Glossary
AppArmor
A Linux kernel security module that confines programs to a per-application profile listing the files and capabilities they may use.
AppArmor is a Linux kernel security module that enforces mandatory access control through per-application profiles. Each profile is a path-based allowlist describing exactly which files a program may read or write and which capabilities it may use, so a compromised application cannot stray beyond its declared behavior.
It offers an easier-to-author alternative to label-based systems, and is the default on Debian and Ubuntu. Profiles live in /etc/apparmor.d/, and aa-status shows which are loaded in enforce or complain mode.