openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-51337.rst
Major Hayden ec27cefbef V-51337: Use an LSM at boot 
Change-Id: Ifbda2eddcd26beec49f00f8617ae6d3cd79bc1ef
2015-10-26 09:58:47 -05:00

519 B
Raw Blame History

Ubuntu loads the AppArmor module by default starting with version 8.04. For more information, review the AppArmor documentation on Ubuntu's site. In addition, the openstack-ansible project configures AppArmor policies for the LXC containers which run the OpenStack infrastructure.

The tasks for this STIG will verify that AppArmor is enabled via the apparmor_status. The playbook will fail if AppArmor is found to be disabled on the host.