​ <​code>​
 # mkdir /​etc/​default/​grub.d # mkdir /​etc/​default/​grub.d
Line 18: Line 20:
 </​code><​code>​ </​code><​code>​
 GRUB_CMDLINE_LINUX_DEFAULT="​$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor"​ GRUB_CMDLINE_LINUX_DEFAULT="​$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor"​
 +</​code>​
 +
 +=== Ubuntu 20/22 (disable) ===
 +<​code>​
 +# cat /​etc/​default/​grub
 +</​code><​code>​
 +...
 +GRUB_CMDLINE_LINUX="​... apparmor=0"​
 +...
 </​code><​code>​ </​code><​code>​
 # update-grub # update-grub
Line 37: Line 48:
  
 # cat /​etc/​apparmor.d/​usr.sbin.clamd # cat /​etc/​apparmor.d/​usr.sbin.clamd
 +</​code><​code>​
 ... ...
   /disk2/ rw,   /disk2/ rw,
   /disk2/** krw,   /disk2/** krw,
 +  ​
 +  /​var/​CommuniGate/​ rw,
 +  /​var/​CommuniGate/​** krw,
 ... ...
 +</​code><​code>​
 +# cat /​etc/​apparmor.d/​local/​usr.sbin.dhcpd
 +</​code><​code>​
 +  /**/dhcp/ r,
 +  /**/dhcp/** r,
 +</​code>​
 +или
 +<​code>​
 +# rm /​etc/​apparmor.d/​usr.sbin.dhcpd
 +</​code><​code>​
 +# init 6
  
 # apt install apparmor-utils # apt install apparmor-utils
Line 47: Line 73:
  
 # apt install apparmor-profiles # apt install apparmor-profiles
 +
 +# less /​usr/​share/​apparmor/​extra-profiles/​README
  
 # find /​etc/​apparmor.d/​ # find /​etc/​apparmor.d/​
модуль_apparmor.txt · Last modified: 2024/04/26 08:41 by val