mediumaccess-controlverified ✓rollback-safe
Ensure AppArmor is installed
apparmor-installed · UBUNTU ≥ 22 · 1 impl
Description
The apparmor package provides the AppArmor mandatory access control framework, which confines programs to a limited set of resources on Ubuntu systems.
Rationale
AppArmor enforces mandatory access control policies that limit the damage a compromised process can do. Without it installed, application confinement cannot be applied.
Check → Remediate
Checkpackage_state
- name:
- apparmor
- state:
- present
Remediateapt_present
- name:
- apparmor
Framework references
STIG
V-270659 / UBTU-24-100500V-260556 / UBTU-22-431010
NIST 800-53
AC-3(4)CM-7(2)CM-7(5)
Live verification
ubuntu22:checkubuntu24:check
#apparmor#mandatory-access-control#access-control#packages