Enable Apparmor LSM [RESOLVED]

[Hélène]

Hello,

I found two different ways to enable Apparmor LSM. I've read that I needed to add a line into the file etc/default/grub. Which is the right one?

GRUB_CMDLINE_LINUX=apparmor="1 security=apparmor"

or

GRUB_CMDLINE_LINUX_DEFAULT="quiet apparmor=1 security=apparmor"

Thanks in advance.

[pcalvert]

Hi Hélène,

All I did was install it. At least in my case it appears that it was enabled during installation.

Try this command:

Code: Select all

grep apparmor /boot/grub/grub.cfg

Does that command find instances of "apparmor" in grub.cfg?

Phil

[kopper]

Neither of the ones you've mentioned. You have misplaced quotation mark in your first alternative. Your second alternative MAY work, but... I'm running Stretch and my /etc/default/grub lists following lines (among others):

GRUB_CMDLINE_LINUX_DEFAULT="quiet"
GRUB_CMDLINE_LINUX="apparmor=1 security=apparmor"

I suggest using process described in Debian Wiki: https://wiki.debian.org/AppArmor/HowToUse

[Hélène]

Hi,

Thanks very much for your answers.

I tried this :

Code: Select all

sudo perl -pi -e 's,GRUB_CMDLINE_LINUX="(.*)"$,GRUB_CMDLINE_LINUX="$1 apparmor=1 security=apparmor",' /etc/default/grub
$ sudo update-grub
$ sudo reboot

But it didn't work. During the reboot, failed to start LSB … was written.
So I added this line :

Code: Select all

GRUB_CMDLINE_LINUX="apparmor=1 security=apparmor"

And now it's working.

Code: Select all

grep apparmor /boot/grub/grub.cfg
	linux	/boot/vmlinuz-3.16.0-4-amd64 root=UUID=b9e336b2-66c8-4bb9-b883-20a90c358832 ro apparmor=1 security=apparmor quiet i8042.noaux
		linux	/boot/vmlinuz-3.16.0-4-amd64 root=UUID=b9e336b2-66c8-4bb9-b883-20a90c358832 ro apparmor=1 security=apparmor quiet i8042.noaux
		linux	/boot/vmlinuz-3.16.0-4-amd64 root=UUID=b9e336b2-66c8-4bb9-b883-20a90c358832 ro single apparmor=1 security=apparmor

What do you think ? Is that right ?

Thanks in advance.

[Hélène]

Hi,

No more answer.
So I think it's resolved.

Bye