And look at this, the warm glow of an orange Summary page.
Congratulations!
Really, congratulations!
You not only know SELinux by now, but you also know AppArmor.
So we were able to introduce you to AppArmor in this module.
We installed our AppArmor utilities and the AppArmor profiles.
We made sure that the profiles were loaded with our rcapparmor start.
But remember, that's just an interface through to our systemctl command.
We can go through and view the status of AppArmor by using aa‑status.
Once we understood a little bit more about AppArmor and the profiles,
we went and generated a profile for a script that we had created.
We can use either aa‑genprof or some of these commands
will work by themselves just as genprof.
If we had modified the script and we need to build
in that additional functionality, we can go and run our aa‑logprof.
What this does,
it goes through and interrogates our log files and determines
whether or not we've got existing profiles that match any of
the errors that we were seeing.
It can then, if we want to,
add corrections or mitigations to allow those processes to work.
Now the information for both genprof and logprof are
going to come from our log files.
So in SUSE and Red Hat this is going to be in our var/log/messages file.
But this gives us a quick and easy introduction to AppArmor and seeing how
we can start securing our applications by using AppArmor,
Application Armor.
Now we may well be finished in this module,
but we've got plenty of modules for you.
And I do hope you're going to join me in the next module where we
take a look at managing SSH servers and connections,
looking at this from an administrative point of view, where we want to have security as our high‑level focus.