AppArmor, alternative Linux à Windows Defender Security Center
Mis à jour le
Notre avis
AppArmor is not a direct replacement for Windows Defender Security Center, but serves a complementary role in system security on Linux. It excels at confining individual programs using path-based access controls, reducing the impact of compromised applications. However, it does not provide real-time antivirus scanning, firewall management, or system update monitoring. AppArmor is best suited for experienced Linux users or administrators who want to enforce least-privilege policies on applications. It works alongside other tools like clamav, ufw, and auditd to achieve full coverage. Not ideal for beginners expecting an all-in-one security dashboard.
- Licence
- GPL-2.0
- Prix
- Gratuit
- Dernière version
- 5.0.2
- Note
- —
Ce qui fonctionne pareil
- Both monitor system behavior for security enforcement
- Provide alerts and logs for policy violations or threats
- Run in the background with minimal user interaction
- Aim to prevent unauthorized system access or damage
- Can operate in audit mode to log without enforcing
Ce qui change
- AppArmor does not include antivirus or antimalware scanning
- No built-in firewall configuration or network monitoring
- Does not check for system updates or software health
- Focuses on application confinement rather than system-wide security status
- Lacks a graphical control center like Windows Defender Security Center
Ouvrir vos fichiers Windows Defender Security Center
AppArmor does not use or import any files from Windows Defender Security Center. Configuration is done through text-based profile files, typically stored in /etc/apparmor.d/. There is no interoperability with Windows security logs or policy files. Migration must be done manually by translating application restrictions into AppArmor profiles. No tools exist to convert Windows Defender policies to AppArmor rules.
Passer de Windows Defender Security Center à AppArmor, étape par étape
- Install AppArmor tools (apparmor-utils, aa-complain, aa-logprof) via your package manager
- Enable AppArmor at boot and confirm it's active with 'aa-status'
- Use 'aa-logprof' or 'aa-genprof' to create profiles for key applications
- Set profiles to 'enforce' mode once behavior is stable
- Monitor denials in /var/log/audit/audit.log or syslog and adjust profiles as needed
Fonctionnalités clés de AppArmor
- Contrôle d'accès basé sur les chemins pour les programmes
- Application par profil : mode désactivé ou mode alerte
- Les profils peuvent être générés manuellement ou en mode apprentissage
- Intégré directement au noyau Linux
- Profils par défaut inclus pour les services courants
- Journalise les refus via syslog ou auditd
- Syntaxe de politique facile à lire et modifiable par l'humain
Installer AppArmor sous Linux
sudo apt install apparmorsudo apt install apparmorsudo pacman -S apparmorsudo zypper install apparmorQuestions fréquentes
Can AppArmor replace antivirus on Linux?
Not directly. AppArmor prevents unauthorized actions by confined programs but doesn't scan files for malware. Use it alongside tools like ClamAV for scanning.
Does AppArmor include a firewall?
No. AppArmor handles application access control, not network filtering. Use iptables or ufw for firewall functionality.
Is AppArmor suitable for desktop users?
Yes, but with caveats. Default profiles in Ubuntu and SUSE cover many desktop apps, but custom profiles require command-line work and testing.