Difference between revisions of "AppArmor"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
| − | + | [[wikipedia:AppArmor]] ("Application Armor") is a [[Linux kernel]] [[Linux Security Modules|security module]] that allows the system administrator to restrict programs' capabilities with per-program profiles. | |
| − | [[wikipedia:AppArmor]] | ||
apparmor_status | apparmor_status | ||
Revision as of 17:47, 1 May 2020
wikipedia:AppArmor ("Application Armor") is a Linux kernel security module that allows the system administrator to restrict programs' capabilities with per-program profiles.
apparmor_status
/etc/apparmor.d/libvirt
May 01 17:34:39 g-cc audit[188993]: AVC apparmor="DENIED" operation="open" profile="snap.rocketchat-server.rocketchat-mongo" name="/proc/188993/net/netstat" pid=188993 comm="ftdc" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
To disable AppArmor:
sudo systemctl disable apparmor reboot
Related terms
See also
- SELinux,
semanage,sestatus,getenforce,chcon, security context,setsebool - AppArmor,
/etc/apparmor.d/libvirt,apparmor_status - Seccomp
- Mandatory access control: AppArmor, SELinux, seccomp, System Integrity Protection (macOS)
Advertising:
