Back to the article

AppArmor

cheat sheet · Ubuntu 24.04 · AppArmor https://lab.dimsanych.ru/en/wiki/apparmor/

Cheat sheet

sudo aa-status profiles and modes
journalctl -k | grep -i 'apparmor.*denied' what is being blocked
sudo aa-complain /etc/apparmor.d/usr.sbin.nginx log only
sudo aa-logprof extend a profile from the logs
sudo aa-enforce /etc/apparmor.d/usr.sbin.nginx block again
sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.nginx reload