[svlug] Restricting privileges

[Sarah Newman]

On 01/15/2015 07:39 AM, Scott DuBois wrote:

> I was under the impression that all 'buntu's had Apparmor installed (and
> running) by default.
> It has been on all my Kubuntu installs.
> 
> https://help.ubuntu.com/lts/serverguide/apparmor.html

>From what I recall apparmor is but firefox hasn't always been. Not sure what the current status is
for firefox specifically, this article is a few months old:

http://www.ubtutorials.com/tutorial/857/htg-explains-what-apparmor-and-how-it-secures-your-ubuntu-system

I also wasn't fully aware of complain vs. enforce mode as apparmor enabled but in complain mode
doesn't prevent anything.

--Sarah