[apparmor] /.load missing

[John Johansen]

On 11/5/19 3:36 AM, Lioh Moeller wrote:
> Hi all.
> 
> I am trying to run AppArmor on my system. I have compiled AppArmor support into the kernel but while trying to start the service I got an error message because /sys/kernel/security/.load is missing:
> 
> https://termbin.com/8gsj
> 

/sys/kernel/security/.load is the wrong location

if securityfs is mounted at /sys/kernel/security then apparmor will create a directory within it and within the apparmor directory will be the .load file

ie. the location should be

/sys/kernel/security/apparmor/.load

you can tell if apparmor has successfully initialized by the following messages showing up in dmesg

AppArmor initialized

which will show up if the LSM module successfully registered, if not present ensure apparmor is configed in the kernel and that it is being used on boot (the config or security= or lsm= depending on your kernel version)

and

AppArmor Filesystem Enabled

which will show up if apparmor can successfully setup its filesystem interfaces