[Feature Request]: Apparmor profiles???

[alexanderbrown21]

Is your feature request related to a problem? Please describe.

No response

Describe the solution you'd like

• Add a folder apparmor to security.
• Store profile scripts to install apparmor profiles for firefox, transmission.etc and others

Describe alternatives you've considered

I have not, i know SELinux is an alternative but never used, but apparmor I'm aware of more for application level security.

Additional context

What pushing me back of this (as a noob to the tool):

• Is this useful to people at least starting with a new distribution to setup?
• Does this profile change much between versions of software?
  • Is it easy to update profiles if needed from the tool
• Do all mainline distros support it out of the box? i.e ubuntu, debian, fedora, arch, void.etc.etc
• Do people really configure profiles for internet application, it's a very very nice to have or essential?

Still learning what defaults are there when a profile is not created, so maybe fine grain use isn't necessary.

Checklist

• I checked for duplicate issues.
• I checked already existing discussions.
• This feature is not included in the roadmap.

[koibtw]

good idea!

[technicks89]

Apparmour can be a great tool for enterprises that have strict security controls.

Setup is not as simple as just turning on apparmor, there are configurations and they are different per app.

@FluffyPunk, what are your thoughts on this?

[FluffyPunk]

Ehm... tbh, never had a thing neither with SELinux nor AppArmor. At one point, it can be good for someone who cares about security, but don't wanna deal using own head.
At other point, that's will become a huge point to maintain /_/