You are not logged in.
Hi!
I've migrated from ubuntu. It is my second week with arch linux set up and running. Liking it so far!
Ubuntu came with apparmor installed by default, but I never played with ubuntu's apparmor.
Im wondering if ubuntu is using the default settings of apparmor, since I did not fiddle with it at all.
With all the apps i need on my system installed, will setting up apparmor with vanilla config on arch offer the same protection as the untouched apparmor i had with ubuntu?
Last edited by XxTriviumxX (2022-03-21 15:01:31)
Offline
I don't run AppArmor myself, but it would not surprise me if Arch uses all the 'defaults' - which in case of AppArmor may mean you have to apply/specify a profile or it won't 'do' anything. Since you say you're new to Arch, I'll give you the standard advise in cases like this: read the fine Wiki page for it (https://wiki.archlinux.org/title/AppArmor).
Offline
Is Mandatory Access Control services like apparmor or SEliunux a huge deal for a user like me? relevent apps that i use are virtualbox (kali linux vm), firefox, ktorrent (i don't download shady stuff with it..) , atom for taking notes and libreoffice.. My firewall config is pretty solid solid, i update apps daily and I don't even use AUR apps... just wondering if creating all those apparmor profiles is worth the effort or if i should leave it as is (because i never touched it on ubuntu) or if i will be good without apparmor..
Last edited by XxTriviumxX (2022-03-21 17:42:43)
Offline
Well... this is Arch, not Ubuntu - it's not really the Arch way to tell you what to do or think. We're all about 'try it and make up your own mind". If you ask my specific opinion, I'd say first try to identify the "threats" you wish to mitigate - what is your stuff exposed to and how could it be attacked? There is no such thing as a 'set it and forget it' security layer that magically protects you from all threats. However, if AppArmor is the thing you think is mitigating those threats, go for it.
Offline