This page tracks progress of adding AppArmor profiles to Debian.

Goals

For Buster, we'd like to enable AppArmor by default and improve the workflow for cross-distro collaborative profiles maintenance.

In progress

Enabling AppArmor by default?

We are discussing and researching if/how AppArmor should be enabled by default on Debian:

Profiles being worked on

Pending maintainer upload

Pending upload of apparmor-profiles-extra

Wishlist bug filed

To be done

Done (for Buster, at least)

Included in the corresponding package

Note: this list is partial and somewhat outdated, i.e. the actual situation is better :)

Included in the apparmor-profiles package

The Community supported profiles are included in the apparmor-profiles package in complain mode.

Included in the apparmor-profiles-extra package

See the current list of profiles in Git.

OutreachProgram Round 9

See AppArmor/OutReachyRound9.