Zen

Translation

AppArmor support is built into the standard kernels provided by Debian. Enabling AppArmor is thus just a matter of installing a fewsome packages and adding some parameters to the kernel command line:by executing <command>apt install apparmor apparmor-profiles apparmor-utils</command> with root privileges.
AppArmor support is built into the standard kernels provided by Debian. Enabling AppArmor is thus just a matter of installing some packages by executing <command>apt install apparmor apparmor-profiles apparmor-utils</command> with root privileges.
141/2470 · 247

Sign in to save the translation.

English Arabic (Morocco) Actions
AppArmor applies a set of rules (known as “profile”) on each program. The profile applied by the kernel depends on the installation path of the program being executed. Contrary to SELinux (discussed in <xref linkend="sect.selinux" />), the rules applied do not depend on the user. All users face the same set of rules when they are executing the same program (but traditional user permissions still apply and might result in different behavior!).
يُطبِّق AppArmor مجموعة قواعد (تدعى ”البروفايل“) على كل برنامج. يختلف البروفايل الذي تطبقه النواة على كل برنامج باختلاف مسار تثبيته؛ ولا تعتمد القواعد على المستخدم الذي يستدعي البرنامج، بخلاف SELinux (الذي ناقشناه في <xref linkend="sect.selinux" />). يخضع المستخدمون كلهم لنفس القواعد عند تنفيذ نفس البرنامج (لكن صلاحيات المستخدمين التقليدية تطبق عليهم طبعاً وهذا قد يؤدي لاختلاف النتائج!).
AppArmor profiles are stored in <filename>/etc/apparmor.d/</filename> and they contain a list of access control rules on resources that each program can make use of. The profiles are compiled and loaded into the kernel by the <command>apparmor_parser</command> command. Each profile can be loaded either in enforcing or complaining mode. The former enforces the policy and reports violation attempts, while the latter does not enforce the policy but still logs the system calls that would have been denied.
تُخزَّن بروفايلات AppArmor في <filename>/etc/apparmor.d/</filename> وهي تحوي قائمة من قواعد التحكم بالوصول لكل الموارد التي يمكن أن يستخدمها أي برنامج. يترجم <command>apparmor_parser</command> هذه البروفايلات ويحملها إلى النواة. يمكن تحميل كل بروفايل إما في وضع الإلزام أو وضع الشكوى. يفرض الوضع الأول اتباع السياسة ويبلغ عن محاولات اختراقها، أما الوضع الثاني فلا يفرض السياسة بل يكتفي بتسجيل نداءات النظام التي تخالف السياسة والتي كان الوضع الأول سيمنعها.
<primary><filename>/etc</filename></primary><secondary><filename>/etc/apparmor.d/</filename></secondary>
<primary>مراقبة</primary><secondary>ملفات السجلات</secondary>
Enabling AppArmor and managing AppArmor profiles
تفعيل AppArmor وإدارة بروفايلاته
<primary><command>aa-status</command></primary>
<primary><command>debsums</command></primary>
AppArmor support is built into the standard kernels provided by Debian. Enabling AppArmor is thus just a matter of installing some packages by executing <command>apt install apparmor apparmor-profiles apparmor-utils</command> with root privileges.
دعم AppArmor مدمج في النوى القياسية التي توفرها دبيان. لا يحتاج تفعيل AppArmor إلا لتثبيت بضعة حزم وإضافة بعض المتغيرات إلى سطر إقلاع النواة:
AppArmor is functional after the installation, and <command>aa-status</command> will confirm it quickly:
وبعد إعادة الإقلاع سيعمل AppArmor ويمكن التحقق من ذلك فوراً عبر <command>aa-status</command>:

<computeroutput># </computeroutput><userinput>aa-status
</userinput><computeroutput>apparmor module is loaded.
32 profiles are loaded.
15 profiles are in enforce mode.
/usr/bin/man
[...]
17 profiles are in complain mode.
/usr/sbin/dnsmasq
[...]
1 processes have profiles defined.
1 processes are in enforce mode.
/usr/sbin/libvirtd (468) libvirtd
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.</computeroutput>

<computeroutput># </computeroutput><userinput>aa-status</userinput>
<computeroutput>apparmor module is loaded.
44 profiles are loaded.
9 profiles are in enforce mode.
/usr/bin/lxc-start
/usr/lib/chromium-browser/chromium-browser//browser_java
[...]
35 profiles are in complain mode.
/sbin/klogd
[...]
3 processes have profiles defined.
1 processes are in enforce mode.
/usr/sbin/libvirtd (1295)
2 processes are in complain mode.
/usr/sbin/avahi-daemon (941)
/usr/sbin/avahi-daemon (1000)
0 processes are unconfined but have a profile defined.</computeroutput>
<emphasis>NOTE</emphasis> More AppArmor profiles
<emphasis>ملاحظة</emphasis> بروفايلات AppArmor إضافية
<primary>AppArmor</primary><secondary>profiles</secondary>
<primary>مراقبة</primary><secondary>ملفات السجلات</secondary>
The <emphasis role="pkg">apparmor-profiles</emphasis> package contains profiles managed by the upstream AppArmor community. To get even more profiles you can install <emphasis role="pkg">apparmor-profiles-extra</emphasis> which contains profiles developed by Ubuntu and Debian.
تحوي الحزمة <emphasis role="pkg">apparmor-profiles</emphasis> بروفايلات يديرها مجتمع AppArmor المنبعي. للحصول على بروفايلات إضافية أخرى يمكنك تثبيت <emphasis role="pkg">apparmor-profiles-extra</emphasis> التي تحوي بروفايلات من تطوير أوبنتو ودبيان.

Loading…

User avatar None

Source string changed

  1. Debian Handbook
  2. 14_security
  3. Arabic (Morocco)
AppArmor support is built into the standard kernels provided by Debian. Enabling AppArmor is thus just a matter of installing a fewsome packages and adding some parameters to the kernel command line:by executing <command>apt install apparmor apparmor-profiles apparmor-utils</command> with root privileges.
4 years ago
Browse all string changes

Things to check

Mismatched colon

Source and translation do not both end with a colon

Reset

Mismatched full stop

Source and translation do not both end with a full stop

Reset

XML markup

XML tags in translation do not match source

Reset

Glossary

English Arabic (Morocco)
AppArmor درع التطبيق Debian Handbook
APT APT (Advanced Package Tool) Debian Handbook

String information

Flags
xml-text
String age
4 years ago
Last updated
a year ago
Source string age
4 years ago
Translation file
ar-MA/14_security.po, string 269