[apparmor] Not seeing apparmor profile for SSHD service in Ubuntu 18.04

Seth Arnold seth.arnold at canonical.com
Wed Feb 13 20:48:54 UTC 2019


On Wed, Feb 13, 2019 at 10:48:23AM -0500, Espresso Beanies wrote:
> I'm not seeing the Apparmor profile for the SSHD service in Ubuntu 18.04
> when I go to install Apparmor and all the profiles. Was it taken out from
> this release? I saw MySQL was also cut out from the 18.04 release as well.

There hasn't been an opensshd profile for a long time: it would really
only make sense as a change_hat- or change_profile-aware variant,
since some sshd processes should have almost no privileges, and other
sshd processes need to be able to start root-owned shells to support
admin logins.

We had one, but it probably hasn't been built in a very long time.

mysql though is surprising. At least the mysql-5.7 package version
5.7.25-0ubuntu0.18.04.2 appears to have a profile. How did you install
your mysql?

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20190213/cbecbd8a/attachment.sig>


More information about the AppArmor mailing list