User Tools

Site Tools


модуль_apparmor

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
модуль_apparmor [2020/12/29 09:49]
val [Определение наличия и правка профилей для служб]
модуль_apparmor [2023/09/08 13:16] (current)
val [Определение наличия и правка профилей для служб]
Line 10: Line 10:
  
   * В Debian 10 включен по умолчанию   * В Debian 10 включен по умолчанию
-  * [[https://​wiki.debian.org/​AppArmor/​HowToUse|AppArmor HowToUse]]+  * [[https://​wiki.debian.org/​AppArmor/​HowToUse|debian ​AppArmor HowToUse]] 
 +  * [[https://​help.ubuntu.com/​community/​AppArmor|ubuntu AppArmor]]
  
 +=== Debian 11 (enable) ===
 <​code>​ <​code>​
 # mkdir /​etc/​default/​grub.d # mkdir /​etc/​default/​grub.d
Line 18: Line 20:
 </​code><​code>​ </​code><​code>​
 GRUB_CMDLINE_LINUX_DEFAULT="​$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor"​ GRUB_CMDLINE_LINUX_DEFAULT="​$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor"​
 +</​code>​
 +
 +=== Ubuntu 20/22 (disable) ===
 +<​code>​
 +# cat /​etc/​default/​grub
 +</​code><​code>​
 +...
 +GRUB_CMDLINE_LINUX="​... apparmor=0"​
 +...
 </​code><​code>​ </​code><​code>​
 # update-grub # update-grub
Line 37: Line 48:
  
 # cat /​etc/​apparmor.d/​usr.sbin.clamd # cat /​etc/​apparmor.d/​usr.sbin.clamd
 +</​code><​code>​
 ... ...
   /disk2/ rw,   /disk2/ rw,
Line 44: Line 56:
   /​var/​CommuniGate/​** krw,   /​var/​CommuniGate/​** krw,
 ... ...
 +</​code><​code>​ 
 +# cat /​etc/​apparmor.d/​local/​usr.sbin.dhcpd 
 +</​code><​code>​ 
 +  /**/dhcp/ r, 
 +  /**/dhcp/** r, 
 +</​code>​ 
 +или 
 +<​code>​ 
 +# rm /​etc/​apparmor.d/​usr.sbin.dhcpd 
 +</​code><​code>​
 # init 6 # init 6
  
Line 52: Line 73:
  
 # apt install apparmor-profiles # apt install apparmor-profiles
 +
 +# less /​usr/​share/​apparmor/​extra-profiles/​README
  
 # find /​etc/​apparmor.d/​ # find /​etc/​apparmor.d/​
модуль_apparmor.1609224570.txt.gz · Last modified: 2020/12/29 09:49 by val