Introduction

This tutorial covers How to Configure AppArmor in Complain Mode on SLES 16 on SLES 16. SLES 16 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management.

Step 1 — Check AppArmor Status

systemctl status apparmor
aa-status

Step 2 — List AppArmor Profiles

aa-status | grep -E "(enforce|complain)"

Step 3 — Enforce a Profile

aa-enforce /etc/apparmor.d/usr.sbin.nginx

Step 4 — Set Profile to Complain Mode

aa-complain /etc/apparmor.d/usr.sbin.nginx

AppArmor Considerations

Note: SLES 16 uses AppArmor for mandatory access control. Check AppArmor status with aa-status and enforce profiles with aa-enforce /etc/apparmor.d/<profile>.

Conclusion

You have successfully completed: How to Configure AppArmor in Complain Mode on SLES 16. For more SLES 16 tutorials, see our full SLES 16 series.