Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

so it seems I have everything installed, but apparmor_status gives "apparmor module is not loaded." Also some apparmor scripts check for presence of /sys/module/apparmor and it is not there... Any idea of what is wrong?

Oh and it's virtual server using OpenVZ

share|improve this question

2 Answers 2

up vote 2 down vote accepted

Seems like OpenVZ and apparmor can't coexist

share|improve this answer

To be more accurate; AppArmor (and SELinux) does not work with OpenVZ: they are incompatible.

AppArmor is designed to protect processes according to security policies within the Kernel. With OpenVZ, processes work within their own Container, separated from the Kernel. Protected by their own Init.

The way they access resources would not work with Apparmor, nor SELinux by design.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.