Discussion
Loading...

Discussion

  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Zło To
@mattesilver@101010.pl  ·  activity timestamp 2 weeks ago

@realn2s I don't recall ever having any problems with apparmor ...ever.

  • Copy link
  • Flag this post
  • Block
Marek
@mark22k@layer8.space replied  ·  activity timestamp 3 days ago

@realn2s Personally, I wouldn't completely disable AppArmor, as this would mean that other applications such as DHCP and NTP clients would no longer be restricted. I would check whether the app is also available in Flatpak or similar. And regardless of whether you create an "allow everything" (unconfied) or a custom profile, I wouldn't completely disable AppArmor.

https://ubuntu.com/tutorials/beginning-apparmor-profile-development

  • Copy link
  • Flag this comment
  • Block
Zło To
@mattesilver@101010.pl replied  ·  activity timestamp 2 weeks ago

@realn2s I don't recall ever having any problems with apparmor ...ever.

  • Copy link
  • Flag this comment
  • Block
Claudius Link
@realn2s@infosec.exchange replied  ·  activity timestamp 2 weeks ago

@mattesilver
I really had some problem creating a profile for the #appimage. Using aa-genprof seems to have missed the fuse stuff leading to errors when starting the app.

I ended up disabling #apparmor for the app

  • Copy link
  • Flag this comment
  • Block
Marek :troll_face:
@centopus@101010.pl replied  ·  activity timestamp 2 weeks ago

@realn2s Depends. If you expect daily problem, disable it. If you expect a problem once a month, leave it. If you ship the laptop (and the teen) outside of your easy access, disable it... and if she's around, leave it on. At least for a week or two, to see if any new issues arise. And decide in a week or two.

Its a security feature. Its nice to have on a kids laptop. Unless its frustrating for the user or admin.

  • Copy link
  • Flag this comment
  • Block
Marek :troll_face:
@centopus@101010.pl replied  ·  activity timestamp 2 weeks ago

@realn2s Depends. If you expect daily problem, disable it. If you expect a problem once a month, leave it. If you ship the laptop (and the teen) outside of your easy access, disable it... and if she's around, leave it on. At least for a week or two, to see if any new issues arise. And decide in a week or two.

Its a security feature. Its nice to have on a kids laptop. Unless its frustrating for the user or admin.

  • Copy link
  • Flag this comment
  • Block
Log in

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.0 no JS en
Automatic federation enabled
  • Explore
  • About
  • Members
  • Code of Conduct
Home
Login