Since test-apparmor.py from QRT is pretty comprehensive, I am going to display its tests results here (both i386 and amd64 passed): $ sudo ./test-apparmor.py -v --with-parser-stress Skipping private tests Test enforce to complain and back with aa-complain/aa-enforce ... ok Test aa-status ... ok Test aa-unconfined ... ok Test add/remove profile ... ok Test complain profile ... ok Test enforce profile ... ok Test moving from enforce to complain and back ... ok Test initscript ... stop teardown status (unloaded: LP: #654841) start restart reload force-reload status (loaded) ok Test kernel ... ok Test aa-logprof LP: #652674 ... ok Test /etc/apparmor.d/disable ... ok Test /etc/apparmor.d/force-complain ... ok Test required apport hooks ... ok Test apport LP: #655529 ... ok Test pam (order=default,user,group) ... adm_group can access default_user's file adm_group cannot access adm_group's file adm_group cannot access confined_user's file adm_group cannot access confined_group's file adm_group cannot access unconfined_user's file adm_group cannot access unconfined_group's file confined_group can access default_user's file confined_group cannot access adm_group's file confined_group cannot access confined_user's file confined_group cannot access confined_group's file confined_group cannot access unconfined_user's file confined_group cannot access unconfined_group's file confined_user can access default_user's file confined_user cannot access adm_group's file confined_user cannot access confined_user's file confined_user cannot access confined_group's file confined_user cannot access unconfined_user's file confined_user cannot access unconfined_group's file default_user can access default_user's file default_user cannot access adm_group's file default_user cannot access confined_user's file default_user cannot access confined_group's file default_user cannot access unconfined_user's file default_user cannot access unconfined_group's file unconfined_group can access default_user's file unconfined_group cannot access adm_group's file unconfined_group cannot access confined_user's file unconfined_group cannot access confined_group's file unconfined_group cannot access unconfined_user's file unconfined_group cannot access unconfined_group's file unconfined_user can access default_user's file unconfined_user cannot access adm_group's file unconfined_user cannot access confined_user's file unconfined_user cannot access confined_group's file unconfined_user cannot access unconfined_user's file unconfined_user cannot access unconfined_group's file ok Test pam (order=group,default,user) ... adm_group can access adm_group's file adm_group cannot access confined_user's file adm_group cannot access default_user's file confined_user can access confined_user's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access unconfined_user's file unconfined_user can access adm_group's file unconfined_user can access confined_user's file unconfined_user can access confined_group's file unconfined_user can access default_user's file unconfined_user can access unconfined_user's file unconfined_user can access unconfined_group's file unconfined_group can access adm_group's file unconfined_group can access confined_user's file unconfined_group can access confined_group's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_group can access unconfined_group's file ok Test pam (order=group,user,default) ... adm_group can access adm_group's file adm_group cannot access confined_group's file adm_group cannot access confined_user's file adm_group cannot access default_user's file adm_group cannot access unconfined_group's file adm_group cannot access unconfined_user's file confined_group can access confined_group's file confined_group cannot access adm_group's file confined_group cannot access confined_user's file confined_group cannot access default_user's file confined_group cannot access unconfined_group's file confined_group cannot access unconfined_user's file confined_user can access confined_user's file confined_user cannot access adm_group's file confined_user cannot access confined_group's file confined_user cannot access default_user's file confined_user cannot access unconfined_group's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access adm_group's file default_user cannot access confined_group's file default_user cannot access confined_user's file default_user cannot access unconfined_group's file default_user cannot access unconfined_user's file unconfined_group can access unconfined_group's file unconfined_group can access adm_group's file unconfined_group can access confined_group's file unconfined_group can access confined_user's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_user can access unconfined_user's file unconfined_user can access adm_group's file unconfined_user can access confined_group's file unconfined_user can access confined_user's file unconfined_user can access default_user's file unconfined_user can access unconfined_group's file ok Test pam (order=user,default,group) ... adm_group cannot access adm_group's file adm_group can access confined_user's file adm_group cannot access default_user's file confined_user can access confined_user's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access unconfined_user's file unconfined_user can access adm_group's file unconfined_user can access confined_user's file unconfined_user can access confined_group's file unconfined_user can access default_user's file unconfined_user can access unconfined_user's file unconfined_user can access unconfined_group's file unconfined_group can access adm_group's file unconfined_group can access confined_user's file unconfined_group can access confined_group's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_group can access unconfined_group's file ok Test pam (order=user,group,default) ... adm_group can access confined_user's file adm_group cannot access confined_group's file adm_group cannot access default_user's file adm_group cannot access unconfined_group's file adm_group cannot access unconfined_user's file confined_group can access confined_group's file confined_group cannot access confined_user's file confined_group cannot access confined_user's file confined_group cannot access default_user's file confined_group cannot access unconfined_group's file confined_group cannot access unconfined_user's file confined_user can access confined_user's file confined_user can access confined_user's file confined_user cannot access confined_group's file confined_user cannot access default_user's file confined_user cannot access unconfined_group's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access confined_user's file default_user cannot access confined_group's file default_user cannot access confined_user's file default_user cannot access unconfined_group's file default_user cannot access unconfined_user's file unconfined_group can access unconfined_group's file unconfined_group can access confined_user's file unconfined_group can access confined_group's file unconfined_group can access confined_user's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_user can access unconfined_user's file unconfined_user can access confined_user's file unconfined_user can access confined_group's file unconfined_user can access confined_user's file unconfined_user can access default_user's file unconfined_user can access unconfined_group's file ok Run libapparmor testsuite ... ok Run parser regression tests ... ok Run kernel regression tests ... ok Run parser stress test ... (skipped: use --with-parser-stress to enable) ok Run subdomain stress test ... (skipped: use --with-subdomain-stress to enable) ok Cleanup downloaded source ... ok ---------------------------------------------------------------------- Ran 25 tests in 346.894s OK Other QRT test results coming.