Some questions I want answered in the answer:
- How do I know if apparmor is running?
- How can I tell if it's working well?
To know the status of your app-armor , type this command in your terminal.
for example , sample output:
To give working performance of Apparmor I think there is no Measurement tool.As I know we have to detect it by the things happening around with your PC I mean something abnormal.
To address this subquestion: How can I tell if it's working well?
Apparmor profiles are a work in progress. Consequently, the goal posts are moving. Please take a look at Poking Holes in AppArmor Profiles and the response of Canonical's Jamie Strandboge here. I hope these two links will give you an idea of the complexity of the issue.
Whether you wish to retain the subquestion as part of your question is your decision.
Apologies in advance for this "non-answer".
Edit to further illustrate why this subquestion is, to say the least, dependent on context:
Consider one of the most popular programs: Firefox. It has a profile but it is shipped in complain mode and not in enforce mode. In other words, Apparmor does nothing for Firefox out of the box. The reason is stated here, albeit briefly:
Next, consider what happens when an average user who just "heard" or "read" about Apparmor puts the profile in enforce mode. No doubt there's a sense of achievement.
Then, look at this bug from 2010, ignoring the rude bits. Notice the title: "firefox apparmor profile is too lenient". Read on for the rationale, in part, in Comment #4:
Similar arguments apply to Evince.