apparmor.d/docs/index.md
2023-06-13 17:11:30 +01:00

1.6 KiB

title
AppArmor.d

AppArmor.d

Full set of AppArmor profiles

!!! danger "Help Wanted"

This project is still in its early development. Help is very welcome; 
see [Development](development/)

AppArmor.d is a set of over 1400 AppArmor profiles whose aim is to confine most Linux based applications and processes.

Purpose

  • Confine all root processes such as all systemd tools, bluetooth, dbus, polkit, NetworkManager, OpenVPN, GDM, rtkit, colord
  • Confine all Desktop environments
  • Confine all user services such as Pipewire, Gvfsd, dbus, xdg, xwayland
  • Confine some "special" user applications: web browser, file browser...
  • Should not break a normal usage of the confined software

See the Concepts page for more detail on the architecture.

Goals

Presentation