Mastering Linux Security and Hardening - Second Edition

Working with AppArmor command-line utilities

Whether or not you have all the AppArmor utilities you need will depend on which Linux distribution you have. On my OpenSUSE Leap workstation, the utilities were there out of the box. On my Ubuntu Server virtual machine, I had to install them myself:

sudo apt install apparmor-utils

First, let's look at the status of AppArmor on the Ubuntu machine. Since it's a rather long output, we'll look at it in sections. Here's the first section:

donnie@ubuntu5:~$ sudo aa-status[sudo] password for donnie:apparmor module is loaded.13 profiles are loaded.13 profiles are in enforce mode.   /sbin/dhclient   /usr/bin/lxc-start   /usr/lib/NetworkManager/nm-dhcp-client.action   /usr/lib/NetworkManager/nm-dhcp-helper /usr/lib/connman/scripts/dhclient-script ...