search

nobody43 / apparmor-profiles

Improve your system's security.
GNU General Public License v2.0
8 stars 1 forks source link

OpenVPN profile breaks openvpn #13

Open bigli0n opened 2 years ago

bigli0n commented 2 years ago

When using this profile in enforce mode, openvpn cannot launch. The syntax in the profile is incorrect, and although the PID should be whitelisted, it is denied by apparmor. Debian 11. Starting openvpn via systemctl with apparmor in complain mode, then setting it to enforce works because the pid file has already been created but this is not ideal

nobody43 commented 2 years ago

Hi. Could you provide the error message?

nobody43 commented 2 years ago

Anyway, you could checkout this profile: https://github.com/roddhjav/apparmor.d/blob/master/apparmor.d/groups/network/openvpn It's more advanced.