linux/Documentation/security/apparmor.txt
<<
>>
Prefs
   1--- What is AppArmor? ---
   2
   3AppArmor is MAC style security extension for the Linux kernel.  It implements
   4a task centered policy, with task "profiles" being created and loaded
   5from user space.  Tasks on the system that do not have a profile defined for
   6them run in an unconfined state which is equivalent to standard Linux DAC
   7permissions.
   8
   9--- How to enable/disable ---
  10
  11set CONFIG_SECURITY_APPARMOR=y
  12
  13If AppArmor should be selected as the default security module then
  14   set CONFIG_DEFAULT_SECURITY="apparmor"
  15   and CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
  16
  17Build the kernel
  18
  19If AppArmor is not the default security module it can be enabled by passing
  20security=apparmor on the kernel's command line.
  21
  22If AppArmor is the default security module it can be disabled by passing
  23apparmor=0, security=XXXX (where XXX is valid security module), on the
  24kernel's command line
  25
  26For AppArmor to enforce any restrictions beyond standard Linux DAC permissions
  27policy must be loaded into the kernel from user space (see the Documentation
  28and tools links).
  29
  30--- Documentation ---
  31
  32Documentation can be found on the wiki.
  33
  34--- Links ---
  35
  36Mailing List - apparmor@lists.ubuntu.com
  37Wiki - http://apparmor.wiki.kernel.org/
  38User space tools - https://launchpad.net/apparmor
  39Kernel module - git://git.kernel.org/pub/scm/linux/kernel/git/jj/apparmor-dev.git
  40
lxr.linux.no kindly hosted by Redpill Linpro AS, provider of Linux consulting and operations services since 1995.