Introduction

This tutorial covers How to Configure AppArmor Enforcement on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management.

Step 1 — Check AppArmor Status

systemctl status apparmor
aa-status

Step 2 — List AppArmor Profiles

aa-status | grep -E "(enforce|complain)"

Step 3 — Enforce a Profile

aa-enforce /etc/apparmor.d/usr.sbin.nginx

Step 4 — Set Profile to Complain Mode

aa-complain /etc/apparmor.d/usr.sbin.nginx

AppArmor Considerations

Note: SLES 12 uses AppArmor for mandatory access control. Check AppArmor status with aa-status and enforce profiles with aa-enforce /etc/apparmor.d/<profile>.

Conclusion

You have successfully completed: How to Configure AppArmor Enforcement on SLES 12. For more SLES 12 tutorials, see our full SLES 12 series.