mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-12-25 06:27:49 +01:00
1.6 KiB
1.6 KiB
title |
---|
AppArmor.d |
AppArmor.d
Full set of AppArmor profiles
!!! danger "Help Wanted"
This project is still in its early development. Help is very welcome;
see [Development](development/)
AppArmor.d is a set of over 1400 AppArmor profiles whose aim is to confine most Linux based applications and processes.
Purpose
- Confine all root processes such as all
systemd
tools,bluetooth
,dbus
,polkit
,NetworkManager
,OpenVPN
,GDM
,rtkit
,colord
- Confine all Desktop environments
- Confine all user services such as
Pipewire
,Gvfsd
,dbus
,xdg
,xwayland
- Confine some "special" user applications: web browser, file browser...
- Should not break a normal usage of the confined software
See the Concepts page for more detail on the architecture.
Goals
- Target both desktops and servers
- Support all distributions that support AppArmor:
- Support all major desktop environments:
- Currently only :material-gnome: Gnome
- Fully tested (Work in progress)
Presentation