Collection of AppArmor profiles for hardering Debian Stable (currently buster).
This repo aims to create as much apparmor profiles as possible, ultimate target is to create profiles at least for any app that use internet or open files downloaded from internet.
git clone --recurse-submodules -j4 https://github.com/komachi/apparmor-even-more-profiles
cd apparmor-even-more-profiles
bash copy.sh # copy profiles from repo to /etc/apparmor.d
bash extra.sh # enable some extra profiles from apparmor-profiles package
Read more about AppArmor on project page. Check out also Debian wiki page on Apparmor.
This repo also incorporates some projects as submodules, reusing already created profiles. So special thanks goes to apparmor-profile-everything, krathalan, Mikhail Morfikov