AppArmor [page]ai-synthesized · conf 0.82

AppArmor is a Linux kernel feature that provides mandatory access control (MAC) to restrict an application's capabilities.

Why it matters AppArmor helps prevent privilege escalation attacks by limiting the actions an application can perform.

Key facts - AppArmor uses profiles to define allowed and denied operations for each application - Profiles are attached to a process at runtime using the load operation

Common pitfalls - Incorrectly configured AppArmor profiles can cause applications to fail or behave unexpectedly