Protect your applications with AppArmor (Linux.com)
[Posted August 22, 2006 by ris]
Linux.com
presents an
excerpt on AppArmor from the new O'Reilly book,
SUSE Linux.
"
AppArmor is a product that Novell acquired when they bought the
company Immunix in May 2005. It provides an interesting alternative to
traditional security measures. AppArmor works by profiling the applications
that it is protecting. A profile records the files that an application
needs to access, and the capabilities it needs to exercise, during normal,
"good" operation. Subsequently, a profile can be "enforced"; that is,
attempts by the application to access resources not explicitly permitted by
the profile are denied. Properly configured, AppArmor ensures that each
profiled application is allowed to do what it is supposed to do, and
nothing else."
(
Log in to post comments)