Re: Apparmor: 1 processes are unconfined but have a profile defined

2021-08-02 Thread didier gaumet
Le lundi 2 août 2021 à 06:00:05 UTC+2, Ratan Gupta a écrit : [...] > In my case it is not at all complaining as it is because the process is > unconfined. [...] If I am not mistaken, the purpose of the complain mode is precisely to inform about policy violations without forbidding them

Re: Apparmor: 1 processes are unconfined but have a profile defined

2021-08-01 Thread Ratan Gupta
Hi Didier, I was not able to reply on your mail as I am not part of the above mailing list, I have subscribed myself now. Regarding your suggestion. > From what I understand, unless you specify a deny rule, when you switch an AppArmor profile to complain mode, it complains but does not

Re: Apparmor: 1 processes are unconfined but have a profile defined

2021-07-30 Thread didier gaumet
Hello, Disclaimer: I never wrote an AppArmor profile >From what I understand, unless you specify a deny rule, when you switch an >AppArmor profile to complain mode, it complains but does not confine, so you >would probably switch your AppArmor profile to enforce mode instead. And I suspect

Apparmor: 1 processes are unconfined but have a profile defined

2021-07-30 Thread Ratan Gupta
Hi Team, Looking for your help. I have gone through the following link where the similar issue was asked. https://lists.debian.org/debian-user/2018/07/msg00542.html Issue: I made a profile for the application, and it is not getting confined by the apparmor. What I did: 1) I wrote

Re: Apparmor: 1 processes are unconfined but have a profile defined

2018-07-14 Thread Reco
Hi. On Fri, Jul 13, 2018 at 11:59:00PM +0300, Ge wrote: > > On Fri, Jul 13, 2018 at 11:09:19PM +0300, Ge wrote: > >> Hi i couldn't figure out so i delete all Firefox profiles and i started > >> again from the beginning > > > > If you just deleted the files from /etc/apparmor.d - that

Re: Apparmor: 1 processes are unconfined but have a profile defined

2018-07-13 Thread Ge
Hi! Thanks for your detail reply. On 07/13/2018 11:42 PM, Reco wrote: > Hi. > > I accept on-list communication only. > > On Fri, Jul 13, 2018 at 11:09:19PM +0300, Ge wrote: >> Hi i couldn't figure out so i delete all Firefox profiles and i started >> again from the beginning > > If you

Re: Apparmor: 1 processes are unconfined but have a profile defined

2018-07-13 Thread Reco
Hi. I accept on-list communication only. On Fri, Jul 13, 2018 at 11:09:19PM +0300, Ge wrote: > Hi i couldn't figure out so i delete all Firefox profiles and i started > again from the beginning If you just deleted the files from /etc/apparmor.d - that won't be enough as old profiles are

Re: Apparmor: 1 processes are unconfined but have a profile defined

2018-07-13 Thread Reco
Hi. On Fri, Jul 13, 2018 at 07:10:51PM +0300, Ge wrote: > Hello > Im trying to make my own profiles for apparmor. > > I made a profile for firefox-esr but for some reason i cant get apparmor > to confine it. I run aa-enforce firefox-esr but nothing change. First, you're supposed to

Apparmor: 1 processes are unconfined but have a profile defined

2018-07-13 Thread Ge
Hello Im trying to make my own profiles for apparmor. I made a profile for firefox-esr but for some reason i cant get apparmor to confine it. I run aa-enforce firefox-esr but nothing change. Any ideas? Thanks in advance for your help. $sudo aa-status apparmor module is loaded. 21 profiles are