AppArmor cheatsheet
#chetsheet
aa-status
aa-disable /etc/apparmor.d/
aa-enforce /etc/apparmor.d/
aa-genprof /opt/google/chrome/google-chrome
service apparmor restart
#google chrome
https://launchpad.net/~apparmor-dev/+archive/ubuntu/apparmor-devel
#TODO:
#create google-chrome profile and sysdig it
#write manual profile
#do the same with other chrome components
opt.google.chrome.google-chrome
opt.google.chrome.nacl_helper_bootstrap
opt.google.chrome.chrome-sandbox
opt.google.chrome.chrome
Discussion