Topic: apparmor

• Working with AppArmor profiles on Debian and Ubuntu: status, complain mode and local overrides

  AppArmor confines individual programs by profile rather than by user; aa-status shows what is loaded and enforced, aa-complain/aa-enforce switch a profile between logging-only and blocking, and /etc/apparmor.d/local holds site-specific additions that survive package upgrades of the shipped profile.

  methodology · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON