User Tools
модуль_apparmor
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
модуль_apparmor [2020/12/02 13:01] val [Определение наличия и правка профилей для служб] |
модуль_apparmor [2024/04/26 08:41] val |
||
|---|---|---|---|
| Line 9: | Line 9: | ||
| ==== Включение/Выключение ==== | ==== Включение/Выключение ==== | ||
| - | * В Debian 10 включен по умолчанию | + | * В Debian/Ubuntu включен по умолчанию |
| - | * [[https://wiki.debian.org/AppArmor/HowToUse|AppArmor HowToUse]] | + | * [[https://wiki.debian.org/AppArmor/HowToUse|debian AppArmor HowToUse]] |
| + | * [[https://help.ubuntu.com/community/AppArmor|ubuntu AppArmor]] | ||
| + | === Debian 11 (enable) === | ||
| <code> | <code> | ||
| # mkdir /etc/default/grub.d | # mkdir /etc/default/grub.d | ||
| Line 18: | Line 20: | ||
| </code><code> | </code><code> | ||
| GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor" | GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor" | ||
| + | </code> | ||
| + | |||
| + | === Ubuntu 20/22 (disable) === | ||
| + | <code> | ||
| + | # cat /etc/default/grub | ||
| + | </code><code> | ||
| + | ... | ||
| + | GRUB_CMDLINE_LINUX="... apparmor=0" | ||
| + | ... | ||
| </code><code> | </code><code> | ||
| # update-grub | # update-grub | ||
| Line 37: | Line 48: | ||
| # cat /etc/apparmor.d/usr.sbin.clamd | # cat /etc/apparmor.d/usr.sbin.clamd | ||
| + | </code><code> | ||
| ... | ... | ||
| /disk2/ rw, | /disk2/ rw, | ||
| /disk2/** krw, | /disk2/** krw, | ||
| + | | ||
| + | /var/CommuniGate/ rw, | ||
| + | /var/CommuniGate/** krw, | ||
| ... | ... | ||
| + | </code><code> | ||
| + | # cat /etc/apparmor.d/local/usr.sbin.dhcpd | ||
| + | </code><code> | ||
| + | /**/dhcp/ r, | ||
| + | /**/dhcp/** r, | ||
| + | </code> | ||
| + | или | ||
| + | <code> | ||
| + | # rm /etc/apparmor.d/usr.sbin.dhcpd | ||
| + | </code><code> | ||
| # init 6 | # init 6 | ||
| Line 49: | Line 73: | ||
| # apt install apparmor-profiles | # apt install apparmor-profiles | ||
| + | |||
| + | # less /usr/share/apparmor/extra-profiles/README | ||
| # find /etc/apparmor.d/ | # find /etc/apparmor.d/ | ||
модуль_apparmor.txt · Last modified: 2024/05/14 14:15 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
