LFCS · Question #411
How does AppArmor configure its access control settings?
The correct answer is D. A profile is assigned per application that specifies the system resources available to the application. AppArmor enforces Mandatory Access Control by assigning security profiles to individual applications, which define their allowed resource access.
Question
Options
- AAppArmor does not require any configuration.
- BAppArmor inspects the Linux system to determine which applications are installed and configures
- CAppArmor relies on precompiled policies. These policies are updated with new releases or can be
- DA profile is assigned per application that specifies the system resources available to the application.
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- D93% (27)
Why each option
AppArmor enforces Mandatory Access Control by assigning security profiles to individual applications, which define their allowed resource access.
AppArmor requires explicit configuration through profiles to define application permissions.
AppArmor does not automatically inspect the system and configure itself; it relies on predefined or user-created profiles.
While AppArmor uses policies, these are application-specific 'profiles' that are typically loaded and enforced, rather than general precompiled system policies updated with releases.
AppArmor operates on a 'profile' basis, where each profile is a set of rules defining what system resources (files, network, capabilities, etc.) an application is allowed to access and what operations it can perform, thereby enforcing access control at the application level.
Concept tested: AppArmor profile-based access control
Source: https://wiki.ubuntu.com/AppArmor/Profiles
Topics
Community Discussion
No community discussion yet for this question.