From AppArmor

Contents 1 AppArmor Documentation 1.1 AppArmor Essentials 1.2 Manuals 1.3 How-to and Tutorials 1.4 In Depth 1.5 Misc 1.6 Community Documentation

AppArmor Documentation

AppArmor Essentials

• Getting started
• Quick guide to AppArmor profile language
• Monitoring AppArmor
• AppArmor configuration and policy directory layout
• Determining if AppArmor is causing a problem
• Frequently Asked Questions

Manuals

Profile enforcement:

• apparmor_parser
• aa-audit
• aa-enforce
• aa-complain

Monitoring tools:

• aa-status
• aa-notify
• aa-unconfined

Profile development:

• aa-autodep
• aa-logprof
• aa-genprof
• mod_apparmor
• aa_change_hat
• aa_change_profile
• PAM plugin

How-to and Tutorials

• Creating and modifying AppArmor policy with the tools
• Creating and modifying AppArmor policy by hand
• Using mod_apparmor with Apache to confine web applications - DRAFT
• Using AppAmor with libvirt to confine virtual machines
• Integrating AppArmor with PAM for login-based policies
• Using AppArmor for Role Based Access Control (RBAC) - DRAFT
• Using AppArmor for Multilevel security (MLS) - DRAFT
• Using AppArmor to confine and control Windows applications run through wine - DRAFT

In Depth

Policy:

• Policy Layout Reference
• Policy creation guide - DRAFT
• Core Policy Reference Manual - DRAFT
• mod_apparmor Apache module - DRAFT

Technical documention:

• AppArmor confinement model - DRAFT
• Kernel Documentation - DRAFT
• Policy Encoding
  • TechnicalDoc_HFA - DRAFT
    • Format of the DFA/HFA - DRAFT
    • PolicyDB the encoding of policy rules into the HFA - DRAFT
    • Encoding permissions - DRAFT
    • Putting it altogether relationship of Policy and DFA/HFA - DRAFT
    • Steps in generating the DFA/HFA - DRAFT
  • Encoding of Rule Paths - DRAFT
    • Encoding of File Rule Paths - DRAFT
    • Encoding of Network Rule Paths - DRAFT
    • Encoding of Mount Rule Paths - DRAFT
      • Encoding of the mount flags - DRAFT
    • Encoding of DBus Rule Paths - DRAFT
    • Encoding of X Window Rule Paths - DRAFT

• Technical Documentation - DRAFT

Development:

• AppArmor development APIs - DRAFT
• AppArmor Interfaces - DRAFT
• AppArmor Update Guidelines - DRAFT

Misc

• AppArmor History
• Versions of AppArmor & Release Notes
• Development Roadmap
• Work items
• Release Process
• Compiler improvements tracking

Community Documentation

• Ubuntu AppArmor guide is an introduction to using AppArmor on Ubuntu platforms.