apparmor and hardening revision

1 files changed, 15 insertions, 4 deletions

diff --git a/core/apparmor.html b/core/apparmor.html
index 2d9c117..ead3d0d 100644
--- a/core/apparmor.html
+++ b/core/apparmor.html
@@ -10,10 +10,21 @@
 
         <h1>2.2.1. AppArmor</h1>
 
-        <p>Install <a href="hardening.html">apparmor</a>, kernel
-        configuration is based on
-        <a href="reboot.html#linux">linux-gnu</a> kernel port, for 
-        manual configuration check <a href="linux.html">kernel linux</a>.</p>
+        <p>Check <a href="linux.html#configure">kernel configuration</a> or
+        use the provided with <a href="reboot.html#linux">linux-gnu</a> port 
+        to support apparmor. <a href="https://gitlab.com/apparmor/apparmor/wikis/home">AppArmor</a> enforce rules on applications based
+        on security policies. User space tools are provided by apparmor port
+        and its dependencies, install them;</p>
+
+        <pre>
+        $ sudo prt-get depinst apparmor
+        </pre>
+
+        <p>Enable apparmor on linux by command line, create /etc/default/grub;</p>
+
+        <pre>
+        GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor"
+        </pre>
 
         <a href="index.html">Core OS Index</a>
         <p>This is part of the c9 Manual.