Working With AppArmor Profiles

30 minutes
  • 2 Learning Objectives

About this Hands-on Lab

In this lab, we will be working with AppArmor profiles. We will edit an existing AppArmor profile as well as create a new profile.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Change the dhclient AppArmor profile to complain mode.

Note: Please wait about 6 minutes to allow the server to finish provisioning before connecting via ssh.

  1. In order to make changes to AppArmor profiles, first we must install the apparmor-utils package with the following command:

    sudo apt-get install -y apparmor-utils
  2. In order to change the dhclient AppArmor profile to complain mode, run the following command:

    sudo aa-complain /sbin/dhclient
  3. Lastly, we must restart the AppArmor service for the changes to take effect:

    sudo systemctl reload apparmor.service
Create a new AppArmor profile for Xtightvnc and set its profile to complain mode.
  1. To create a new AppArmor profile for Xtightvnc, run the following command:

    sudo aa-genprof Xtightvnc

    Then, press F to finish creating the profile.

  2. Next, set the new Xtightvnc AppArmor profile to complain mode:

    sudo aa-complain /usr/bin/Xtightvnc
  3. Lastly, we need to restart the AppArmor service for the changes to take effect:

    sudo systemctl reload apparmor.service

Additional Resources

Your supervisor has asked you to make some changes on an Ubuntu host's AppArmor profiles. You need to change the dhclient profile from enforce mode to complain mode due to some recent problems. Next, you need to create a new AppArmor profile for Xtightvnc and set that profile to complain mode until the security team creates the necessary rules at a later time.

Note: Please wait about 6 minutes to allow the server to finish provisioning before connecting via ssh.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Get Started
Who’s going to be learning?

How many seats do you need?

  • $499 USD per seat per year
  • Billed Annually
  • Renews in 12 months

Ready to accelerate learning?

For over 25 licenses, a member of our sales team will walk you through a custom tailored solution for your business.


$2,495.00

Checkout
Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!