Quiz: confinement and audit

One correct answer

The file is 644 (readable by all), yet the service gets Permission denied, with apparmor="DENIED" in the kernel log. What is the cause?

• A The file has the wrong owner.
• B The service reaches the file before it is created.
• C The AppArmor profile closed the access — it checks the program on top of ordinary permissions.