Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MVP of AppArmor profile that only deny access to internet #32

Open
fititnt opened this issue Nov 7, 2020 · 0 comments
Open

MVP of AppArmor profile that only deny access to internet #32

fititnt opened this issue Nov 7, 2020 · 0 comments
Labels
apparmor-profile "AppArmor is an effective and easy-to-use Linux application security system." https://apparmor.net/ beyond-tails

Comments

@fititnt
Copy link
Owner

fititnt commented Nov 7, 2020

Let's do an minimum viable product (MVP) of AppArmor profile that shows how to at least block access to internet to some binary.

While (as mentioned on #31 (comment)) I discovered that is possible to generate AppArmor profiles, the idea of this demo here is be somewhat a quick introduction to who already use some distro with AppArmor (or one that is easy to enable) be able to just copy and paste for their own needs.

I know that restrict only internet access is not the best ideal scenario for who already is using AppArmor, but this alone is provides some type of sandboxing not only on Tails.

@fititnt fititnt added the apparmor-profile "AppArmor is an effective and easy-to-use Linux application security system." https://apparmor.net/ label Nov 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
apparmor-profile "AppArmor is an effective and easy-to-use Linux application security system." https://apparmor.net/ beyond-tails
Projects
None yet
Development

No branches or pull requests

1 participant