Ubuntu – How to permanently activate all AppArmor profiles

apparmor

I want all the AppArmor profiles activated wherever applicable permanently, how can I do that?

Best Answer

To permanently put all profiles into enforce mode:

sudo aa-enforce /etc/apparmor.d/*

To permanently put all profiles into complain mode:

sudo aa-complain /etc/apparmor.d/*

To verify the current status of apparmor:

sudo aa-status

complain mode will log violations against the application profiles, whereas enforce mode will strictly enforce the application profiles.

Related Question