Introduction

This tutorial covers How to Configure AppArmor Enforcement on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management.

Step 1 — Check AppArmor Status

systemctl status apparmor
aa-status

Step 2 — List AppArmor Profiles

aa-status | grep -E "(enforce|complain)"

Step 3 — Enforce a Profile

aa-enforce /etc/apparmor.d/usr.sbin.nginx

Step 4 — Set Profile to Complain Mode

aa-complain /etc/apparmor.d/usr.sbin.nginx

AppArmor Considerations

Note: SLES 15 uses AppArmor for mandatory access control. Check AppArmor status with aa-status and enforce profiles with aa-enforce /etc/apparmor.d/<profile>.

Conclusion

You have successfully completed: How to Configure AppArmor Enforcement on SLES 15. For more SLES 15 tutorials, see our full SLES 15 series.