Ensure AppArmor is installed

中级别 1人工审核cos

说明

SELinux and AppArmor provide Mandatory Access Controls. Without a Mandatory Access Control system installed only the default Discretionary Access Control system will be available.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that AppArmor is installed with the following command: # grep '\"name\": \"apparmor\"' /etc/cos-package-info.json "name": "apparmor",

修复方式

修复方法: 操作指南或基础设施补丁

Update to an OS image that includes the the apparmor package.

属性

操作系统: 任意
标签: container-optimized-oscos
参考: CIS Google Container-Optimized OS Benchmark v1.2.0 - 1.6 Ensure AppArmor is installed