Take the 2-minute tour ×

I understand that Apparmor profiles are useful for securing programs that have access to the internet. Hence the question. I don't see any "terminal"-related profile here.

share|improve this question
You said terminal , I ask something else : Where is the profile for skype ? This is a profile that is definitely necessary, for such application. –  NikTh Nov 21 '12 at 17:00
add comment

1 Answer

up vote 2 down vote accepted

Terminal doesn't need a profile. By default terminal doesn't do anything. Bash (by default) is the command that lets you access a shell (horridly worded, but accurate enough for this answer). Form there you run other programs. So any profile against terminal would be totally useless (as it doesn't access anything other then it's preference files).

Keep in mind that AppArmor is basically a supplement to already existing security. If you never want terminal to access a file you can create your own profile and set it up.

As you can see in cat /etc/apparmor.d/usr.sbin.tcpdump tcpdump (a command that you would run from bash, inside a terminal) has a profile. This is how you would "secure" commands.

Also, in cat /etc/apparmor.d/abstractions/bash you will see that bash has a profile. Thus "terminal" is protected.

share|improve this answer
add comment

Your Answer

