Salma Hayek shocks on the cover of the Sports Illustrated Swimsuit Issue at 58
We quit Britain for a new life in Australia. The constant sunshine, stunning beaches and easygoing lifestyle was everything we'd ever wanted... until a horrifying twist of fate at Christmas
Moment armed police chainsaw their way through cocky gang leader's front door after he flooded the streets with £2m of drugs in just three months
SNP and Labour leaders line up against Scottish assisted dying law ahead of Holyrood vote TONIGHT - as final Commons showdown on plan for rest of Britain is 'delayed for another month'
BBC faces fresh calls to axe Gary Lineker over pro-Palestine 'Nazi propaganda' post
Top allergy expert reveals ultimate guide to managing hay fever - and why jabs are never the answer
Intel Certifies Shell Lubricant for Cooling AI Data Centers
Read more of this story at Slashdot.
Man, 23, develops shocking 'dropped head syndrome' after battling addiction to one habit for years
'Protected' birds disturbed at Essex nature reserve by 'irresponsibly low' helicopter
'Protected' birds disturbed at Essex nature reserve by 'irresponsibly low' helicopter
Ubuntu Security Reinvented: Hardening Your System with AppArmor
In an age where data breaches and cyber threats are growing both in frequency and sophistication, securing your Linux system is more important than ever. Ubuntu, one of the most popular Linux distributions, comes with a powerful security tool that many users overlook — AppArmor. Designed to provide a robust layer of defense, AppArmor enhances Ubuntu's built-in security model by confining programs with access control profiles.
This article will walk you through the ins and outs of AppArmor, explain why it's a crucial part of a hardened Ubuntu system, and teach you how to leverage it to protect your environment.
Understanding AppArmor: What It Is and Why It MattersAppArmor (Application Armor) is a Mandatory Access Control (MAC) system that supplements the traditional Discretionary Access Control (DAC) provided by Linux file permissions. While DAC relies on user and group ownership for access control, MAC goes a step further by enforcing rules that even privileged users must obey.
AppArmor operates by loading security profiles for individual applications, specifying exactly what files, capabilities, and system resources they are allowed to access. This approach prevents compromised or misbehaving applications from harming the rest of the system.
AppArmor vs. SELinuxWhile SELinux (Security-Enhanced Linux) is another MAC system popular on Red Hat-based distributions, AppArmor is often preferred in Ubuntu environments for its ease of use, human-readable syntax, and simple profile management. Where SELinux can be daunting and complex, AppArmor offers a more user-friendly approach to strong security.
Core Concepts of AppArmorBefore diving into how to use AppArmor, it's important to understand its core concepts:
ProfilesA profile is a set of rules that define what an application can and cannot do. These are usually stored in the /etc/apparmor.d/ directory and loaded into the kernel at runtime.
Modes-
Enforce: The profile is actively enforced, and actions outside the defined rules are blocked.
-
Complain: The profile logs rule violations but doesn’t enforce them, which is useful for debugging.
Profiles specify permissions for:
-
File access (read, write, execute)
-
Capabilities (e.g., net_admin, sys_admin)
-
Network operations
-
Signals and inter-process communications