Security Hardening (SELinux/AppArmor) · question
Q.04 of 27
Explain AppArmor profile modes.
← All Security Hardening (SELinux/AppArmor) questions
Re-explain
AppArmor profiles can operate in two modes:
- Enforce Mode: The profile actively restricts the application's access according to the defined rules. Violations are blocked and logged.
- Complain Mode: The profile logs access violations but doesn't enforce restrictions. Useful for profile development and testing.
Commands:
# Check profile status
aa-status
# Set profile to complain mode
aa-complain /path/to/program
# Set profile to enforce mode
aa-enforce /path/to/program
# Disable profile
aa-disable /path/to/program
Profile location: Profiles are stored in /etc/apparmor.d/ directory.
Rewriting in plainer words…
This answer doesn't lend itself to a diagram - it reads best . No credits were charged.
The model's verdict: “”
This answer is explained by a shared concept diagram -
open →
Point the redraw:
How well did you know this?
AI:
Saved in this browser - sign in to keep your review list.
How should your speech become text?
Listening… your words appear above as you speak - tap Stop when you're done.
Recording · cr - tap Stop & transcribe when you're done.
Transcribing with AI…
Voice:
Keep going - a few more words and AI can grade it.
Interview lens
Likely follow-ups, what you can say, and the weak answers to avoid.
Pro · $10/mo
23 of 27 Security Hardening (SELinux/AppArmor) answers are gated.
Full answers, code samples, AI explanations - simpler, deeper, or as an interactive diagram. Cancel anytime.
-
Full answers + code
-
AI explain - simpler, deeper, or visualized
-
1,000 AI credits / month
-
Cancel anytime
