Dev1 Galaxy Forum / Removing Apparmor

Re: Removing Apparmor

dummy@example.com (Lomax) — Thu, 05 Sep 2024 15:28:55 +0000

Thanks, strangely it now wants a load of armhf packages, though I'm on aarch64:

$ sudo apt install dbus libapparmor1- -s
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
dbus is already the newest version (1.14.10-1~deb12u1).
dbus set to manually installed.
The following additional packages will be installed:
  dbus-daemon:armhf gcc-12-base:armhf libapparmor1:armhf libaudit1:armhf libc6:armhf libcap-ng0:armhf libcap2:armhf
  libdbus-1-3:armhf libexpat1:armhf libgcc-s1:armhf libgcrypt20:armhf libgpg-error0:armhf liblz4-1:armhf liblzma5:armhf
  libpcre2-8-0:armhf libselinux1:armhf libsystemd0:armhf libzstd1:armhf
Suggested packages:
  glibc-doc:armhf locales:armhf libnss-nis:armhf libnss-nisplus:armhf rng-tools:armhf
Recommended packages:
  libidn2-0:armhf libgpg-error-l10n:armhf
The following packages will be REMOVED:
  dbus-daemon libapparmor1 libsystemd-shared
The following NEW packages will be installed:
  dbus-daemon:armhf gcc-12-base:armhf libapparmor1:armhf libaudit1:armhf libc6:armhf libcap-ng0:armhf libcap2:armhf
  libdbus-1-3:armhf libexpat1:armhf libgcc-s1:armhf libgcrypt20:armhf libgpg-error0:armhf liblz4-1:armhf liblzma5:armhf
  libpcre2-8-0:armhf libselinux1:armhf libsystemd0:armhf libzstd1:armhf
0 upgraded, 18 newly installed, 3 to remove and 0 not upgraded.

Re: Removing Apparmor

dummy@example.com (delgado) — Thu, 05 Sep 2024 15:18:30 +0000

Sometimes such command lines work:

$ apt install dbus apparmor- -s
dbus is already the newest version (1.14.10-1~deb12u1devuan1).
The following packages will be REMOVED:
  apparmor
Remv apparmor [3.0.8-3]

"apparmor-" has a trailing "-" and "-s" is for simulation.
Computer: daedalus notebook

Re: Removing Apparmor

dummy@example.com (Lomax) — Thu, 05 Sep 2024 14:54:14 +0000

Thanks - that would remove dbus as well, which I think I need:

The following packages will be REMOVED:
  dbus dbus-daemon libapparmor1 libsystemd-shared udisks2

Re: Removing Apparmor

dummy@example.com (quickfur) — Thu, 05 Sep 2024 14:52:00 +0000

In theory you could probably remove libapparmor1 as well. But first check the reverse dependencies to see if it will inadvertently also remove some essential packages, or packages that you need.

Re: Removing Apparmor

dummy@example.com (Lomax) — Thu, 05 Sep 2024 14:48:43 +0000

Thanks, I thought so, and haven't touched it. Strange that these directories are created despite setting the security=none kernel parameter. What about /sys/module/apparmor?

$ dpkg -S apparmor
libapparmor1:arm64: /usr/share/doc/libapparmor1/copyright
libapparmor1:arm64: /usr/share/doc/libapparmor1
man-db: /etc/apparmor.d/usr.bin.man
libapparmor1:arm64: /usr/lib/aarch64-linux-gnu/libapparmor.so.1.8.4
isc-dhcp-client: /etc/apparmor.d/sbin.dhclient
libapparmor1:arm64: /usr/lib/aarch64-linux-gnu/libapparmor.so.1
libapparmor1:arm64: /usr/share/doc/libapparmor1/changelog.Debian.gz
man-db, isc-dhcp-client: /etc/apparmor.d

Re: Removing Apparmor

dummy@example.com (ralph.ronnquist) — Thu, 05 Sep 2024 00:19:35 +0000

Note that /proc is a virtual filesystem tree giving insight into the running kernel. Not to be played with by hand.

Re: Removing Apparmor

dummy@example.com (stargate-sg1-cheyenne-mtn) — Wed, 04 Sep 2024 11:08:27 +0000

speaking of sd cards reminded of:

https://forum.tinycorelinux.net/index.php/topic,26778.0.html

Re: Removing Apparmor

dummy@example.com (Lomax) — Wed, 04 Sep 2024 10:51:50 +0000

Thanks. I am adequately-ish backed up, but the problem is this is on a Raspberry Pi which is somewhat inaccessible, which makes taking a new image of the card quite fiddly. Not to mention how long it takes to image a 64Gb card... So it's not something I do very frequently; most recent back-up was made yesterday and I've done a fair bit of work on it since then. I guess I could copy just those folders back onto the card if I bork it, though physically retrieving it is a bit of a hassle.

Re: Removing Apparmor

dummy@example.com (stargate-sg1-cheyenne-mtn) — Wed, 04 Sep 2024 10:41:02 +0000

as long as you are adequately backed-up, you can always make alterations and see what happens(especially after a warm-restart and/or cold-boot)

Removing Apparmor

dummy@example.com (Lomax) — Wed, 04 Sep 2024 09:50:04 +0000

Hi all,

I've purged apparmor and added security=none to kernel params. I've also deleted /etc/apparmor.d and /var/cache/apparmor. But I still have lots of /proc/[some pid]/task/[some pid]/attr/apparmor directories as well as a /sys/module/apparmor directory - can I safely rm -rf these as well?