apparmor.txt

Version: - FREEBSD - FREEBSD-13-STABLE - FREEBSD-13-0 - FREEBSD-12-STABLE - FREEBSD-12-0 - FREEBSD-11-STABLE - FREEBSD-11-0 - FREEBSD-10-STABLE - FREEBSD-10-0 - FREEBSD-9-STABLE - FREEBSD-9-0 - FREEBSD-8-STABLE - FREEBSD-8-0 - FREEBSD-7-STABLE - FREEBSD-7-0 - FREEBSD-6-STABLE - FREEBSD-6-0 - FREEBSD-5-STABLE - FREEBSD-5-0 - FREEBSD-4-STABLE - FREEBSD-3-STABLE - FREEBSD22 - l41 - OPENBSD - linux-2.6 - MK84 - PLAN9 - xnu-8792
SearchContext: - none - 3 - 10

    1 --- What is AppArmor? ---
    2 
    3 AppArmor is MAC style security extension for the Linux kernel.  It implements
    4 a task centered policy, with task "profiles" being created and loaded
    5 from user space.  Tasks on the system that do not have a profile defined for
    6 them run in an unconfined state which is equivalent to standard Linux DAC
    7 permissions.
    8 
    9 --- How to enable/disable ---
   10 
   11 set CONFIG_SECURITY_APPARMOR=y
   12 
   13 If AppArmor should be selected as the default security module then
   14    set CONFIG_DEFAULT_SECURITY="apparmor"
   15    and CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
   16 
   17 Build the kernel
   18 
   19 If AppArmor is not the default security module it can be enabled by passing
   20 security=apparmor on the kernel's command line.
   21 
   22 If AppArmor is the default security module it can be disabled by passing
   23 apparmor=0, security=XXXX (where XXX is valid security module), on the
   24 kernel's command line
   25 
   26 For AppArmor to enforce any restrictions beyond standard Linux DAC permissions
   27 policy must be loaded into the kernel from user space (see the Documentation
   28 and tools links).
   29 
   30 --- Documentation ---
   31 
   32 Documentation can be found on the wiki.
   33 
   34 --- Links ---
   35 
   36 Mailing List - apparmor@lists.ubuntu.com
   37 Wiki - http://apparmor.wiki.kernel.org/
   38 User space tools - https://launchpad.net/apparmor
   39 Kernel module - git://git.kernel.org/pub/scm/linux/kernel/git/jj/apparmor-dev.git

Cache object: 3f6e411f60e3dee7ce642b6d5cfeafa8

[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.

FreeBSD/Linux Kernel Cross Reference sys/Documentation/apparmor.txt

FreeBSD/Linux Kernel Cross Reference
sys/Documentation/apparmor.txt