Re: apparmors extra profiles.

[raf <debian@raf.org>]

On Wed, Aug 18, 2021 at 10:32:11PM +0300, Georgios <gpdsbe+debian@mailbox.org> wrote:

> Hi!
> Im trying to install debian 11 on virtual machine manager in order to
> prepare my self for moving my laptop to debian 11.
> 
> Default install leaves unconfined a lot of apps so I tried to install
> extra profiles.
> According to documentation it supposed to install extra profiles at
> /usr/share/apparmor/extra-profiles/
> but there is no apparmor folder. only apparmor-features.
> 
> I would like to ask if anyone knows where apparmor-profiles-extra
> install its profiles?
> 
> Thanks in advance
> George

Strangely, it's the apparmor-profiles package that includes
/usr/share/apparmor/extra-profiles:

  > dpkg-query -L apparmor-profiles
  [...]
  /usr/share/apparmor/extra-profiles
  /usr/share/apparmor/extra-profiles/README
  /usr/share/apparmor/extra-profiles/bin.netstat
  /usr/share/apparmor/extra-profiles/etc.cron.daily.logrotate
  [...]

The apparmor-profiles-extra package only contains:

  > dpkg-query -L apparmor-profiles-extra
  /etc
  /etc/apparmor.d
  /etc/apparmor.d/abstractions
  /etc/apparmor.d/abstractions/gstreamer
  /etc/apparmor.d/abstractions/totem
  /etc/apparmor.d/local
  /etc/apparmor.d/usr.bin.irssi
  /etc/apparmor.d/usr.bin.pidgin
  /etc/apparmor.d/usr.bin.totem
  /etc/apparmor.d/usr.bin.totem-previewers
  /etc/apparmor.d/usr.sbin.apt-cacher-ng
  /usr
  /usr/share
  /usr/share/doc
  /usr/share/doc/apparmor-profiles-extra
  /usr/share/doc/apparmor-profiles-extra/README.Debian
  /usr/share/doc/apparmor-profiles-extra/changelog.gz
  /usr/share/doc/apparmor-profiles-extra/copyright

So you probably haven't installed the apparmor-profiles package.

  apt install apparmor-profiles

Check what apparmor packages you have with:

  dpkg-query -l | grep apparmor

And compare it with what is available:

  apt-cache search apparmor

And install any you think you'd like.

cheers,
raf