Root/
Source at commit ec7cab4cbb721bff91ec924ec691efd8daf36579 created 12 years 8 months ago. By Maarten ter Huurne, MIPS: JZ4740: A320: Updated quickstart documentation. | |
---|---|
1 | --- What is AppArmor? --- |
2 | |
3 | AppArmor is MAC style security extension for the Linux kernel. It implements |
4 | a task centered policy, with task "profiles" being created and loaded |
5 | from user space. Tasks on the system that do not have a profile defined for |
6 | them run in an unconfined state which is equivalent to standard Linux DAC |
7 | permissions. |
8 | |
9 | --- How to enable/disable --- |
10 | |
11 | set CONFIG_SECURITY_APPARMOR=y |
12 | |
13 | If AppArmor should be selected as the default security module then |
14 | set CONFIG_DEFAULT_SECURITY="apparmor" |
15 | and CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 |
16 | |
17 | Build the kernel |
18 | |
19 | If AppArmor is not the default security module it can be enabled by passing |
20 | security=apparmor on the kernel's command line. |
21 | |
22 | If AppArmor is the default security module it can be disabled by passing |
23 | apparmor=0, security=XXXX (where XXX is valid security module), on the |
24 | kernel's command line |
25 | |
26 | For AppArmor to enforce any restrictions beyond standard Linux DAC permissions |
27 | policy must be loaded into the kernel from user space (see the Documentation |
28 | and tools links). |
29 | |
30 | --- Documentation --- |
31 | |
32 | Documentation can be found on the wiki. |
33 | |
34 | --- Links --- |
35 | |
36 | Mailing List - apparmor@lists.ubuntu.com |
37 | Wiki - http://apparmor.wiki.kernel.org/ |
38 | User space tools - https://launchpad.net/apparmor |
39 | Kernel module - git://git.kernel.org/pub/scm/linux/kernel/git/jj/apparmor-dev.git |
40 |
Branches:
ben-wpan
ben-wpan-stefan
javiroman/ks7010
jz-2.6.34
jz-2.6.34-rc5
jz-2.6.34-rc6
jz-2.6.34-rc7
jz-2.6.35
jz-2.6.36
jz-2.6.37
jz-2.6.38
jz-2.6.39
jz-3.0
jz-3.1
jz-3.11
jz-3.12
jz-3.13
jz-3.15
jz-3.16
jz-3.18-dt
jz-3.2
jz-3.3
jz-3.4
jz-3.5
jz-3.6
jz-3.6-rc2-pwm
jz-3.9
jz-3.9-clk
jz-3.9-rc8
jz47xx
jz47xx-2.6.38
master
Tags:
od-2011-09-04
od-2011-09-18
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v3.9