Cara Disable Dan Remove App Armor Ubuntu Server 14.04

Cara Disable Dan Remove App Armor Ubuntu Server 14.04

AppArmor adalah Mandatory Access Control (MAC) dan ekstensi keamanan yang menyediakan berbagai kebijakan keamanan untuk kernel Linux. Ini adalah sebuah aplikasi alternatif untuk SELinux dan disertakan dengan Ubuntu. Sebagian besar waktu Anda tidak perlu untuk mengkonfigurasi sistem yang aman, dan biasanya menyebabkan lebih banyak masalah karena beberapa layanan tidak bekerja seperti yang diharapkan. Langkah-langkah di bawah ini akan menunjukkan cara untuk menonaktifkan dan menghapus AppArmor di Ubuntu 14.04.

1.Cara mengecek status AppArmor:

root@ubuntu:~# sudo apparmor_status

Maka muncul kayak dibawah ini :

apparmor module is loaded.

4 profiles are loaded.

4 profiles are in enforce mode.

   /sbin/dhclient

   /usr/lib/NetworkManager/nm-dhcp-client.action

   /usr/lib/connman/scripts/dhclient-script

   /usr/sbin/tcpdump

0 profiles are in complain mode.

0 processes have profiles defined.

0 processes are in enforce mode.

0 processes are in complain mode.

0 processes are unconfined but have a profile defined.

2. Nonaktifkan AppArmor dan uninstal modul kernel-nya dengan memasukkan berikut:

root@ubuntu:~# sudo /etc/init.d/apparmor stop

root@ubuntu:~# sudo update-rc.d -f apparmor remove

ATAU

root@ubuntu:~# sudo service apparmor stop

root@ubuntu:~# sudo update-rc.d -f apparmor remove

Contoh :

root@ubuntu:~# sudo /etc/init.d/apparmor stop

 * Clearing AppArmor profiles cache                                                                                                                                       [ OK ]

All profile caches have been cleared, but no profiles have been unloaded.

Unloading profiles will leave already running processes permanently

unconfined, which can lead to unexpected situations.

To set a process to complain mode, use the command line tool

'aa-complain'. To really tear down all profiles, run the init script

with the 'teardown' option."

root@ubuntu:~# sudo update-rc.d -f apparmor remove

 Removing any system startup links for /etc/init.d/apparmor ...

   /etc/rcS.d/S37apparmor

3. Menghapus perangkat lunak AppArmor :

root@ubuntu:~# sudo apt-get remove apparmor apparmor-utils -y

Contoh-nya :

root@ubuntu:~# sudo apt-get remove apparmor apparmor-utils -y

Reading package lists... Done

Building dependency tree

Reading state information... Done

Package 'apparmor-utils' is not installed, so not removed

The following packages will be REMOVED:

  apparmor

0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.

After this operation, 1,209 kB disk space will be freed.

(Reading database ... 90149 files and directories currently installed.)

Removing apparmor (2.8.95~2430-0ubuntu5) ...

 * Clearing AppArmor profiles cache                                                                                                                                       [ OK ]

All profile caches have been cleared, but no profiles have been unloaded.

Unloading profiles will leave already running processes permanently

unconfined, which can lead to unexpected situations.

To set a process to complain mode, use the command line tool

'aa-complain'. To really tear down all profiles, run the init script

with the 'teardown' option."

Processing triggers for man-db (2.6.7.1-1) ...

Semoga Bermanfaat....!!!!