Arch Linux

mgunt5

Member

Registered: 2024-06-17

Posts: 21

How do I setup AppArmor with my Arch Linux installation?

I installed AppArmor, with is a mandatory access control system for Linux distributions. I have also enabled the

systemd

service, but I am getting this error message when I type

systemctl status apparmor

  ~ ·········································· michael@IdeaPad-3-mg  9:04:32 PM
$ systemctl status apparmor
○ apparmor.service - Load AppArmor profiles
     Loaded: loaded (/usr/lib/systemd/system/apparmor.service; enabled; preset:>
     Active: inactive (dead)
  Condition: start condition unmet at Tue 2025-02-04 20:29:47 EST; 34min ago
             └─ ConditionSecurity=apparmor was not met
       Docs: man:apparmor(7)
             https://gitlab.com/apparmor/apparmor/wikis/home/

Feb 04 20:29:47 IdeaPad-3-mg systemd[1]: Load AppArmor profiles was skipped bec>
lines 1-9/9 (END)

I read the Arch Wiki but it was so confusing for me and despite following the steps, I still have trouble getting AppArmor to run. Also when AppArmor is running, does it have a default set of permission controls for applications and services, or do I need to manually create permission controls for the applications I use?

bschnei

Member

Registered: 2024-03-05

Posts: 22

Re: How do I setup AppArmor with my Arch Linux installation?

What part of the wiki was confusing? Did you follow the instruction about setting kernel parameters?

mackin_cheese

Member

Registered: 2025-01-07

Posts: 475

Re: How do I setup AppArmor with my Arch Linux installation?

what part of the wiki confused you. Please give us the exact part of the wiki

mgunt5

Member

Registered: 2024-06-17

Posts: 21

Re: How do I setup AppArmor with my Arch Linux installation?

Sorry for the delay. Here is the URL. https://wiki.archlinux.org/title/AppArmor#Installation

mackin_cheese

Member

Registered: 2025-01-07

Posts: 475

Re: How do I setup AppArmor with my Arch Linux installation?

alright and what about that part confused you?

mgunt5

Member

Registered: 2024-06-17

Posts: 21

Re: How do I setup AppArmor with my Arch Linux installation?

If I am using systemd-boot, should I edit the

/etc/kernel/cmdline

file to include the parameters?

lsm=landlock,lockdown,yama,integrity,apparmor,bpf

.

Last edited by mgunt5 (2025-02-05 20:37:55)

mgunt5

Member

Registered: 2024-06-17

Posts: 21

Re: How do I setup AppArmor with my Arch Linux installation?

Hold on, I just checked it and I modified my

/etc/kernel/cmdline

file to include the needed kernel parameters from the Arch Wiki, I then reinstalled

linux-lts

and ran

mkinitcpio

. Now, AppArmor is running fine when I check it using

systemctl status apparmor.service

.

Thank you for the help.

Last edited by mgunt5 (2025-02-05 20:54:58)