Ubuntu comes with a powerful security tool called AppArmor, designed to provide a robust layer of defense by confining programs with access control profiles.
AppArmor is a Mandatory Access Control (MAC) system that supplements the traditional Discretionary Access Control (DAC) in Ubuntu, enforcing rules for applications to prevent system harm.
AppArmor is preferred in Ubuntu over SELinux for its ease of use, human-readable syntax, and simple profile management, making it a more user-friendly security option.
Core concepts of AppArmor include profiles that define application permissions, modes like Enforce and Complain, and components specifying file access, capabilities, network operations, and more.