← Back to all services
Security

AppArmor Security Profiles Configuration

apparmor systemctl: apparmor

Mandatory Access Control (MAC) security system. Restricts program capabilities.

🔌 Default Port

N/A
N/A
Kernel security module

📦 Installation Command

apt install apparmor apparmor-utils apparmor-profiles apparmor-profiles-extra

⚙️ Configuration Files

  • /etc/apparmor/parser.conf
  • /etc/apparmor.d/*

📂 Default Directories

  • config: /etc/apparmor
  • data: /etc/apparmor.d
  • logs: /var/log/audit/audit.log (or syslog)
  • profiles: /etc/apparmor.d

🔐 Default Credentials

Username:N/A
Password:N/A
💡 Kernel module - no auth

⚠️ Conflicts

selinux (choose one MAC) Port: N/A

✅ Works With

dockerlxdsnap

🛡️ Security Notes

Use aa-genprof to create profiles, test in complain mode before enforce, review /var/log/audit/audit.log

❓ Frequently Asked Questions

What is AppArmor?
AppArmor is a Linux security module providing mandatory access control through profiles.
AppArmor vs SELinux?
AppArmor is path-based and simpler. SELinux is label-based and more complex but powerful.
Where are AppArmor profiles?
Profiles are in /etc/apparmor.d/.