Application Firewall AppArmor

'093148'0193248'109438'0193284'09318

unread,

Jul 9, 2016, 8:43:31 AM7/9/16

to qubes-users

Hello,

where I can install the AppArmor application firewall, inside the TVM, the Template VM, correct?

Is their something Qubes specific to take into account or best practices how to isolate apps inside a VM?

Kind Regards

Chris Laprise

unread,

Jul 9, 2016, 9:27:46 AM7/9/16

to '093148'0193248'109438'0193284'09318, qubes-users

You isolate apps in a vm by creating another vm.

Chris

raah...@gmail.com

unread,

Jul 10, 2016, 2:46:00 AM7/10/16

to qubes-users, kerste...@gmail.com

You can take a look at the qubes whonix install instructions, and can use the same method on debian template. https://www.whonix.org/wiki/Qubes/AppArmor

raah...@gmail.com

unread,

Jul 10, 2016, 2:49:41 AM7/10/16

to qubes-users, kerste...@gmail.com, raah...@gmail.com

should be added apt-get install apparmor apparmor-utils apparmor-profiles in the template.

And apparmor-easyprof if you want to create your own profiles. refer to a guide on how to use apparmor. You can find the premade profiles in /etc/apparmor.d folder, and aa-enforce (profile name) to enforce them. Some might need some tweaking to work with debian if they don't already work properly, which you can find on debian forums.

Reply all

Reply to author

Forward