Getting Started with AppArmor (Debian Based Linux) [Linux Mint]

[@sj314]

best video about AppArmor.

[@OsbornePro]

Thanks for watching! Very glad you found it beneficial

[@pierreancelot8864]

16:15. Why is there a deny if it's a MAC? Everything should be denied by default anyway. Unless you allowed earlier a wildcard allow and want inside this wilcard selection to deny one single thing? But that would work only when actually writing the rules by hand no?

[@OsbornePro]

Thanks for watching! I can make the excuse that the Deny is more of a "Keep Denying" since we are being prompted on what we want to do with the log message entry. I think you are right it is not necessary to have that manual entry created since it was already being denied. The wildcard explanation makes sense to me also.

[@ihorprots7421]

Thank you, It`s a very useful video.

[@OsbornePro]

Thanks glad to hear it!

[@AbdulJawad-kx6mk]

any video about restriction of binary execution like (ls) through apparmor

[@wQuii]

thanks man

[@OsbornePro]

Thanks for watching!

[@aaron6841]

It dosent use virculisation? Sand boxing?

[@OsbornePro]

Thanks for watching! I am not sure I understand what you mean here

[@aaron6841]

​@@OsborneProI think I was asking if Linux mint used virtualized sand boxes which I don't think it does? Great video 👍

[@OsbornePro]

@@aaron6841 ah I think you are right. Thanks again!