Bobuscho
Posts: 5
Joined: Wed Jan 15, 2014 10:05 am

Apparmor on Raspbian?

Fri Jan 17, 2014 9:36 am

Good morning,


my pi arrived just a week ago and i've no got it up and running a small nginx webserver etc. This device is absolutely fabulous.
As it is configured as a server, i want to improve various security features.

I've managed to tighten the basic webserver security (sysctl, the nginx conf, the php.ini, iptables, ssl, ssh settings etc...), but my "last line of defense", apparmor, does not work.

It seems like apparmor is not compiled into the kernel because an "aa-status" just returns "module not available in kernel".

I tried to add "apparmor=1 security=apparmor" to /boot/cmdline.txt, as suggested somewhere else in these forums, but it does not work.

How can i add the apparmor module to my raspbian system?

Thank you!

counter
Posts: 13
Joined: Mon May 12, 2014 9:28 pm

Re: Apparmor on Raspbian?

Mon May 12, 2014 10:06 pm

I would also like to use apparmor at the pi.

Does someone know a soloution for this problem yet?

User avatar
algorithm
Posts: 185
Joined: Mon Nov 25, 2013 9:09 pm
Location: Flatland

Re: Apparmor on Raspbian?

Tue May 13, 2014 9:00 am

I don't know this software but it is in the repository, see:

Code: Select all

apt-cache search apparmor
Not sure which of those you need to install to get the functionality you want but I'd guess all whose names start with "apparmor". Install:

Code: Select all

sudo apt-get update && sudo apt-get install '^apparmor.*'
That will also install a BOATload of perl dependencies...

evilkitty
Posts: 370
Joined: Tue Apr 15, 2014 11:39 pm

Re: Apparmor on Raspbian?

Tue May 13, 2014 11:24 am

Code: Select all

sudo apt-get install apparmor
should get you what comes stock on ubuntu as far as apparmor is concerned
My Pi Server: http://imgur.com/a/6xIUI | Thermostat: http://imgur.com/a/4LVnT

counter
Posts: 13
Joined: Mon May 12, 2014 9:28 pm

Re: Apparmor on Raspbian?

Wed May 14, 2014 9:29 pm

I installed apparmor and apparmor-utils and set the kernel parameter

Code: Select all

apparmor=1 security=apparmor
at /boot/cmdline.txt

Code: Select all

$ sudo aa-status
AppArmor not available in kernel.
Found another thread about this issue:
http://www.raspberrypi.org/forums/viewt ... 28&t=56776

ghans
Posts: 7882
Joined: Mon Dec 12, 2011 8:30 pm
Location: Germany

Re: Apparmor on Raspbian?

Thu May 15, 2014 9:18 am

You will not not get around recompiling your kernel (or at least the apparmor module).

ghans
• Don't like the board ? Missing features ? Change to the prosilver theme ! You can find it in your settings.
• Don't like to search the forum BEFORE posting 'cos it's useless ? Try googling : yoursearchtermshere site:raspberrypi.org

counter
Posts: 13
Joined: Mon May 12, 2014 9:28 pm

Re: Apparmor on Raspbian?

Sun May 25, 2014 7:50 am

ok, but I need a guide to do that for raspbian with cross-compile.

User avatar
DeeJay
Posts: 2027
Joined: Tue Jan 01, 2013 9:33 pm
Location: East Midlands, UK

Re: Apparmor on Raspbian?

Sun May 25, 2014 9:17 am

counter wrote:I need a guide to do that for raspbian with cross-compile.
http://elinux.org/RPi_Kernel_Compilation
How To Ask Questions The Smart Way: http://www.catb.org/~esr/faqs/smart-questions.html
How to Report Bugs Effectively: http://www.chiark.greenend.org.uk/~sgtatham/bugs.html

zfyseu
Posts: 29
Joined: Fri Jun 10, 2016 12:31 pm

Re: Apparmor on Raspbian?

Tue Jul 05, 2016 7:00 am

Hello everyone!

Have you solved the problem?
I also want to enable apparmor on Raspbian.

Thanks!

Return to “Raspbian”