Live briefing
Everything about AppArmor
Linux kernel security module
AppArmor is a Linux kernel security module that allows system administrators to restrict programs' capabilities with per-program profiles. Profiles can allow capabilities like network access, raw socket access, and the permission to read, write, or execute files on matching paths. AppArmor supplements the traditional Unix discretionary access control (DAC) model by providing mandatory access control (MAC). It has been partially included in the mainline Linux kernel since version 2.6.36. Canonical has supported the development of AppArmor since 2009. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: AppArmorA 5-minute orientation
- Pick up a classic book: LINUXThe most-reprinted book on the subject
- Read the landmark paper: Lic-Sec: An enhanced AppArmor Docker security profile generatorCited 24 times
- Go sideways: SELinuxA closely related topic
- Go sideways: Mandatory access controlA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
📚 Books worth reading
LINUXMichael Kofler · 1997
Linux Administration CookbookAdam K. Dean · 2018
Ubuntu Server AdministrationMichael Jang · 2009
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- SELinux Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including…
- Mandatory access control In computer security, mandatory access control (MAC) refers to a type of access control by which a secured environment (e.g., an operating system or a…
- OpenSUSE openSUSE ( /ˌoʊpənˈsuːzə/) is a free and open-source Linux distribution developed by the openSUSE Project. It is offered in two main variations: Tumbleweed…
- Linux Security Modules Linux Security Modules (LSM) is a framework allowing the Linux kernel to support, without bias, a variety of computer security models. LSM is licensed…
- SUSE Linux Enterprise SUSE Linux Enterprise (SLE) is a Linux-based operating system developed by SUSE. It is available in two editions, suffixed with Server (SLES) for servers…
- Copy Fail CVE-2026-31431, commonly known as Copy Fail, is a vulnerability in the Linux kernel that allows unauthorized privilege escalation, disclosed by security…
- Firewalld firewalld, stylized in all lowercase, is a firewall management tool for Linux operating systems. It provides firewall features by acting as a front-end…
- Tomoyo Linux Tomoyo Linux (stylised as TOMOYO Linux) is a Linux kernel security module which implements mandatory access control (MAC). Tomoyo Linux is a MAC implementation…