| name | cis-ubuntu1604-v200-1-6-1-1 |
| description | Ensure AppArmor is installed |
| category | cis-iam |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu","linux","ubuntu-16.04","apparmor","mac","mandatory-access-control"] |
| cis_id | 1.6.1.1 |
| cis_benchmark | CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - 1.6.1.1
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Description
AppArmor provides Mandatory Access Controls.
Rationale
Without a Mandatory Access Control system installed only the default Discretionary Access Control system will be available.
Audit Procedure
Command Line
Verify that AppArmor is installed:
dpkg -s apparmor | grep -E '(Status:|not installed)'
Expected output: Status: install ok installed
Expected Result
The apparmor package should show Status: install ok installed.
Remediation
Command Line
Install AppArmor:
apt install apparmor
Default Value
AppArmor is installed by default on Ubuntu.
References
None.
CIS Controls
| Controls Version | Control |
|---|
| v7 | 14.6 Protect Information through Access Control Lists |
Assessment Status
Automated