[GH-ISSUE #75] 47 - Enforce apparmor profiles #33

Closed
opened 2026-03-03 13:58:32 +03:00 by kerem · 1 comment
Owner

Originally created by @hellresistor on GitHub (Jun 8, 2020).
Original GitHub issue: https://github.com/konstruktoid/hardening/issues/75

--- On Cli running ---

[47] Enforce apparmor profiles
.....
ERROR: /etc/apparmor.d/lxc-containers contains no profile
Setting /etc/apparmor.d/lxc-containers to enforce mode.

--- On LOG file ---

Jun 08 17:22:40 tester systemd[1]: Starting AppArmor initialization...
Jun 08 17:22:40 tester apparmor[108961]:  * Starting AppArmor profiles
Jun 08 17:22:40 tester apparmor[108961]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Jun 08 17:22:40 tester apparmor[108961]:    ...done.
Jun 08 17:22:40 tester systemd[1]: Started AppArmor initialization.
Originally created by @hellresistor on GitHub (Jun 8, 2020). Original GitHub issue: https://github.com/konstruktoid/hardening/issues/75 --- On Cli running --- ``` [47] Enforce apparmor profiles ..... ERROR: /etc/apparmor.d/lxc-containers contains no profile Setting /etc/apparmor.d/lxc-containers to enforce mode. ``` --- On LOG file --- ``` Jun 08 17:22:40 tester systemd[1]: Starting AppArmor initialization... Jun 08 17:22:40 tester apparmor[108961]: * Starting AppArmor profiles Jun 08 17:22:40 tester apparmor[108961]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd Jun 08 17:22:40 tester apparmor[108961]: ...done. Jun 08 17:22:40 tester systemd[1]: Started AppArmor initialization. ```
kerem closed this issue 2026-03-03 13:58:32 +03:00
Author
Owner

@konstruktoid commented on GitHub (Jun 8, 2020):

What's the issue? https://github.com/konstruktoid/hardening/blob/master/scripts/29_apparmor#L19 enforces any available profile, and /etc/apparmor.d/lxc-containers contains no profile.

<!-- gh-comment-id:640879871 --> @konstruktoid commented on GitHub (Jun 8, 2020): What's the issue? https://github.com/konstruktoid/hardening/blob/master/scripts/29_apparmor#L19 enforces any available profile, and `/etc/apparmor.d/lxc-containers` contains no profile.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hardening#33
No description provided.