so it seems I have everything installed, but apparmor_status gives "apparmor module is not loaded." Also some apparmor scripts check for presence of /sys/module/apparmor and it is not there... Any idea of what is wrong?

Oh and it's virtual server using OpenVZ

link|improve this question

feedback

2 Answers

up vote 1 down vote accepted

Seems like OpenVZ and apparmor can't coexist

link|improve this answer
feedback

To be more accurate; Apparmor (as does selinux) don't work with OpenVZ, they are incompatible. Apparmor is designed to protect processes accordingly their security policies. With OpenVZ processes work within the same kernel on the HN (protected) under their own init. The way they share their resources would not work with Apparmor, nor SELinux by design.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.