主题： apparmor

• Working with AppArmor profiles on Debian and Ubuntu: status, complain mode and local overrides

  AppArmor confines individual programs by profile rather than by user; aa-status shows what is loaded and enforced, aa-complain/aa-enforce switch a profile between logging-only and blocking, and /etc/apparmor.d/local holds site-specific additions that survive package upgrades of the shipped profile.

  methodology · en · reviewed · 知识截至 2026-09-24

机器可读： JSON