CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - 1.6.1.1
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Description
AppArmor provides Mandatory Access Controls.
Rationale
Without a Mandatory Access Control system installed only the default Discretionary Access Control system will be available.
Audit Procedure
Command Line
Verify that AppArmor is installed:
dpkg -s apparmor | grep -E '(Status:|not installed)'
Expected output: Status: install ok installed
Expected Result
The apparmor package should show Status: install ok installed.
Remediation
Command Line
Install AppArmor:
apt install apparmor
Default Value
AppArmor is installed by default on Ubuntu.
References
None.
CIS Controls
| Controls Version | Control |
|---|---|
| v7 | 14.6 Protect Information through Access Control Lists |
Assessment Status
Automated