Adapting AppArmor to fit Gentoo

[nlindblad]

I'm happily using AppArmor to tighten server applications (currently on OpenSuSE 10.1 systems) and since I'm an old Gentooist I was wondering if anyone in this community has contacted the AppArmor team at Novell and shown interest in officially maintaining an ebuild for it (and possibly re-writing some of it to fit).

In my opinion this is the next big step for the Gentoo Hardened project and should be properly evaluated shortly.

I'd be more than happy to sign up for testing, but I don't have the knowledge nor the time to maintain something.

[CptnObvious999]

this thread might be what you are looking for.

To clarify: We currently support SELinux, grsecurity and RSBAC. These fully
fill the range of anyone needing mandatory access control. Adding another
security system is both unnecessary and impossible with the current staffing.
Even if staffing became available it would be better spent supporting the
current systems more fully.

~Joshua Brindle at https://bugs.gentoo.org/show_bug.cgi?id=118779

[Geos_One]

I'm happily using AppArmor to tighten server applications (currently on OpenSuSE 10.1 systems) and since I'm an old Gentooist I was wondering if anyone in this community has contacted the AppArmor team at Novell and shown interest in officially maintaining an ebuild for it (and possibly re-writing some of it to fit).

In my opinion this is the next big step for the Gentoo Hardened project and should be properly evaluated shortly.


I'd be more than happy to sign up for testing, but I don't have the knowledge nor the time to maintain something.

so you are searching apparmor for gentoo:

this the link to my layman file
http://ftp.mars.arge.at/pub/overlay/geo ... verlay.xml

add it to your layman.cfg

then add the overlay "apparmor" to your system

you will need to use the apparmor-sources (gentoo-sources patched with apparmor)

happy testing

there are no profiles at the moment so if you write some profiles i will be happy to add them