Getting Started with AppArmor (Debian Based Linux) [Linux Mint] I (tobor), demonstrate what you need to know in order to get started with apparmor. Apparmor is a MAC based service control for Debian based Linux operating systems. It applies the principals of least privilege to programs and services. If you like what you see please Subscribe! NEW USER CHECK SCRIPT https://github.com/tobor88/Bash/blob/master/newusercheck.sh APPARMOR PREBUILT PROFILES https://gitlab.com/apparmor/apparmor/wikis/Profiles https://gitlab.com/apparmor/apparmor/tree/master/profiles/apparmor/profiles/extras APPARMOR PROFILE LANGUAGE & REFERENCE https://gitlab.com/apparmor/apparmor/-/wikis/QuickProfileLanguage https://gitlab.com/apparmor/apparmor/-/wikis/AppArmor_Core_Policy_Reference 0:00 Getting Started AppArmor Intro Summary 1:32 Install AppArmor and related tools 3:20 Install Auditd or Disable Kernel Rate Limiting (sysctl) 5:51 Three Different Apparmor modes 6:22 General apparmor commands (aa-enabled, aa-status, aa-complain, aa-enforce) 8:11 Reversing aa-teardown command 8:49 I cover what the generated profile will limit permissions too 10:37 Two types of App Armor profiles (Standalone|aa-genprof and Systemic|aa-autodep) 11:30 Showing the aa-easyprof command 12:22 Create a profile with aa-genprof 13:14 Using aa-notify for Apparmor Notifications 13:36 Begin the profile setup questions 16:18 Capabilities in the profile 17:04 Owner File Permissions in the profile 19:05 Run script a second time to ensure no new logs are generated 19:26 Completed last question to complete the profile 20:00 Location of our newly created profile 20:30 Reading the newly created profile 22:09 Make a manual change to the profile file 23:05 Update changes made to file (apparmor_parser) 24:22 Erasing a profile or starting over (aa-cleanprof, apparmoar_parser, aa-remove-unknown) 25:54 Thanks for watching! View my Verified Certifications! https://www.credly.com/users/roberthosborne/badges Follow us on GitHub! https://github.com/tobor88 https://github.com/OsbornePro Official Site https://osbornepro.com/ Give Respect on HackTheBox! https://www.hackthebox.eu/profile/52286 Like us on Facebook! https://www.facebook.com/osborneprollc View PS Gallery Modules! https://www.powershellgallery.com/profiles/tobor The B.T.P.S. Security Package https://btpssecpack.osbornepro.com/