Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: sudo genprof firefox <-- not working in terminal

  1. #1
    Join Date
    Mar 2013
    Beans
    75

    sudo genprof firefox <-- not working in terminal

    Hello to all,


    Need help with creating apparmor profile for firefox. Currently working this tutorial. It seems like something may have been missed somewhere. By the way, I am using 12.10.


    Any help would be greatly appreciated.


    traxster
    Last edited by Traxster; March 29th, 2013 at 12:59 AM.

  2. #2
    Join Date
    Aug 2006
    Beans
    1,374
    Distro
    Ubuntu 13.04 Raring Ringtail

    Re: sudo genprof firefox <-- not working in terminal

    The apparmor-utils package contains command line utilities that you can use to change the AppArmor execution mode.

  3. #3
    Join Date
    Mar 2013
    Beans
    75

    Re: sudo genprof firefox <-- not working in terminal

    Quote Originally Posted by Soul-Sing View Post
    The apparmor-utils package contains command line utilities that you can use to change the AppArmor execution mode.

    'command not found' is the response when I enter 'sudo genprof firefox' in terminal.




    Any help would be greatly appreciated...


    traxster

  4. #4
    Join Date
    Aug 2006
    Beans
    1,374
    Distro
    Ubuntu 13.04 Raring Ringtail

    Re: sudo genprof firefox <-- not working in terminal

    sudo apt-get install apparmor-utils
    Jamie Strandboge has made some default and restrictive apparmor profiles for Ubuntu and firefox. Why not taken them?

  5. #5
    Join Date
    Mar 2013
    Beans
    75

    Re: sudo genprof firefox <-- not working in terminal

    Quote Originally Posted by Soul-Sing View Post
    sudo apt-get install apparmor-utils
    Jamie Strandboge has made some default and restrictive apparmor profiles for Ubuntu and firefox. Why not taken them?

    I downloaded the apparmor profiles for ubuntu and firefox with the command you suggested, and apparmor is running on my computer, does that mean that all the profiles are running? Please excuse my ignorance. I am totally new at this....


    traxster

  6. #6
    Join Date
    Aug 2006
    Beans
    1,374
    Distro
    Ubuntu 13.04 Raring Ringtail

    Re: sudo genprof firefox <-- not working in terminal

    sudo /etc/init.d/apparmor status
    gives you the enforced/loaded profiles

    sudo enforce <name>
    etc etc
    sudo /etc/init.d/apparmor reload (and again)
    sudo /etc/init.d/apparmor status

    on my compu:
    sudo /etc/init.d/apparmor status
    [sudo] password for leor:
    apparmor module is loaded.
    49 profiles are loaded.
    26 profiles are in enforce mode.
    /sbin/dhclient
    /usr/bin/evince
    /usr/bin/evince-previewer
    /usr/bin/evince-previewer//sanitized_helper
    /usr/bin/evince-thumbnailer
    /usr/bin/evince-thumbnailer//sanitized_helper
    /usr/bin/evince//sanitized_helper
    /usr/lib/NetworkManager/nm-dhcp-client.action
    /usr/lib/chromium-browser/chromium-browser//browser_java
    /usr/lib/chromium-browser/chromium-browser//browser_openjdk
    /usr/lib/chromium-browser/chromium-browser//sanitized_helper
    /usr/lib/connman/scripts/dhclient-script
    /usr/lib/cups/backend/cups-pdf
    /usr/lib/firefox/firefox{,*[^s][^h]}
    /usr/lib/firefox/firefox{,*[^s][^h]}//browser_java
    /usr/lib/firefox/firefox{,*[^s][^h]}//browser_openjdk
    /usr/lib/firefox/firefox{,*[^s][^h]}//sanitized_helper
    /usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
    /usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser
    /usr/sbin/cupsd
    /usr/sbin/mdnsd
    /usr/sbin/nmbd
    /usr/sbin/nscd
    /usr/sbin/ntpd
    /usr/sbin/smbd
    /usr/sbin/tcpdump
    23 profiles are in complain mode.
    /bin/ping
    /sbin/klogd
    /sbin/syslog-ng
    /sbin/syslogd
    /usr/lib/chromium-browser/chromium-browser
    /usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox
    /usr/lib/chromium-browser/chromium-browser//xdgsettings
    /usr/lib/chromium-browser/chromium-browser//xdgsettings//null-2f
    /usr/lib/chromium-browser/chromium-browser//xdgsettings//null-30
    /usr/lib/chromium-browser/chromium-browser//xdgsettings//null-31
    /usr/lib/chromium-browser/chromium-browser//xdgsettings//null-32
    /usr/lib/dovecot/deliver
    /usr/lib/dovecot/dovecot-auth
    /usr/lib/dovecot/imap
    /usr/lib/dovecot/imap-login
    /usr/lib/dovecot/managesieve-login
    /usr/lib/dovecot/pop3
    /usr/lib/dovecot/pop3-login
    /usr/sbin/avahi-daemon
    /usr/sbin/dnsmasq
    /usr/sbin/dovecot
    /usr/sbin/identd
    /usr/{sbin/traceroute,bin/traceroute.db}
    3 processes have profiles defined.
    3 processes are in enforce mode.
    /sbin/dhclient (1549)
    /usr/lib/firefox/firefox{,*[^s][^h]} (4820)
    /usr/sbin/ntpd (1785)
    0 processes are in complain mode.
    Last edited by Soul-Sing; March 28th, 2013 at 05:28 PM.

  7. #7
    Join Date
    Mar 2013
    Beans
    75

    Re: sudo genprof firefox <-- not working in terminal

    Quote Originally Posted by Soul-Sing View Post
    sudo /etc/init.d/apparmor status
    gives you the enforced/loaded profiles

    sudo enforce <name>
    etc etc
    sudo /etc/init.d/apparmor reload (and again)
    sudo /etc/init.d/apparmor status

    In terminal, i enter: sudo /etc/init.d/apparmor status the result I get is similar to yours (see pic below)



    then I enter: sudo enforce firefox i get a message saying command not found ( see pic below)



    then just for kicks, even though the sudo enforce firefox did not work I typed: sudo /etc/init.d/apparmor reload (please see pic below)
    notice the last 2 lines. It states it is skipping 2 profiles and one of them is firefox



    your input is greatly appreciated.

    Traxster

  8. #8
    Join Date
    Oct 2012
    Beans
    55

    Re: sudo genprof firefox <-- not working in terminal

    sudo aa-enforce /etc/apparmor.d/usr.bin.firefox

  9. #9
    Join Date
    Mar 2013
    Beans
    75

    Re: sudo genprof firefox <-- not working in terminal

    Quote Originally Posted by maglinu View Post
    sudo aa-enforce /etc/apparmor.d/usr.bin.firefox

    that worked!! thank you, and all of those who contributed to this thread.


    I will continue learning more about apparmor, and other utilities to help make our computers more secure..

    thanks again


    Traxster

  10. #10
    Join Date
    Oct 2012
    Beans
    55

    Re: sudo genprof firefox <-- not working in terminal

    Quote Originally Posted by Traxster View Post


    .....I will continue learning more about apparmor.....


    Traxster
    Pleased to hear you've got it working-

    and when you've learned more about apparmor perhaps you can let me know if the default firefox profile usefully confines the flashplayer plugin? I've not been able to suss that out

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •