On Ubuntu 16.04, how do I enable AppArmor or SELinux? It's not in the Ubuntu App Store it won't even work in Terminal. How do I enable one of them?
-
Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.
Why not Click Here To Sign Up and start enjoying great FREE Tech Support.
This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Solved Enable AppArmor or SELinux on Ubuntu 16.04 LTS
- Thread starter Eddie Paul Litz
- Start date
- Status
Last edited by a moderator:
I don't run Ubuntu.
AppArmor is enabled by default.
Source: https://wiki.ubuntu.com/AppArmor
Pages for 16.04
http://manpages.ubuntu.com/manpages/xenial/en/man7/apparmor.7.html
http://manpages.ubuntu.com/manpages/xenial/en/man5/apparmor.d.5.html
AppArmor is enabled by default.
Source: https://wiki.ubuntu.com/AppArmor
Pages for 16.04
http://manpages.ubuntu.com/manpages/xenial/en/man7/apparmor.7.html
http://manpages.ubuntu.com/manpages/xenial/en/man5/apparmor.d.5.html
You can not use AppArmor and SELinux together. It's one or the other.
AppArmor is enabled by default on kernels 2.6.36 and later. SELinux has to be manually installed.
If you wish to do so, you may follow the below instructions at your OWN RISK. I or anyone at PCHF assumes no responsibility for what may happen.
1. Stop the AppArmor script in /etc/init.d/
2. Purge AppArmor from the system.
If you want to keep AppArmor's config files, use the below command instead:
3. Update and reboot your system
4. Install SELinux
5. You can determine whether or not SELinux is enforcing security on your system by trying to set SELinux to enforcing mode.
6. To maintain enforcing mode after reboot, modify the SELinux configuration file in /etc/selinux/config from the default SELINUX=permissive to SELINUX=enforcing
AppArmor is enabled by default on kernels 2.6.36 and later. SELinux has to be manually installed.
If you wish to do so, you may follow the below instructions at your OWN RISK. I or anyone at PCHF assumes no responsibility for what may happen.
1. Stop the AppArmor script in /etc/init.d/
Code:
sudo /etc/init.d/apparmor stop2. Purge AppArmor from the system.
Code:
sudo apt purge apparmorIf you want to keep AppArmor's config files, use the below command instead:
Code:
sudo apt remove apparmor3. Update and reboot your system
Code:
sudo apt update && upgrade -yuf
sudo reboot4. Install SELinux
Code:
sudo apt install selinux
sudo reboot5. You can determine whether or not SELinux is enforcing security on your system by trying to set SELinux to enforcing mode.
Code:
pchf@ubuntu:~# sudo setenforce 1
pchf@ubuntu:~# sudo getenforce
Enforcing6. To maintain enforcing mode after reboot, modify the SELinux configuration file in /etc/selinux/config from the default SELINUX=permissive to SELINUX=enforcing
Code:
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcingIt seemed like AppArmor was already running by default so I decided to leave it as it is when I installed Ubuntu.
- Status