Using SUSE AppArmor to profile a workstation application in FireFox
Creating application security policies is a breeze with the no-nonsense configuration wizard in Novell's AppArmor module (available in the YaST Control Center). This tip offers a simple demonstration in the Firefox Web browser to illustrate how quick and easy it is to profile a common workstation application for better enterprise security. This demonstration could be easily reproduced in Konqueror, the OpenOffice suite or any SUSE Linux Enterprise (SLES) server application.
Begin profiling application behavior either by creating a new profile or modifying an existing one. Let's suppose that an organization wants to implement a policy that restricts the Firefox Web browser's access to a set of known actions. If you create a new profile, AppArmor can be put into learning mode wherein it will collect information about application behaviors and later create a formalized policy later (which can be further improved upon manually).
Start by navigating to the Novell AppArmor entry in the YaST Control Center. Click on "Add Profile Wizard." The first prompt will have an input field for the following information:
- Login or register to post comments
- Printer-friendly version
- 2733 reads
- PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is releasedAfter three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release. |
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future TechThe metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world. Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility. |
today's howtos
|
Recent comments
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago