Arch Linux

Nick_Name

Member

Registered: 2022-11-07

Posts: 18

[SOLVED] Question about AppArmor

Hello!
I just installed AppArmor and got some troubles.
I installed AppArmor as it explained in wiki page.
During host reboot I got message:

error: no such cryptodisk found, perhaps a needed disk or cryptodisk module 
is not loaded.
Loading Linux linux...
Loading initial ramdisk...

Press any key to continue...

And when I pressed 'any key' system loading process finished without other errors.
But why it appears?

And I would like to ask one more question.
In boot log a have next string:

 systemd 252.1-2-arch running in system mode (+PAM +AUDIT -SELINUX -APPARMOR -IMA +SMACK, etc 

What does it mean "-APPARMOR"? Is it normal condition or I shoud do something?

Thank you!

P.S.:
I'm using full system encryption but I did not have that message before apparmor was installed.

Last edited by Nick_Name (2022-11-30 12:24:04)

adventurer

Member

Registered: 2014-05-04

Posts: 119

Re: [SOLVED] Question about AppArmor

Have you made sure that you added the necessary kernel parameters to your boot loader?

And did you enable apparmor.service?

What's the output of aa-enabled and systemctl status apparmor?

Nick_Name

Member

Registered: 2022-11-07

Posts: 18

Re: [SOLVED] Question about AppArmor

Have you made sure that you added the necessary kernel parameters to your boot loader?

And did you enable apparmor.service?

What's the output of aa-enabled and systemctl status apparmor?

Sure,

I set the kernel parameter (in /etc/default/grub):

lsm=landlock,lockdown,yama,integrity,apparmor,bpf

aa-enabled:
Yes

systemctl status apparmor:
Active Loaded

Last edited by Nick_Name (2022-11-29 12:57:54)

loqs

Member

Registered: 2014-03-06

Posts: 17,378

Re: [SOLVED] Question about AppArmor

And I would like to ask one more question.
In boot log a have next string:

 systemd 252.1-2-arch running in system mode (+PAM +AUDIT -SELINUX -APPARMOR -IMA +SMACK, etc 

What does it mean "-APPARMOR"? Is it normal condition or I shoud do something?

It means systemd was built without AppArmor support which is how Arch currently builds the systemd package and as such the message is normal.

adventurer

Member

Registered: 2014-05-04

Posts: 119

Re: [SOLVED] Question about AppArmor

I set the kernel parameter (in /etc/default/grub):

lsm=landlock,lockdown,yama,integrity,apparmor,bpf

And did you re-generate the grub.cfg?

Regarding systemd with -APPARMOR: As loqs already said, this is normal. It's the same on my system and apparmor works as it should.

Nick_Name

Member

Registered: 2022-11-07

Posts: 18

Re: [SOLVED] Question about AppArmor

And I would like to ask one more question.
In boot log a have next string:

 systemd 252.1-2-arch running in system mode (+PAM +AUDIT -SELINUX -APPARMOR -IMA +SMACK, etc 

What does it mean "-APPARMOR"? Is it normal condition or I shoud do something?

It means systemd was built without AppArmor support which is how Arch currently builds the systemd package and as such the message is normal.

Thank for your explanation!

Nick_Name

Member

Registered: 2022-11-07

Posts: 18

Re: [SOLVED] Question about AppArmor

I set the kernel parameter (in /etc/default/grub):

lsm=landlock,lockdown,yama,integrity,apparmor,bpf

And did you re-generate the grub.cfg?

Regarding systemd with -APPARMOR: As loqs already said, this is normal. It's the same on my system and apparmor works as it should.

Yes, sure.
But after next reboot I got message about cryptodisk :-(

error: no such cryptodisk found

sanquaes

Member

Registered: 2022-11-30

Posts: 1

Re: [SOLVED] Question about AppArmor

I have the same issue. AppArmour not installed, full disk encryption with LUKS and LVM.

adventurer

Member

Registered: 2014-05-04

Posts: 119

Re: [SOLVED] Question about AppArmor

This thread has been marked as solved. So how was it solved?