Differences

This shows you the differences between two versions of the page.

--- apparmor:place_an_apparmor_profile_into_enforce_mode [2016/07/28 09:56] – created peter
+++ apparmor:place_an_apparmor_profile_into_enforce_mode [2019/11/25 22:36] (current) – removed peter
@@ Line 1: / Line 1: @@
-====== AppArmor - Place an AppArmor Profile into Enforce Mode ======
-AppArmor confinement is provided via profiles loaded into the kernel, typically on boot.  AppArmor profiles can be in one of two modes:  **enforcement** and **complain**.  Profiles loaded in enforcement mode will result in enforcement of the policy defined in the profile as well as reporting policy violation attempts (either via syslog or auditd).  Profiles in complain mode will not enforce policy but instead report policy violation attempts.
-<code bash>
-sudo aa-enforce /path/to/bin
-</code>
-The **/etc/apparmor.d** directory is where the AppArmor profiles are located.  It can be used to manipulate the mode of all profiles.
-Enter the following to place all profiles into enforce mode:
-<code bash>
-sudo aa-enforce /etc/apparmor.d/*
-</code>