/ 
Monitoring-Sneck-Checks-0.2.0
/ Monitoring::Sneck::Checks::apparmor

NAME

Monitoring::Sneck::Checks::apparmor - checks AppArmor is enabled with its profiles enforcing

VERSION

Version 0.0.1

SYNOPSIS

apparmor|perl:apparmor
apparmor_web|perl:apparmor -p /usr/sbin/nginx -p php-fpm -m 20
apparmor_lab|perl:apparmor -x '^/usr/bin/firefox'

DESCRIPTION

Checks AppArmor is enabled and the profiles it has loaded, from /sys/kernel/security/apparmor/profiles, which only root can read.

- CRITICAL :: AppArmor not enabled. A profile given with --profile not loaded or not in enforce mode. Fewer profiles than --min-profiles.

- WARNING :: Profiles in complain mode, other than those --exclude matches.

- UNKNOWN :: Not being Linux, or the profiles not being readable.

Profiles flagged unconfined, as some distros ship, are counted but not warned about.

OPTIONS

- -p, --profile :: A profile that must be loaded and enforcing. May be given more than once.

- -m, --min-profiles :: How many profiles there must be at least.

- -x, --exclude :: A regex for profiles allowed to be in complain mode. May be given more than once.

METHODS

check

Does the check.