profile / subprofile¶

Missing or incorrect profile name.

Problematic rule¶

cat /etc/apparmor.d/foo
# WRONG
profile myfoo {
  ...
}

cat /etc/apparmor.d/foo
# WRONG
profile @{bin}/foo {
  ...
}

Correct rule¶

cat /etc/apparmor.d/foo
profile foo {
  ...
}

cat /etc/apparmor.d/foo
# WRONG
profile foo @{bin}/foo {
  ...
}

Rationale¶

AppArmor profiles and subprofiles must have a name that matches the filename of the profile. Old syntax that includes profile attachment instead of a profile name must be avoided.

Exceptions¶

None