Skip to content

MVP of AppArmor profile that only deny access to internet #32

@fititnt

Description

@fititnt

Let's do an minimum viable product (MVP) of AppArmor profile that shows how to at least block access to internet to some binary.

While (as mentioned on #31 (comment)) I discovered that is possible to generate AppArmor profiles, the idea of this demo here is be somewhat a quick introduction to who already use some distro with AppArmor (or one that is easy to enable) be able to just copy and paste for their own needs.

I know that restrict only internet access is not the best ideal scenario for who already is using AppArmor, but this alone is provides some type of sandboxing not only on Tails.

Metadata

Metadata

Assignees

No one assigned

    Labels

    apparmor-profile"AppArmor is an effective and easy-to-use Linux application security system." https://apparmor.net/beyond-tails

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions