apparmor.d/docs/index.md

55 lines
2.2 KiB
Markdown
Raw Normal View History

2023-01-29 22:18:22 +01:00
---
title: AppArmor.d
---
2024-02-23 21:14:21 +01:00
<!-- https://youtu.be/9dqHOrM4KHo?t=146
Business Benefits of an LSM
- Increased IT productivity -> ????
- Regulatory Compliance
- Peace of mind: Protect against unknown threats and "zero-days" attacks -->
2023-01-29 22:18:22 +01:00
**Full set of AppArmor profiles**
!!! danger "Help Wanted"
This project is still in its early development. Help is very welcome;
2023-10-27 16:27:23 +02:00
see [Development](development/index.md)
2023-01-29 22:18:22 +01:00
2024-02-23 21:14:21 +01:00
**AppArmor.d** is a set of over 1500 AppArmor profiles whose aim is to confine most Linux based applications and processes.
2023-01-29 22:18:22 +01:00
**Purpose**
2024-02-23 21:14:21 +01:00
- Confine all root processes such as all `systemd` tools, `bluetooth`, `dbus`, `polkit`, `NetworkManager`, `OpenVPN`, `GDM`, `rtkit`, `colord`
2023-01-29 22:18:22 +01:00
- Confine all Desktop environments
- Confine all user services such as `Pipewire`, `Gvfsd`, `dbus`, `xdg`, `xwayland`
- Confine some *"special"* user applications: web browsers, file managers, etc
2023-01-29 22:18:22 +01:00
- Should not break a normal usage of the confined software
2023-10-27 16:27:23 +02:00
See the [Concepts](concepts.md)' page for more detail on the architecture.
2023-01-29 22:18:22 +01:00
**Goals**
- Target both desktops and servers
- Support for all distributions that support AppArmor:
* [:material-arch: Arch Linux](install.md#archlinux)
2023-10-27 16:27:23 +02:00
* [:material-ubuntu: Ubuntu 22.04](install.md#ubuntu-debian)
* [:material-debian: Debian 12](install.md#ubuntu-debian)
2024-06-08 03:48:52 +02:00
* [:simple-suse: openSUSE Tumbleweed](install.md#opensuse)
- Support for all major desktop environments:
2024-01-28 00:13:43 +01:00
- [x] :material-gnome: Gnome
- [ ] :simple-kde: KDE *(work in progress)*
- Fully tested (Work in progress)
**Presentations**
Building the largest set of AppArmor profiles:
- [Linux Security Summit North America (LSS-NA 2023)](https://events.linuxfoundation.org/linux-security-summit-north-america/) *([Slide](https://lssna2023.sched.com/event/1K7bI/building-the-largest-working-set-of-apparmor-profiles-alexandre-pujol-the-collaboratory-tudublin), [Video](https://www.youtube.com/watch?v=OzyalrOzxE8))*
2024-01-28 00:13:43 +01:00
- [Ubuntu Summit 2023](https://events.canonical.com/event/31/) *([Slide](https://events.canonical.com/event/31/contributions/209/), [Video](https://www.youtube.com/watch?v=GK1J0TlxnFI))*
2023-12-04 23:31:42 +01:00
**Chat**
A development chat is available on https://matrix.to/#/#apparmor.d:matrix.org