AppArmor - Linux Security

Name: AppArmor - Linux Security
Rating: 3.7 (106 reviews)

Secure your Linux computer with AppArmor

Created byPeter A

Last updated 4/2019

English

English [Auto],

What you'll learn

How to use AppArmor
How to prevent Linux Apps from accessing the internet
How to prevent Linux Apps from accessing directories, reading or writing files
How to increase your Linux computers security
How to create and use AppArmor profiles

Course content

3 sections • 12 lectures • 38m total length

What can AppArmor do?1:05
Explore how AppArmor, a Linux security module, uses profiles to control what applications can do, including internet access and reading files or directories, with examples like Firefox and Apache.
AppArmor on Suse Linux2:25
Explore AppArmor on SUSE Linux by verifying the default installation, checking its status with sudo service apparmor status, and using the graphical user interface to enable or disable protection.
AppArmor on Ubuntu Linux3:14
AppArmor on Ubuntu Linux enforces what applications can do using profiles. It restricts internet, file, and directory access and ships with default profiles.
AppArmor Service2:09
Learn how to manage the AppArmor service on Ubuntu and openSUSE by checking its status with systemctl, and starting or stopping it to ensure it runs by default.

Why Profiles?1:42
AppArmor profiles control what each app can do, listing apps and governing access to the internet and directories, with modes enforce and complain and a disable option.
Profile Types3:10
Learn how AppArmor uses profiles to govern what apps can do, check profile status and modes such as enforcement, complain, and confined to decide permissions.
Create an App Profile6:03
Create an app profile for gedit using aa-genprof, monitor events, and decide allow or deny for actions. The generated profile restricts access, such as denying reads of the home directory.
Enable/Disable Profile5:31
Learn to enable and disable AppArmor profiles by checking loaded profiles with aa-status, linking profiles to /disable, and using apparmor_parser to replace or remove profiles in the kernel.
Profile Modes5:09
Learn to view and switch AppArmor profiles between enforce, complain, and unconfined modes with aa status and aa enforce, aa complain, and aa disable, and apply profiles to specific programs.

Deny Reading Directories for App2:35
Learn to restrict apps with AppArmor by adding deny rules to a directory, reload and enforce the profile, and verify that read access is blocked.
Deny Internet Access for App3:25
Use AppArmor to deny internet access for a program by editing its profile and reloading the service. Test with a web page, then remove rules to restore connectivity.
aa-logprof1:44
Use aa-logprof to audit AppArmor events and update existing profiles to allow or deny programs. Save changes or abort, and explore confined versus manual profile updates.

Requirements

You need Ubuntu Linux or Suse Linux installed

Description

In this course you will learn how to use AppArmor.

AppArmor lets you control whats apps can do. You can decide if an app is allowed to access the internet, if its allowed to read your home directory, your system files, to write files or anything else.

By taking this course you'll be able to increase the security of your Linux system. You will need Ubuntu Linux or OpenSuse Linux for this course.

Who this course is for:

Linux users that want to harden their system

AppArmor - Linux Security

What you'll learn

Explore related topics

Course content

Introduction4 lectures • 9min

Profiles5 lectures • 22min

App Rules3 lectures • 8min

Requirements

Description

Who this course is for: