41.2 Enabling and Disabling Novell AppArmor

Novell AppArmor is configured to run by default on any fresh installation of openSUSE. There are two ways of toggling the status of AppArmor:

Using YaST System Services (Runlevel)

Disable or enable AppArmor by removing or adding its boot script to the sequence of scripts executed on system boot. Status changes are applied at the next system boot.

Using Novell AppArmor Control Panel

Toggle the status of Novell AppArmor in a running system by switching it off or on using the YaST Novell AppArmor Control Panel. Changes made here are applied instantaneously. The Control Panel triggers a stop or start event for AppArmor and removes or adds its boot script in the system's boot sequence.

To disable AppArmor permanently by removing it from the sequence of scripts executed on system boot, proceed as follows:

  1. Log in as root and start YaST.

  2. Select System > System Services (Runlevel).

  3. Select Expert Mode.

  4. Select boot.apparmor and click Set/Reset > Disable the service.

  5. Exit the YaST Runlevel tool with Finish.

AppArmor will not be initialized on the next system boot and stays inactive until you explicitly reenable it. Reenabling a service using the YaST Runlevel tool is similar to disabling it.

Toggle the status of AppArmor in a running system by using the AppArmor Control Panel. These changes take effect as soon as you apply them and survive a reboot of the system. To toggle AppArmor's status, proceed as follows:

  1. Log in as root and start YaST.

  2. Select Novell AppArmor > AppArmor Control Panel.

  3. Select Enable AppArmor. To disable AppArmor, uncheck this option.

  4. Exit the AppArmor Control Panel with Done.