I want all the AppArmor profiles activated wherever applicable permanently, how can I do that?
To permanently put all profiles into enforce mode:
To permanently put all profiles into complain mode:
To verify the current status of apparmor:
complain mode will log violations against the application profiles, whereas enforce mode will strictly enforce the application profiles.