Quiz: confinement and audit

One correct answer

An AppArmor profile forbids a path the service needs. How do you allow it so the change survives a package update?

• A Switch the profile to complain and leave it there.
• B Change the file permissions with chmod.
• C Add the path to /etc/apparmor.d/local/ and reload with apparmor_parser -r.