LOADING N0PERM…
Linux Security Module (LSM) providing name-based Mandatory Access Control (MAC). Confines applications to specific files, network sockets, and capabilities.
A standard LINUX utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Standard on Ubuntu and Debian
sudo apt install apparmor apparmor-utilsProfile management & status:
- Check current confinement status: sudo aa-status
- Set profile to enforce mode: sudo aa-enforce /etc/apparmor.d/usr.bin.ping
- Set profile to audit / complain mode: sudo aa-complain /etc/apparmor.d/usr.sbin.nginx
- Generate profile interactively from logs: sudo aa-logprof