Cara Disable Dan Remove App Armor Ubuntu Server 14.04
AppArmor adalah Mandatory Access Control (MAC) dan ekstensi keamanan yang menyediakan berbagai kebijakan keamanan untuk kernel Linux. Ini adalah sebuah aplikasi alternatif untuk SELinux dan disertakan dengan Ubuntu. Sebagian besar waktu Anda tidak perlu untuk mengkonfigurasi sistem yang aman, dan biasanya menyebabkan lebih banyak masalah karena beberapa layanan tidak bekerja seperti yang diharapkan. Langkah-langkah di bawah ini akan menunjukkan cara untuk menonaktifkan dan menghapus AppArmor di Ubuntu 14.04.
1.Cara mengecek status AppArmor:
root@ubuntu:~# sudo apparmor_status
Maka muncul kayak dibawah ini :
apparmor module is loaded.
4 profiles are loaded.
4 profiles are in enforce mode.
/sbin/dhclient
/usr/lib/NetworkManager/nm-dhcp-client.action
/usr/lib/connman/scripts/dhclient-script
/usr/sbin/tcpdump
0 profiles are in complain mode.
0 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
2. Nonaktifkan AppArmor dan uninstal modul kernel-nya dengan memasukkan berikut:
root@ubuntu:~# sudo /etc/init.d/apparmor stop
root@ubuntu:~# sudo update-rc.d -f apparmor remove
ATAU
root@ubuntu:~# sudo service apparmor stop
root@ubuntu:~# sudo update-rc.d -f apparmor remove
Contoh :
root@ubuntu:~# sudo /etc/init.d/apparmor stop
* Clearing AppArmor profiles cache [ OK ]
All profile caches have been cleared, but no profiles have been unloaded.
Unloading profiles will leave already running processes permanently
unconfined, which can lead to unexpected situations.
To set a process to complain mode, use the command line tool
'aa-complain'. To really tear down all profiles, run the init script
with the 'teardown' option."
root@ubuntu:~# sudo update-rc.d -f apparmor remove
Removing any system startup links for /etc/init.d/apparmor ...
/etc/rcS.d/S37apparmor
3. Menghapus perangkat lunak AppArmor :
root@ubuntu:~# sudo apt-get remove apparmor apparmor-utils -y
Contoh-nya :
root@ubuntu:~# sudo apt-get remove apparmor apparmor-utils -y
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package 'apparmor-utils' is not installed, so not removed
The following packages will be REMOVED:
apparmor
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 1,209 kB disk space will be freed.
(Reading database ... 90149 files and directories currently installed.)
Removing apparmor (2.8.95~2430-0ubuntu5) ...
* Clearing AppArmor profiles cache [ OK ]
All profile caches have been cleared, but no profiles have been unloaded.
Unloading profiles will leave already running processes permanently
unconfined, which can lead to unexpected situations.
To set a process to complain mode, use the command line tool
'aa-complain'. To really tear down all profiles, run the init script
with the 'teardown' option."
Processing triggers for man-db (2.6.7.1-1) ...
Semoga Bermanfaat....!!!!
