Apparmor status

1 개요

apparmor_status

/usr/sbin/apparmor_status

$ apparmor_status 
apparmor module is loaded.
122 profiles are loaded.
27 profiles are in enforce mode.
   /usr/bin/man
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   cri-containerd.apparmor.d
   docker-default
   lsb_release
   man_filter
   man_groff
   nvidia_modprobe
   nvidia_modprobe//kmod
   passt
   plasmashell
   plasmashell//QtWebEngineProcess
   rsyslogd
   tcpdump
   ubuntu_pro_apt_news
   ubuntu_pro_esm_cache
   ubuntu_pro_esm_cache//apt_methods
   ubuntu_pro_esm_cache//apt_methods_gpgv
   ubuntu_pro_esm_cache//cloud_id
   ubuntu_pro_esm_cache//dpkg
   ubuntu_pro_esm_cache//ps
   ubuntu_pro_esm_cache//ubuntu_distro_info
   ubuntu_pro_esm_cache_systemctl
   ubuntu_pro_esm_cache_systemd_detect_virt
   unix-chkpwd
   unprivileged_userns
4 profiles are in complain mode.
   transmission-cli
   transmission-daemon
   transmission-gtk
   transmission-qt
0 profiles are in prompt mode.
0 profiles are in kill mode.
91 profiles are in unconfined mode.
   1password
   Discord
   MongoDB Compass
   QtWebEngineProcess
   balena-etcher
   brave
   buildah
   busybox
   cam
   ch-checkns
   ch-run
   chrome
   crun
   devhelp
   element-desktop
   epiphany
   evolution
   firefox
   flatpak
   foliate
   geary
   github-desktop
   goldendict
   ipa_verify
   kchmviewer
   keybase
   lc-compliance
   libcamerify
   linux-sandbox
   loupe
   lxc-attach
   lxc-create
   lxc-destroy
   lxc-execute
   lxc-stop
   lxc-unshare
   lxc-usernsexec
   mmdebstrap
   msedge
   nautilus
   notepadqq
   obsidian
   opam
   opera
   pageedit
   podman
   polypane
   privacybrowser
   qcam
   qmapshack
   qutebrowser
   rootlesskit
   rpm
   rssguard
   runc
   sbuild
   sbuild-abort
   sbuild-adduser
   sbuild-apt
   sbuild-checkpackages
   sbuild-clean
   sbuild-createchroot
   sbuild-destroychroot
   sbuild-distupgrade
   sbuild-hold
   sbuild-shell
   sbuild-unhold
   sbuild-update
   sbuild-upgrade
   scide
   signal-desktop
   slack
   slirp4netns
   steam
   stress-ng
   surfshark
   systemd-coredump
   thunderbird
   toybox
   trinity
   tup
   tuxedo-control-center
   userbindmount
   uwsgi-core
   vdens
   virtiofsd
   vivaldi-bin
   vpnns
   vscode
   wike
   wpcom
23 processes have profiles defined.
3 processes are in enforce mode.
   /coredns (2556) cri-containerd.apparmor.d
   /coredns (2588) cri-containerd.apparmor.d
   /usr/sbin/rsyslogd (706) rsyslogd
0 processes are in complain mode.
0 processes are in prompt mode.
0 processes are in kill mode.
20 processes are unconfined but have a profile defined.
   /pause (1312) runc
   /pause (1317) runc
   /usr/local/bin/kube-proxy (1385) runc
   /usr/local/bin/runsvdir (2010) runc
   /opt/bin/flanneld (2049) runc
   /usr/local/bin/runsv (2111) runc
   /usr/local/bin/runsv (2112) runc
   /usr/local/bin/runsv (2113) runc
   /usr/local/bin/runsv (2114) runc
   /usr/local/bin/runsv (2115) runc
   /usr/bin/calico-node (2116) runc
   /usr/bin/calico-node (2117) runc
   /usr/bin/calico-node (2118) runc
   /usr/bin/calico-node (2119) runc
   /usr/bin/calico-node (2120) runc
   /pause (2462) runc
   /pause (2519) runc
   /pause (3537) runc
   /pause (3587) runc
   /pause (3589) runc
0 processes are in mixed mode.

2 같이 보기

• AppArmor