Description 描述
AppArmor is an effective and easy-to-use Linux application security system. AppArmor proactively protects the operating system and applications from external or internal threats, even zero-day attacks, by enforcing good behavior and preventing even unknown application flaws from being exploited. AppArmor security policies completely define what system resources individual applications can access, and with what privileges. A number of default policies are included with AppArmor, and using a combination of advanced static analysis and learning-based tools, AppArmor policies for even very complex applications can be deployed successfully in a matter of hours.
AppArmor是一個高效和易於使用的Linux系統安全應用程式。AppArmor對作業系統和應用程式所受到的威脅進行從內到外的保護,甚至是未被發現的0day漏洞和未知的應用程式漏洞所導致的攻擊。AppArmor安全策略可以完全定義個別應用程式可以訪問的系統資源與各自的特權。AppArmor包含大量的默認策略,它將先進的靜態分析和基於學習的工具結合起來,AppArmor甚至可以使非常複雜的套用可以使用在很短的時間內套用成功。
套用的系統範圍和更新
Annvix
mandriva
openSUSE
Pardus Linux
PLD
Ubuntu
Updated RPMS built from the tip of the old Subversion tree can be found at the openSUSE Build Service. These are not limited to SUSE distributions.
RPM包的各個版本可以在openSUSE編譯服務中找到,並且不僅限於基於SUSE系統的版本。
Source code 原始碼
The AppArmor project source is split between the kernel module and the user space tools.
AppArmor項目的源來自核心模組和用戶工具。
AppArmor is in the upstream kernel as of 2.6.36. Earlier releases and compatibility patches are available in the kernel module git tree:
AppArmor已經整合進2.6.36版核心。早期版本核心可以通過加入核心模組補丁的方式啟用它:
How to get the AppArmor kernel source?
怎樣得到AppArmor的原始碼?
Note: the master branch is not stable and will be rebased from time to time. Release branches will be stable and will not be rebased.
注:最終版本的再編譯會導致程式的不穩定。Apparmor的發行版是穩定的,不需要再次編譯。
Current release: AppArmor 2.5.1
AppArmor 2.5.1當前版本
下載地址
md5sum 76b37656bf42fedab0d0b9d47e690a8b
md5值:76b37656bf42fedab0d0b9d47e690a8b
release notes
版本日誌
User space tools
開發工具
How to get the AppArmor user space tools
怎樣得到AppArmor開發工具
Documentation 文檔
AppArmor documentation for the project, including manuals, tutorials, technical documentation and more:
AppArmor項目文檔,包括手冊,教程,技術文檔和其他的資料:
Official documentation
官方文檔
Distribution documentation and notes:
其他版本文檔:
AppArmor on CentOS
基於CentOS系統的AppArmor文檔
AppArmor on Debian
基於Debian系統的AppArmor文檔
AppArmor on Ubuntu
基於Ubuntu系統的AppArmor文檔
Reporting Bugs 錯誤報告
Bug Tracking is hosted in Launchpad at This site.
錯誤報告發布
Joining AppArmor
加入AppArmor
Mailing list
郵件列表
discuss AppArmor development and use.
討論AppArmor發展和使用。
The IRC channel is #apparmor on irc.oftc
觀察聊天是第apparmor irc.oftc上
Bug Tracking - project apparmor on launchpad
缺陷跟蹤-在launchpad.上的apparmor項目
Contributions to AppArmor are welcome. Anyone can pull the code from the git repository or from launchpad, and begin hacking on the code. Patches can be contributed by posting them to the mailing list for review. Please see the CommitPolicy and Versioning before sending patches.
任何對AppArmor的貢獻都是受歡迎的。任何人都可以從GNU互助工具中提取代碼並開始解釋代碼。請通過郵件列表發布補丁以供審查。請參考CommitPolicy的現在和以往的版本來發布補丁。
If you are a launchpad member, or wish to join launchpad, launchpad allows creating custom branches of AppArmor and you can submit merge requests from your own custom branch (see Using Launchpad with AppArmor)
如果你是一個lanuchpad member或者想加入launchpad,launchpad允許建立AppArmor的自定義版本(branches),你可以提交自己的自定義的要求(見Apparmor的Launchpad)
Commit privileges to the git tree and launchpad master repository are restricted, but can be earned by any developer who is involved in the project.
Meetings are held regularly on the IRC channel and are open to the everyone. Please see MeetingAgenda for times.
在IRC頻道定期舉行一次會議,它向所有人開放。請查看會議議程時間。