apparmor not working ubuntu 11.04 insize OpenVZ

Question

so it seems I have everything installed, but apparmor_status gives "apparmor module is not loaded." Also some apparmor scripts check for presence of /sys/module/apparmor and it is not there... Any idea of what is wrong?

Oh and it's virtual server using OpenVZ

score 2 · Accepted Answer · answered Oct 31 '11 at 00:29

2

Seems like OpenVZ and apparmor can't coexist

answered Oct 31 '11 at 00:29

ren

337
1
10

score 1 · Answer 2 · edited Jul 09 '14 at 08:51

1

To be more accurate; AppArmor (and SELinux) does not work with OpenVZ: they are incompatible.

AppArmor is designed to protect processes according to security policies within the Kernel. With OpenVZ, processes work within their own Container, separated from the Kernel. Protected by their own Init.

The way they access resources would not work with Apparmor, nor SELinux by design.

edited Jul 09 '14 at 08:51

RapidWebs

571
4
13

answered Nov 23 '11 at 14:53

Ezeyme

193
6

apparmor not working ubuntu 11.04 insize OpenVZ

2 Answers2

Linked