AppArmor

AppArmor

Original author(s)	Immunix
Developer(s)	Originally by Immunix (1998-2005), then by SUSE as part of Novell (2005-2009), and currently by Canonical Ltd (since 2009).
Initial release	1998; 26 years ago (1998)
Stable release	3.1.7[1]  / 2 February 2024; 9 months ago (2 February 2024)
Repository	gitlab.com/apparmor
Written in	C, Python, C++, sh[2]
Operating system	Linux
Type	Security, Linux Security Modules (LSM)
License	GNU General Public License
Website	apparmor.net

AppArmor ("Application Armor") is a Linux kernel security module that allows the system administrator to restrict programs' capabilities with per-program profiles. Profiles can allow capabilities like network access, raw socket access, and the permission to read, write, or execute files on matching paths. AppArmor supplements the traditional Unix discretionary access control (DAC) model by providing mandatory access control (MAC). It has been partially included in the mainline Linux kernel since version 2.6.36 and its development has been supported by Canonical since 2009.