anybody tried apparmor?

Message

meyerm · Post by **meyerm** » Sun Jan 29, 2006 5:33 pm

Hi there,

I'm sure you've already heared about Novell opening apparmor. Now I would like to ask you, if anybody here already tried it and can give some comparison with the already included techniques inside hardened gentoo. Do you thing apparmor will also be supported "out-of-the-box"? What are the advantages / disadvantages compared to SELinux / RSBAC?

Thank you,
M

ph03n1x · Post by **ph03n1x** » Sat Feb 11, 2006 10:50 pm

Nobody yet?

soulwarrior · Post by **soulwarrior** » Tue Feb 28, 2006 6:25 am

I just read this on the apparmor-dev maillist:

I had a chat with these three Gentoo people while I was at FOSDEM last
weekend about porting AppArmor to Gentoo. When I left the Gentoo desk,
they were downloading AppArmor and inspecting the sources.

Guys, apparmor-dev@forge.novell.com is the AppArmor development mailing
list. AA developers are on this list, including Jesse Michael, who is a
Gentoo user familiar with making ebuilds.

Crispin

Seems good. So probably we will soon see some ebuilds to test, at least I do hope so

Greetings from soulwarrior

CptnObvious999 · Post by **CptnObvious999** » Tue Apr 04, 2006 10:09 pm

Any news on the ebuild yet? I am interested in trying this out.

xces · Post by **xces** » Wed Apr 05, 2006 10:31 am

https://bugs.gentoo.org/show_bug.cgi?id=118779

CptnObvious999 · Post by **CptnObvious999** » Wed Apr 05, 2006 5:17 pm

xces wrote:https://bugs.gentoo.org/show_bug.cgi?id=118779

So there isn't going to be an ebuild because it isn't better than selinux and grsecurity and RSBAC? Thats too bad because the keynote speach at FOSDEM seemed pretty good and simple to use. I guess I have to read a tutorial on those.

srlinuxx · Post by **srlinuxx** » Wed Apr 05, 2006 5:58 pm

I don't know how true this is, I just ran into it and thought it might be relevant to your question of using apparmor.

http://www.osreviews.net/reviews/security/apparmor

Mgiese · Post by **Mgiese** » Thu May 18, 2006 7:04 pm

but then the question is, when will SElinux finaly be released for WORKSTATIONS ?

CptnObvious999 · Post by **CptnObvious999** » Thu May 18, 2006 7:29 pm

Mgiese wrote:but then the question is, when will SElinux finaly be released for WORKSTATIONS ?

yeah SELinux seems pretty complicated to install (thats my speculation I have not tried installing it yet because I am affraid what might happen if I configure it wrong.