Sample Header Ad - 728x90

Enabling AppArmor in Linux

2 votes
1 answer
4202 views
I've compiled a kernel (linux-libre-xtreme) with [this configuration](https://git.parabola.nu/abslibre.git/plain/kernels/linux-libre-xtreme/config.x86_64) , it has most LSMs enabled: YAMA, SMACK, AppArmor, TOMOYO and SELinux. However, when I start the apparmor service with OpenRC I get: # rc-service apparmor start * Stopping AppArmor ... * Unloading AppArmor profiles * Root privileges not available [ !! ] * Starting AppArmor ... * Loading AppArmor profiles ... Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.) Warning: unable to find a suitable fs in /proc/mounts, is it mounted? Use --subdomainfs to override. * /etc/apparmor.d/usr.bin.apache2 failed to load Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.) Warning: unable to find a suitable fs in /proc/mounts, is it mounted? Use --subdomainfs to override. And other profiles also complain, however this doesn't happen with other kernel that I've compiled too (linux-libre-lts-apparmor, see its configuration [here](https://git.parabola.nu/abslibre.git/plain/kernels/linux-libre-lts-apparmor/config.x86_64)) What am I doing wrong? If I do cat /sys/module/apparmor/parameters/enabled with the linux-libre-xtreme kernel, I get N, but with linux-libre-lts-apparmor, it says Y, so I know it's not something with kernel parameters from the bootloader.
Asked by Megver83 (311 rep)
Nov 1, 2017, 09:49 PM
Last activity: Sep 14, 2018, 02:26 PM