AppArmor now in Ubuntu Feisty
When I was using OpenSUSE, I wrote that I liked the AppArmor application security. I wished for (K)Ubuntu to have that. My wish came true. It’s now part of Feisty. According to Codeblog, AppArmor was uploaded to Feisty Universe. You have to issue the following commands in the terminal if you would like to install it.
sudo apt-get install apparmor-modules-source dpatch
sudo m-a -v -t prepare
sudo m-a -v -t build apparmor-modules
sudo m-a -v -t install apparmor-modules
sudo apt-get install apparmor apparmor-utils apparmor-profiles libterm-readline-gnu-perl
This should get you going. For more information on AppArmor, Visit AppArmor Application Security website. For more information on using it in Ubuntu, Visit Codeblog.
Update: There are lot of discussions going on about AppArmor’s security and usefulness. Most of the discussions are not positive towards AppArmor. Some of them feel that SELinux is a much better alternative. Since I’m not an expert in using AppArmor, I’m not sure how useful AppArmor is in the real world.
really that weak; or maybe SELinux is the best choice anyway; or maybe it is bad because it’s coming from Novell, and then it’s a political issue?! Fact is that AppArmor entered Ubuntu Feisty’s “universe” [1] [2], and rebuttals are already here. Erich Schubert starts the docudrama: «Ubuntu got AppArmor support. This is bad news. AppArmor is a weak design. IMHO it gives the users a false impression of security
App Armor is very very insecure
http://blog.drinsama.de/erich/en/linux/selinux/2007040302-ubuntu-gets-apparmor
oh! I didn’t use AppArmor much, so I’m not sure how secure it is. Hmmm.
Calling a security system “very insecure” is slander, similar to calling someone a child abuser. So far, the claims that AppArmor is “very insecure” all amount to FUD, because they are too vague to actually come to a vulnerability, or they are factually incorrect. Erich’s blog is mostly factually incorrect, and I have posted a rebuttal there.
Try AppArmor, see if you like it. If you don’t like it, then don’t use it. But don’t call it “insecure” unless you can substantiate that claim. AppArmor has had one security advisory in 4 years, I think it is pretty secure.
I didn’t say it’s insecure anywhere in my post. I wrote, there were lot of discussions going on about that.
My apologies Arun. My comment was really directed at Jef, and others who find AppArmor to be controversial. I suspect most of the controversy comes from SELinux advocates who find it threatening. Truly insecure products do not last long, and any controversy quickly dies away along with the product. AppArmor is 4 years old as a stand-alone product, and 10 years old as a technology. It is not going away.
I think I mistook your comments were directed towards my post. My apologies too.