AppArmor Profile Security Check: Ubuntu/Debian Guide

AppArmor is a mandatory access control system used on Ubuntu and Debian to restrict program capabilities and enhance security.

AppArmor vs SELinux

While RHEL uses SELinux, Ubuntu/Debian rely on AppArmor. Both provide mandatory access control but with different approaches.

Essential Commands

aa-status\naa-enforce /etc/apparmor.d/profile\naa-complain /etc/apparmor.d/profile\naa-disable /etc/apparmor.d/profile\ndmesg | grep apparmor

Automated Checking

pip install dargslan-apparmor-check\napparmor-check\napparmor-check --json

Get all 107 tools: pip install dargslan-toolkit

Resources

Free AppArmor cheat sheet PDF and security eBooks at dargslan.com.