This repository is an experimental downstream of apparmor.d project.

# apt install apparmor-utils

# mv usr.bin.curl /etc/apparmor.d/
# aa-complain /etc/apparmor.d/usr.bin.curl

Error log is /var/log/syslog by default.

# aa-enforce /etc/apparmor.d/usr.bin.curl

WARNING: custom applications might fail without adjustment!

• abstractions/3rd/nameservice-strict

• Pi-hole (commented out by default)

• Debian 10
• Armbian Buster
• Xubuntu 21.04 (commented out by default)

Snap releases are not supported.

• abstractions/3rd/file-chooser
• abstractions/3rd/nameservice-strict
• local/usr.lib.libreoffice.program.soffice.bin
• usr.bin.ristretto

• write access on home
• interactive file-chooser dialog
• opening files with xdg-open
• various sanitized_helper transitions
• disabled dbus-overwrite

• Xubuntu 21.04
• Ubuntu 21.04

• file deletion by write access
• editing with dash transition
• disabled interactive file-chooser dialog

• Debian 10
• Xubuntu 21.04-21.10

Without NetworkManager. Without interactive credentials supplying, so be sure to provide them in config with auth-user-pass.

• abstractions/3rd/nameservice-strict

• Debian 10-11

Without transfers.

• Debian 10-11

No auto-update and debug. No access to browser cookies ATM.

• abstractions/3rd/nameservice-strict

• disabled --exec
• disabled .netrc auth

• yt-dlp

• Debian 10
• Xubuntu 21.04-21.10
• Ubuntu 21.04

Flatpack releases are not supported.

• abstractions/3rd/nameservice-strict
• usr.local.bin.youtube-dl

• disabled interactive file-chooser dialog
• disabled dbus-overwrite
• disabled qt5-settings-write
• disabled network access

• Debian 10
• Xubuntu 21.04-21.10
• Ubuntu 21.04

pip version only.

• Debian 10
• Xubuntu 21.10

• Debian 10-11
• Xubuntu 21.10

No DBus or ICE.

• Debian 11

• F**k AppArmor (crash course)
• https://wiki.debian.org/AppArmor
• https://wiki.ubuntu.com/AppArmor
• https://github.com/qarmin/czkawka/
• https://github.com/yadifa/yadifa
• https://github.com/JaGoLi/ytdl-gui
• https://github.com/roddhjav/apparmor.d (upstream)