Lessons Learned While Making an AppArmor Play Machine

Explore the development challenges and solutions involved in creating a Play Machine system that demonstrates AppArmor's security capabilities without traditional Unix permissions. Learn how Alexandre Pujol from Linagora built a system where root serves as the guest account, relying solely on AppArmor for access restrictions to prove that modern security extends beyond traditional root privileges. Discover the implementation of the apparmor.d project with Full System Policies (FSP) mode, which provides comprehensive profiles and user roles for every process and user while ensuring no unconfined processes can run on the system. Examine the main technical challenges encountered during development, including security architecture design for profiles, testing methodologies, and profile integration complexities. Understand the specific complications involved in providing open root access on a virtual machine accessible to all users while maintaining security. Gain insights into the practical application of AppArmor as a primary security mechanism and access the open-source profiles, tooling, and documentation available through the project's GitHub repository, along with hands-on experience through the live play machine demonstration platform.