AppArmor

AppArmor
Original authorImmunix
DevelopersOriginally by Immunix (1998-2005), then by SUSE as part of Novell (2005-2009), and currently by Canonical Ltd (since 2009).
Release1998 (1998)
Stable release
5.0.2 Edit this on Wikidata / 13 July 2026 (13 July 2026)
Written inC, Python, C++, sh
Operating systemLinux
TypeSecurity, Linux Security Modules (LSM)
LicenseGNU General Public License
Websiteapparmor.net
Repositorygitlab.com/apparmor

AppArmor ("Application Armor") is a Linux kernel security module that allows system administrators to restrict programs' capabilities with per-program profiles. Profiles can allow capabilities like network access, raw socket access, and the permission to read, write, or execute files on matching paths. AppArmor supplements the traditional Unix discretionary access control (DAC) model by providing mandatory access control (MAC). It has been partially included in the mainline Linux kernel since version 2.6.36. Canonical has supported the development of AppArmor since 2009.