apparmor_profile_deny
low riskVersion 1.1.0Live
AppArmor profile denials: aa-status, complain versus enforce, and path rules for services; avoid disabling profiles globally without a scoped fix.
Source library/apparmor_profile_deny.repair.yml
When-rules (signature × N in M minutes → actions): 2 — see config/reflex.php for the YAML schema; evaluator wiring is tracked separately.
Tools
evaluate_fingerprint_dry_runlist_playbooks
To run remediation, sign in and use server repair flows or your chat integrations. This catalogue only lists validated YAML shipped with Reflex.