Ruby Shell
Latest commit 0790836 Mar 21, 2017 @tas50 tas50 Update apache2 license string
Signed-off-by: Tim Smith <tsmith@chef.io>

README.md

apparmor Cookbook

Build Status Cookbook Version

Default recipe installs and manages AppArmor service, or disables and removes AppArmor depending on default['apparmor']['disable'] attribute. Also includes a custom resource (LWRP) for managing AppArmor policies.

Requirements

Platforms

  • Ubuntu
  • Debian

Chef

  • Chef 12.5+

Cookbooks

  • none

Attributes

  • default['apparmor']['disable']: Controls installing or removing apparmor service in the default.rb recipe. Defaults to false which installs apparmor, starts the service, and enables the service.

Recipes

default.rb

This recipe either installs or removes the apparmor package and starts / enables the service depending on the state of default['apparmor']['disable'].

Custom Resources

Policy

Adds or removes Apparmor policies

Actions

  • :add: Adds a new Apparmor policy using a provided policy file
  • :remove: Removes a specified Apparmor policy

Properties

  • :name: Name attribute. The name of the policy as stored in /etc/apparmor.d/.
  • :source_cookbook: Cookbook to source the policy file from if the provider is not in the same cookbook.
  • :source_filename: Name of the source file in the cookbook if it doesn't match the name attribute.

Examples

Add the policy my_super_app where a cookbook file exists in the same cookbook and is named my_super_app

apparmor_policy 'my_super_app'

Add the policy my_super_app where a cookbook file exists in a different cookbook and the file is named my_super_app_am_policy

apparmor_policy 'my_super_app' do
  source_cookbook 'acme_apparmor_profiles'
  source_filename 'my_super_app_am_policy'
end

Remove the policy my_super_app

apparmor_policy 'my_super_app' do
  action  :remove
end

License & Authors

Author: Cookbook Engineering Team (cookbooks@chef.io)

Copyright: 2009-2016, Chef Software, Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.