veyepar: AppArmor Crash Course

Author(s):	Christian Boltz
Location	Berlin/London
Date	aug Thu 20	Days Raw Files
Start	15:00	First Raw Start	error-in-template
Duration	00:45:00	Offset	None
End	15:45	Last Raw End
Chapters
Total cuts_time	None min.

https://summit.debconf.org/debconf15/meeting/280/apparmor-crash-course/
raw-playlist raw-mp4-playlist encoded-files-playlist public mp4 svg png

assets release.pdf AppArmor_Crash_Course.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

AppArmor is an effective and easy-to-use Linux application security system. AppArmor proactively protects the operating system and applications from external or internal threats, even zero-day attacks, by enforcing good behavior and preventing even unknown application flaws from being exploited. AppArmor security policies, called profiles, completely define what system resources individual applications can access, and with what privileges. A number of default profiles are included with AppArmor, and using a combination of advanced static analysis and learning-based tools, AppArmor profiles for even very complex applications can be deployed successfully in a matter of hours.

This talk gives an introduction to AppArmor. I'll show the AppArmor tools to create and update profiles and also explain the profile syntax so that you can understand and manually edit profiles. I'll also show some advanced usage - securing a typical webserver, setting up read-only root access to do backups and how to (ab)use AppArmor for  debugging.

Comment:

production notes