====== AppArmor ======

**AppArmor** ("Application Armor") is a Linux kernel security module that allows the system administrator to restrict programs' capabilities with per-program profiles.

Profiles can allow capabilities like network access, raw socket access, and the permission to read, write, or execute files on matching paths.

----

[[Ubuntu:AppArmor:Create an AppArmor Profile|Create an AppArmor Profile]]

[[Ubuntu:AppArmor:Get AppArmor Status|Get AppArmor Status]]

[[Ubuntu:AppArmor:Disable AppArmor|Disable AppArmor]]

[[Ubuntu:AppArmor:Disable an AppArmor Profile|Disable an AppArmor Profile]]

[[Ubuntu:AppArmor:Enable AppArmor|Enable AppArmor]]

[[Ubuntu:AppArmor:Enable an AppArmor profile|Enable an AppArmor Profile]]

[[Ubuntu:AppArmor:Install additional AppArmor security profiles|Install additional AppArmor security profiles]]

[[Ubuntu:AppArmor:Load an AppArmor Profile|Load an AppArmor Profile]]

[[Ubuntu:AppArmor:Place an AppArmor Profile into Complain Mode|Place an AppArmor Profile into Complain Mode]]

[[Ubuntu:AppArmor:Place an AppArmor Profile into Enforce Mode|Place an AppArmor Profile into Enforce Mode]]

----

===== References =====

  * https://help.ubuntu.com/12.04/serverguide/apparmor.html

  * See the [[http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/index.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmor_admin.html|AppArmor Administration Guide]] for advanced configuration options.

  * For details using AppArmor with other Ubuntu releases see the [[https://help.ubuntu.com/community/AppArmor|AppArmor Community Wiki]] page.

  * The [[http://en.opensuse.org/SDB:AppArmor_geeks|OpenSUSE AppArmor]] page is another introduction to AppArmor.

  * A great place to ask for AppArmor assistance, and get involved with the Ubuntu Server community, is the #ubuntu-server IRC channel on [[http://freenode.net/|freenode]].