SUBDOMAIN_PATH¶

This variable accepts a string (path), and is by default set to '/etc/apparmor.d/' This variable defines where the AppArmor security tool looks for its policy definitions (a.k.a. AppArmor profiles).

SUBDOMAIN_MODULE_PANIC¶

This variable accepts a string that is one of four values: warn, build, panic, or build-panic, and is set by default to warn.

This setting controls the behavior of the AppArmor initscript if it cannot successfully load the AppArmor kernel module on startup. The four possible settings are:

warn

Log a failure message (the default behavior).

build

Attempt to build the AppArmor module against the currently running kernel. If the compilation is successful, the module will be loaded and AppArmor started; if the compilation fails, a failure message is logged.

panic

Log a failure message and drop to runlevel 1 (single user).

build-panic

Attempt to build the module against the running kernel (like build) and if the compilation fails, drop to runlevel 1 (single user).