diff options
author | 2016-07-31 10:06:41 -0400 | |
---|---|---|
committer | 2016-07-31 10:06:41 -0400 | |
commit | 59cd5a6b6bb90d316d7f628fd6fc2df9ff2b17ab (patch) | |
tree | b8e44859848ece18a81e63afc7910d0d0a4ca544 /todo | |
parent | Merge pull request #662 from reinerh/master (diff) | |
download | firejail-59cd5a6b6bb90d316d7f628fd6fc2df9ff2b17ab.tar.gz firejail-59cd5a6b6bb90d316d7f628fd6fc2df9ff2b17ab.tar.zst firejail-59cd5a6b6bb90d316d7f628fd6fc2df9ff2b17ab.zip |
cleanup and some new tests
Diffstat (limited to 'todo')
-rw-r--r-- | todo | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -250,10 +250,14 @@ References | |||
250 | 250 | ||
251 | 23. AppArmor | 251 | 23. AppArmor |
252 | 252 | ||
253 | $ sudo apt-get install apparmor apparmor-profiles apparmor-utils apparmor-notify | ||
254 | |||
253 | $ sudo perl -pi -e 's,GRUB_CMDLINE_LINUX="(.*)"$,GRUB_CMDLINE_LINUX="$1 apparmor=1 security=apparmor",' /etc/default/grub | 255 | $ sudo perl -pi -e 's,GRUB_CMDLINE_LINUX="(.*)"$,GRUB_CMDLINE_LINUX="$1 apparmor=1 security=apparmor",' /etc/default/grub |
254 | $ sudo update-grub | 256 | $ sudo update-grub |
255 | $ sudo reboot | 257 | $ sudo reboot |
256 | 258 | ||
257 | $ ps auxZ | grep -v '^unconfined' | 259 | If you are using auditd, start aa-notify to get notification whenever a program causes a DENIED message. |
260 | $ sudo aa-notify -p -f /var/log/audit/audit.log | ||
261 | |||
258 | 262 | ||
259 | 263 | ||