Arch Linux

agricola

Member

Registered: 2026-04-05

Posts: 4

Apparmor install, please help! (lsm & boot)

Hi

I try to install Apparmor and I don't find a place to put this information: lsm=landlock,lockdown,yama,integrity,apparmor,bpf.

In Apparmor wiki (https://wiki.archlinux.org/title/AppArmor) are instructions to place the code in kernel parameter, but I don't find the right place to insert the code.

Some tutorials say that it should be placed in grub -file. I don't have it, I only have a grub.d -file, but it not contain this information.

Please can someone teach a Linux and Arch newbie to get Apparmor running when booting?

5hridhyan

Member

From: Asia

Registered: 2025-12-25

Posts: 557

Re: Apparmor install, please help! (lsm & boot)

Welcome to the Forums!
so you have grub as bootloader right? then you should paste in `/etc/default/grub`
where to paste in `/etc/default/grub`?;  GRUB_CMDLINE_LINUX_DEFAULT=
here is mine as example

GRUB_CMDLINE_LINUX_DEFAULT="loglevel=3 lsm=landlock,lockdown,yama,apparmor,bpf apparmor=1 security=apparmor"

after that you have to regenerate it by running ` grub-mkconfig -o /boot/grub/grub.cfg` as root/sudo

Edit:
after boot, verify by running `aa-enabled` `aa-status`

Edit2:
`integrity` is related to IMA/EVM, are you sure you actually need it?; if yes, then just put it there

Last edited by 5hridhyan (2026-04-05 17:06:04)

---

---

agricola

Member

Registered: 2026-04-05

Posts: 4

Re: Apparmor install, please help! (lsm & boot)

Thank you 5hidhyan. Unfortunately I still have a problem, because I don't have a grub file there.

In /etc/default/ folder I only have these files: pcsdc, sndiod and useradd.

In /etc/grub.d/ folder I have a file 15_ostree witch is reference to /usr/lib/libostree/grub2-15_ostree. That file do not contain any lsm info.

This is the reason why I am confused, all tutorials point to file that I don't have.

5hridhyan

Member

From: Asia

Registered: 2025-12-25

Posts: 557

Re: Apparmor install, please help! (lsm & boot)

which bootloader are you using?

Edit:
please refer/check this
https://wiki.archlinux.org/title/Kernel … figuration

Last edited by 5hridhyan (2026-04-05 17:08:30)

---

---

agricola

Member

Registered: 2026-04-05

Posts: 4

Re: Apparmor install, please help! (lsm & boot)

I just installed Arch using archinstall script and used default one. I don't now where to find which bootloader is in use, but in /boot/EFI/BOOT/BOOTX64.EFI, I have that file.

5hridhyan

Member

From: Asia

Registered: 2025-12-25

Posts: 557

Re: Apparmor install, please help! (lsm & boot)

Uhm, ok then I guess it's systemd-boot?
then you have to follow https://wiki.archlinux.org/title/Kernel … stemd-boot
you have to add those https://wiki.archlinux.org/title/AppArmor#Installation (the wiki said) to options...

---

---

agricola

Member

Registered: 2026-04-05

Posts: 4

Re: Apparmor install, please help! (lsm & boot)

Thanks a lot 5hidhyan! I am sure that I can do I with this info.