Post · bonfire.cafe

#Linux question

Does apparmore make sense on a developer machine for a teenager? Or does it make the development experience too frustrating?

Context:

I'm just preparing a Linux laptop for my daughter. Installing the ROBO Pro Coding (programming environment for the fischertechnik TX4 controller) appimage I noticed it didn't work because of a missing #apparmor profile.

The proposed fixes i found were to disable apparmor (but creating a profile shouldn't be too hard either).

My question is now, should o disable apparmor to avoid future questions? Especially as it wasn't trivial to figure out that it was apparmor which stopped the application from working and i expect future problems and frustration.

#boostWelcome #FediPower

Marek

@mark22k@layer8.space replied · 3 days ago

@realn2s Personally, I wouldn't completely disable AppArmor, as this would mean that other applications such as DHCP and NTP clients would no longer be restricted. I would check whether the app is also available in Flatpak or similar. And regardless of whether you create an "allow everything" (unconfied) or a custom profile, I wouldn't completely disable AppArmor.

https://ubuntu.com/tutorials/beginning-apparmor-profile-development

Zło To

@mattesilver@101010.pl replied · 2 weeks ago

@realn2s I don't recall ever having any problems with apparmor ...ever.

Claudius Link

@realn2s@infosec.exchange replied · 2 weeks ago

@mattesilver
I really had some problem creating a profile for the #appimage. Using aa-genprof seems to have missed the fuse stuff leading to errors when starting the app.

I ended up disabling #apparmor for the app

Marek :troll_face:

@centopus@101010.pl replied · 2 weeks ago

@realn2s Depends. If you expect daily problem, disable it. If you expect a problem once a month, leave it. If you ship the laptop (and the teen) outside of your easy access, disable it... and if she's around, leave it on. At least for a week or two, to see if any new issues arise. And decide in a week or two.

Its a security feature. Its nice to have on a kids laptop. Unless its frustrating for the user or admin.

Marek :troll_face:

@centopus@101010.pl replied · 2 weeks ago

Its a security feature. Its nice to have on a kids laptop. Unless its frustrating for the user or admin.

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances

Bonfire social · 1.0.0 no JS en

Automatic federation enabled