Enabling AppArmor kernel LSM in Debian 7

August 25, 2014 2.7k views
carlos.killpack
By:
carlos.killpack

I've installed apparmor and updated the default boot options in /boot/grub/menu.lst with apparmor=1 and security=apparmor. When I reboot and run sudo aa-status I am told that the kernel was not booted with those options.

What do I need to do to get this working?

1 comment
  • danorton September 25, 2014

    The way that DigitalOcean creates VMs makes it impossible to set custom boot parameters. You’ll need to build a custom kernel with this option hard-coded.

Log In to Comment
1 Answer
asb MOD September 11, 2014

Hi!

Due to the virtualization technology that we use, the kernel running on the droplet must match what is being run on the hypervisor level. Boot parameters must be passed on the hypervisor. If you open a support ticket, the team should be able to get you squared away.

Reply
Have another answer? Share your knowledge.