How to use apparmor: 2-Minute Linux Tips

The video tutorial introduces AppArmor, a security module for Linux systems like Ubuntu and Debian. It contrasts AppArmor with SELinux, highlighting that they cannot run simultaneously. AppArmor uses file system paths for restrictions, unlike SELinux, which uses security labels. The tutorial explains how to check if AppArmor is active using the 'AppArmor status' command and interprets the output, which shows loaded security profiles and their modes. It emphasizes AppArmor's role in restricting access to processes and applications without much configuration, though profiles can be modified in the '/etc/apparmor.d' directory.

What is a key difference between AppArmor and SELinux?

• AppArmor uses security labels, while SELinux uses file paths.

• AppArmor and SELinux can run simultaneously.

• Both use the same method for enforcing restrictions.

• AppArmor uses file system paths, while SELinux uses security labels.

Which command is used to check if AppArmor is active on a system?

• AppArmor verify

• AppArmor status

• AppArmor check

• AppArmor inspect

What does the 'enforce mode' in AppArmor indicate?

• It logs complaints without restricting access.

• It restricts access to processes and applications.

• It allows all processes to run without restrictions.

• It disables all security profiles.

Where are AppArmor application profiles stored?

• /var/lib/apparmor

• /usr/local/apparmor

• /etc/apparmor.d

• /opt/apparmor/profiles

What do the names of files in the AppArmor profiles directory correspond to?

• Security labels

• User permissions

• Network configurations

• Executable locations on the system