Linux Administration Cookbook

How to do it...

First thing's first, let's make sure that apparmor is running, using our old pal, systemctl:

$ systemctl status apparmor● apparmor.service - AppArmor initialization   Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: enabled)   Active: active (exited) since Sun 2018-10-28 10:41:23 UTC; 4h 21min ago     Docs: man:apparmor(7)           http://wiki.apparmor.net/  Process: 426 ExecStart=/etc/init.d/apparmor start (code=exited, status=0/SUCCESS) Main PID: 426 (code=exited, status=0/SUCCESS)Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.

To see what profiles are loaded, and what mode they're running in, use apparmor_status:

$ sudo apparmor_status apparmor module is loaded. ...