apparmor

9 Apr 2022

      Hallo zusammen,
kann mir jemand die apparmor Status Ausgabe erklären ?
Ich versteh nie welche Dinge nun wirklich scharf gestellt sind.
Also mit dem Befahl aa-status bekommt man die Ausgabe :

tux:~/scripts # aa-status
apparmor module is loaded.
60 profiles are loaded.
58 profiles are in enforce mode.
   /usr/bin/lessopen.sh
   /usr/bin/locate
   /usr/bin/updatedb
   /usr/lib/colord
   /usr/share/gitweb/gitweb.cgi
   apache2
   apache2//DEFAULT_URI
   apache2//HANDLING_UNTRUSTED_INPUT
   apache2//phpsysinfo
   avahi-daemon
   dnsmasq
   dnsmasq//libvirt_leaseshelper
   docker-default
   dovecot
   dovecot-anvil
   dovecot-auth
   dovecot-config
   dovecot-deliver
   dovecot-dict
   dovecot-dovecot-auth
   dovecot-dovecot-lda
   dovecot-dovecot-lda//sendmail
   dovecot-imap
   dovecot-imap-login
   dovecot-lmtp
   dovecot-log
   dovecot-managesieve
   dovecot-managesieve-login
   dovecot-pop3
   dovecot-pop3-login
   dovecot-script-login
   dovecot-ssl-params
   dovecot-stats
   ghostscript
   identd
   klogd
   libvirtd
   libvirtd//qemu_bridge_helper
   lsb_release
   mdnsd
   nmbd
   nscd
   ntpd
   nvidia_modprobe
   nvidia_modprobe//kmod
   php-fpm
   ping
   samba-bgqd
   smbd
   smbldap-useradd
   smbldap-useradd///etc/init.d/nscd
   syslog-ng
   syslogd
   traceroute
   virt-aa-helper
   virtqemud
   virtqemud//qemu_bridge_helper
   winbindd
2 profiles are in complain mode.
   /etc/apparmor.d/usr.lib64.firefox.firefox.sh
   ghostscript///usr/bin/hpijs
0 profiles are in kill mode.
0 profiles are in unconfined mode.
45 processes have profiles defined.
45 processes are in enforce mode.
   /usr/sbin/avahi-daemon (869) avahi-daemon
   /watchtower (8906) docker-default
   /usr/bin/coolwsd (8913) docker-default
   /usr/local/bin/php (9037) docker-default
   /usr/sbin/mariadbd (9064) docker-default
   /usr/sbin/php-fpm7.4 (9082) docker-default
   /usr/sbin/nginx (9152) docker-default
   /bin/dash (9264) docker-default
   /usr/bin/inotifywait (9266) docker-default
   /usr/local/bin/php (9339) docker-default
   /usr/local/bin/php (9360) docker-default
   /usr/local/bin/php (9361) docker-default
   /usr/local/bin/php (9362) docker-default
   /usr/local/bin/php (9363) docker-default
   /usr/sbin/nginx (9409) docker-default
   /usr/sbin/nginx (9410) docker-default
   /usr/sbin/nginx (9411) docker-default
   /usr/sbin/nginx (9412) docker-default
   /usr/bin/coolforkit (9510) docker-default
   /usr/bin/coolforkit (9514) docker-default
   /usr/sbin/cron (9539) docker-default
   /usr/sbin/php-fpm7.4 (9540) docker-default
   /usr/sbin/php-fpm7.4 (9541) docker-default
   /usr/sbin/php-fpm7.4 (9542) docker-default
   /usr/sbin/php-fpm7.4 (9543) docker-default
   /usr/sbin/php-fpm7.4 (9544) docker-default
   /usr/sbin/php-fpm7.4 (9545) docker-default
   /usr/sbin/php-fpm7.4 (9546) docker-default
   /usr/sbin/php-fpm7.4 (9547) docker-default
   /usr/sbin/php-fpm7.4 (9548) docker-default
   /usr/sbin/php-fpm7.4 (9549) docker-default
   /usr/sbin/php-fpm7.4 (9562) docker-default
   /usr/sbin/php-fpm7.4 (9690) docker-default
   /usr/sbin/dovecot (1403) dovecot
   /usr/lib/dovecot/anvil (1423) dovecot-anvil
   /usr/lib/dovecot/auth (10332) dovecot-auth
   /usr/lib/dovecot/auth (10333) dovecot-auth
   /usr/lib/dovecot/config (1425) dovecot-config
   /usr/lib/dovecot/log (1424) dovecot-log
   /usr/lib/dovecot/stats (4054) dovecot-stats
   /usr/sbin/nmbd (1406) nmbd
   /usr/lib64/samba/samba-bgqd (1529) samba-bgqd
   /usr/sbin/smbd (1499) smbd
   /usr/sbin/smbd (1527) smbd
   /usr/sbin/smbd (1528) smbd
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
0 processes are in mixed mode.
0 processes are in kill mode.

Was ist denn nun "enforced" ?
Der obere Teil der Liste oder der untere oder beide ??

Danke für Kommentare

Lothar