Debian 12 App Armor Enabled but aa-status does not work. Why?
2
votes
1
answer
643
views
I've installed Debian 12 Bookworm recently and, as far as I could read about a fresh installation, it comes with app-armor pre-installed by default. I'm running the command
aa-status
as root but it's returning: bash: aa-status: command not found
. I know aa-status is part of apparmor-utils. And that's installed too.
Being more precise, the return of apt list --installed | grep apparmor
here lies in:
apparmor-profiles/stable,stable,now 3.0.8-3 all [installed]
apparmor-utils/stable,stable,now 3.0.8-3 all [installed]
apparmor/stable,now 3.0.8-3 amd64 [installed]
libapparmor1/stable,now 3.0.8-3 amd64 [installed]
python3-apparmor/stable,stable,now 3.0.8-3 all [installed,automatic]
python3-libapparmor/stable,now 3.0.8-3 amd64 [installed,automatic]
Once I "ask" systemctl about apparmor with systemctl status apparmor it "says":
● apparmor.service - Load AppArmor profiles
Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; preset: enabled)
Active: active (exited) since Thu 2024-07-25 08:39:48 -03; 5min ago
Docs: man:apparmor(7)
https://gitlab.com/apparmor/apparmor/wikis/home/
Process: 978 ExecStart=/lib/apparmor/apparmor.systemd reload (code=exited, status=0/SUCCESS)
Main PID: 978 (code=exited, status=0/SUCCESS)
CPU: 359ms
Jul 25 08:39:48 mypc systemd: Starting apparmor.service - Load AppArmor profiles...
Jul 25 08:39:48 mypc apparmor.systemd: Restarting AppArmor
Jul 25 08:39:48 mypc apparmor.systemd: Reloading AppArmor profiles
Jul 25 08:39:48 mypc systemd: Finished apparmor.service - Load AppArmor profiles.
I've also noticed the Finished apparmor.service - Load AppArmor profiles. but do not know what it mean. Do I need a profile to get it running properly? It does not come with default profiles? Could you help me to understand it better?
Thanks in advance!
Asked by Neto Araujo
(43 rep)
Jul 25, 2024, 12:56 PM
Last activity: Jul 25, 2024, 04:45 PM
Last activity: Jul 25, 2024, 04:45 PM