Building the Largest Working Set of Apparmor Profiles

on YouTube ↗33m

" summary

Claim: a public repo now holds 1400+ profiles covering most distro packages so common system processes run confined. Tooling uses integration testing with Go and VMs plus Packer/cloud-init and a small log parser to verify profiles on Debian, Ubuntu, OpenSUSE, Arch and Ubuntu Core. Tests include hundreds of automated exercises seeded from tldr-based command examples and manual cases; results find missing accesses but overall profiles work; code and docs live at github.com/roddhjav/apparmor.d.

AI-written summary · about

" chapters (12)

1. 0:00Introduction
2. 3:15AppArmor profiles overview
3. 6:48Deciding what to confine
4. 8:33Live demo of profiles
5. 12:16Profile structure examples
6. 14:45Profile interdependencies
7. 16:27Standardizing profiles
8. 19:45Testing methodology
9. 22:37Automated testing with tldr
10. 26:56Testing results and challenges
11. 29:47Future work and community
12. 32:21Q&A

" related talks

• 38mLessons Learned While Making an AppArmor Play MachineAlexandre Pujol · Linux Security Summit North America 2025
• 39mAppArmor UpdateJohn Johansen · Linux Security Summit Europe 2025
• 17mAppArmorJohn Johansen · Linux Security Summit 2016
• 29mOverview and Recent Developments: AppArmorJohn Johansen · Linux Security Summit Europe 2018
• 48mUnprivileged Access Control in AppArmorJohn Johansen, Georgia Garcia · Linux Security Summit North America 2024
• 09mSub-system Update: AppArmor Update 2018John Johansen · Linux Security Summit North America 2018
• 07mSubsystem Update: AppArmor Update 2019John Johansen · Linux Security Summit North America 2019
• 33mBinary Policy with IMA and AppArmorEric Chiang · Linux Security Summit North America 2019