boot log

I get this in my boot log:
fsck from util-linux-ng 2.17.2

/dev/sda2: clean, 162667/1892352 files, 882502/7568128 blocks

fsck from util-linux-ng 2.17.2

/dev/sda3: clean, 5334/26396928 files, 2601313/105381888 blocks

* Starting AppArmor profiles  Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox


[ OK ]

* Setting sensors limits 
[ OK ]


Why is the apparmor disabled in firefox.Is this normal?

 

hello cet

i got the same problem


please check that

https://www.wilderssecurity.com/showthread.php?t=274558

and

https://www.wilderssecurity.com/showthread.php?t=274495

also

steps

sudo aa-enforce /etc/apparmor.d/*


will make your all profiles in enforce mode

then sudo /etc/init.d/apparmor restart

Then check. sudo apparmor_status

 

Sorry but I do not understand what to do clearly.If I leave it as it is ,will there be any security problems.I do not want to do anything wrong.

 

no there will be no security problems.

online arrmor is there to enhance security its gives sandbox kinda environment

http://en.wikipedia.org/wiki/Sandbox_(computer_security)

check jail


click on
step 1 ubuntu software centre

step 2 install apparmor profile

step 3 sudo /etc/init.d/apparmor start (this way i start apparmor)

step 4 sudo aa-enforce /etc/apparmor.d/* (with this single command you put every profile in enforce mode)

(this will put every thing from profile from default mode to enforce mode................. enforce mode is a mode where things work inside jail so any thing like virus/trojan other security issues........... wont effect your system even your firefox.....etc compromise.... where the default profiles are set to permissive mode it wont block but give you a log)

step 5 sudo /etc/init.d/apparmor restart

step 6 sudo aa-status will show status of your profiles

 

I found that you only need to sudo /etc/init.d/apparmor restart (or reload) when switching from complain mode to enforce mode and vice versa, or when you have edited a profile.

In Ubuntu Lucid to disable Firefox apparmor profile (in case you don't want it enabled anymore for whatever reason):-

$ sudo apparmor_parser -R /etc/apparmor.d/usr.bin.firefox-3.5
$ sudo ln -s /etc/apparmor.d/usr.bin.firefox-3.5 /etc/apparmor.d/disable/usr.bin.firefox-3.5