mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
50 lines
1.9 KiB
Markdown
50 lines
1.9 KiB
Markdown
---
|
|
title: AppArmor.d
|
|
---
|
|
|
|
# AppArmor.d
|
|
|
|
**Full set of AppArmor profiles**
|
|
|
|
!!! danger "Help Wanted"
|
|
|
|
This project is still in its early development. Help is very welcome;
|
|
see [Development](development/index.md)
|
|
|
|
**AppArmor.d** is a set of over 1400 AppArmor profiles whose aim is to confine
|
|
most Linux based applications and processes.
|
|
|
|
**Purpose**
|
|
|
|
- Confine all root processes such as all `systemd` tools, `bluetooth`, `dbus`,
|
|
`polkit`, `NetworkManager`, `OpenVPN`, `GDM`, `rtkit`, `colord`
|
|
- Confine all Desktop environments
|
|
- Confine all user services such as `Pipewire`, `Gvfsd`, `dbus`, `xdg`, `xwayland`
|
|
- Confine some *"special"* user applications: web browser, file browser...
|
|
- Should not break a normal usage of the confined software
|
|
|
|
See the [Concepts](concepts.md)' page for more detail on the architecture.
|
|
|
|
**Goals**
|
|
|
|
- Target both desktops and servers
|
|
- Support all distributions that support AppArmor:
|
|
* [:material-arch: Archlinux](install.md#archlinux)
|
|
* [:material-ubuntu: Ubuntu 22.04](install.md#ubuntu-debian)
|
|
* [:material-debian: Debian 12](install.md#ubuntu-debian)
|
|
* [:simple-suse: OpenSUSE Tumbleweed](install.md#opensuse)
|
|
- Support all major desktop environments:
|
|
* Currently only :material-gnome: Gnome
|
|
- Fully tested (Work in progress)
|
|
|
|
**Presentations**
|
|
|
|
Building large set of AppArmor profiles:
|
|
|
|
- [Linux Security Summit North America (LSS-NA 2023)](https://events.linuxfoundation.org/linux-security-summit-north-america/) *([Slide](https://lssna2023.sched.com/event/1K7bI/building-the-largest-working-set-of-apparmor-profiles-alexandre-pujol-the-collaboratory-tudublin), [Video](https://www.youtube.com/watch?v=OzyalrOzxE8))*
|
|
- [Ubuntu Summit 2023](https://events.canonical.com/event/31/) *([Slide](https://events.canonical.com/event/31/contributions/209/))*
|
|
|
|
**Chat**
|
|
|
|
A development chat is available on https://matrix.to/#/#apparmor.d:matrix.org
|