AppArmor

Status

AppArmor is active with 117 profiles loaded:

Mode	Count
Enforce	24
Complain	0
Unconfined	93

Profiles in Enforce Mode

• /usr/bin/man
• /usr/lib/snapd/snap-confine
• docker-default
• lsb_release
• man_filter, man_groff
• nvidia_modprobe and subprofile
• plasmashell and subprofile
• rsyslogd
• tcpdump
• ubuntu_pro_apt_news
• ubuntu_pro_esm_cache and subprofiles

Key Points

• Docker's default AppArmor profile is in enforce mode, providing container isolation
• rsyslogd has an AppArmor profile restricting its file access
• No custom profiles are defined beyond the system defaults