Tutorial of the Month – June 2010

June 2010 – Apparmor

What a subject.. We’ll step out of the T&T section this month to visit the Security Discussions area.
bodhi.zazen spends a lot of time in this section, educating and providing support.
apparmor (Application Armor) does what its name suggests, it helps protecting the system if an application gets compromised. apparmor works with specific application profiles that regulate and define the applications access in addition to the usual system permissions (which apparmor can only restrict).

By default, Ubuntu comes with apparmor profiles for CUPS, evince, dhclient3, firefox (which is not enabled) and the guest session.

The first thread to read is Introduction to AppArmor which is closed for posting. Two other threads are open for discussion:
Share your AppArmor Profiles and AppArmor Support Thread.

Enjoy the readings, test it out and report back in the threads!

References

UF ToM thread
Introduction to AppArmor
Share your AppArmor Profiles
AppArmor Support Thread

Known Lucid Lynx issues/bugs with workarounds : UF post

For every release, the ubuntuforums Staff pulls together a thread to keep all in one place most common upgrade bugs and workarounds.

For Lucid Lynx, here it is: http://ubuntuforums.org/showthread.php?t=1469475
Thanks philinux!

You can also Share with the community your Lucid Lynx install/upgrade experience thanks to frodon :)

I had kept a Sony Vaio laptop (VGN-C2S series with intel everything) running on Hardy to test the upgrade to Lucid with update-manager. Worked fine, aside from a flashplugin-nonfree problem that broke apt-get/aptitude.
The workaround is listed at the top of the post, as it can be a real stopper for new users :

sudo rm /var/lib/dpkg/info/flashplugin-nonfree.prerm
sudo dpkg --remove --force-remove-reinstreq flashplugin-nonfree
sudo dpkg --purge --force-remove-reinstreq flashplugin-nonfree

(found in an older bug report).
The bug will not prevent a reboot after the install and can be fixed later on.