Shutting out intruders with AppArmor
PROTECTIVE ARMOR
When an attacker succeeds in infecting a victim’s system, the attacker inherits the victim’s privileges. App Armor beats the attack by reducing the potential victim’s privileges to a minimum.
Novell views AppArmor [1] as an easily configurable but effective protection system for Linux. According to the vendor, AppArmor competes with SE Linux, which has been part of the Suse distribution for quite a while now, although lacking the policies needed to run it. Whereas SE Linux is comparatively difficult to configure, but implements comprehensive MACs (Mandatory Access Control), AppArmor focuses on restricting the scope of individual applications. The Task It is an unfortunate fact that many programs suffer from bugs, and web applications are particularly badly hit. Most software is not coded by security specialists, though it may be publicly accessible via the web, and this makes it an easy target for attackers. If an attacker finds a programming error in an application, they can typically exploit the error, thus gaining access to the target system.
Buy this article as PDF
(incl. VAT)
Buy Linux Magazine
US / Canada
UK / Australia
News
-
OpenStack Foundation Changes Name of the OpenStack Summit
New event will be known as the Open Infrastructure Summit
-
System76 Announces a Line of US-Made PCs
Thelio series is available for pre-order and will ship in early December.
-
IBM Acquires Red Hat
IBM is acquiring Red Hat, the most successful open source company.
-
Fedora 29 and Ubuntu 18.10 Released
New releases focus on boot time, new hardware, and modular design.
-
Redis Labs Modules Forked
New Commons Clause license rider causes Debian and Fedora developers to fork Redis Labs modules.
-
Microsoft Offers its Patent Portfolio
The company ends its long war; vows to protect Linux.
-
Red Hat Reports $823 Million in Revenue for Second Quarter 2019
Strong performance for cloud and container products leads to a 14% increase over last year.
-
Debian, Ubuntu, and Other Distros are Leaving Users Vulnerable
A security researcher says Linux vendors wait too long to patch the kernel.
-
NextCloud 14 Arrives
The new version adds two new security features for users.
-
Linus Torvalds Takes a Break, Apologizes
The creator of Linux is admitting his abusive behavior on LKML and plans to change.