--- What is AppArmor? ---AppArmor is MAC style security extension for the Linux kernel. It implementsa task centered policy, with task "profiles" being created and loadedfrom user space. Tasks on the system that do not have a profile defined forthem run in an unconfined state which is equivalent to standard Linux DACpermissions.--- How to enable/disable ---set CONFIG_SECURITY_APPARMOR=yIf AppArmor should be selected as the default security module then set CONFIG_DEFAULT_SECURITY="apparmor" and CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1Build the kernelIf AppArmor is not the default security module it can be enabled by passingsecurity=apparmor on the kernel's command line.If AppArmor is the default security module it can be disabled by passingapparmor=0, security=XXXX (where XXX is valid security module), on thekernel's command lineFor AppArmor to enforce any restrictions beyond standard Linux DAC permissionspolicy must be loaded into the kernel from user space (see the Documentationand tools links).--- Documentation ---Documentation can be found on the wiki.--- Links ---Mailing List - apparmor@lists.ubuntu.comWiki - http://apparmor.wiki.kernel.org/User space tools - https://launchpad.net/apparmorKernel module - git://git.kernel.org/pub/scm/linux/kernel/git/jj/apparmor-dev.git