[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Apparmor: 1 processes are unconfined but have a profile defined



Hello
Im trying to make my own profiles for apparmor.

I made a profile for firefox-esr but for some reason i cant get apparmor
to confine it.  I run aa-enforce firefox-esr but nothing change.

Any ideas?
Thanks in advance for your help.

$sudo aa-status
apparmor module is loaded.
21 profiles are loaded.
21 profiles are in enforce mode.
   /etc/apparmor.d/usr.lib.firefox-esr.firefox-esr
   /usr/bin/exo-open
   /usr/bin/firefox
   /usr/bin/freshclam
   /usr/bin/gsettings-data-convert
   /usr/bin/liferea
   /usr/bin/lsb_release
   /usr/bin/mupdf
   /usr/bin/proxy
   /usr/bin/vlc
   /usr/lib/firefox-esr/firefox-esr
   /usr/lib/firefox-esr/plugin-container
   /usr/lib/mupdf/mupdf-x11
   /usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitNetworkProcess
   /usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitWebProcess
   /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1
   thunderbird
   thunderbird//browser_java
   thunderbird//browser_openjdk
   thunderbird//gpg
   thunderbird//sanitized_helper
0 profiles are in complain mode.
4 processes have profiles defined.
3 processes are in enforce mode.
   /usr/bin/freshclam (689)
   /usr/lib/firefox-esr/plugin-container (1843)
   thunderbird (925)
0 processes are in complain mode.
1 processes are unconfined but have a profile defined.
   /usr/lib/firefox-esr/firefox-esr (1798)


Reply to: