Your Phone is Giving Away More Than You Ever Bargained For

[FranklyFlawless]

I did recall some blog articles from Purism mentioning about AppArmor:

PureOS now features AppArmor activated by default – Purism

Apparmor Installed by Default on the Librem 5 – Purism

There also appears to be issues with discovering and writing AppArmor security profiles in PureOS for scalability:

@mackundercoats

• PureOS enables AppArmor by default. That’s great, but you need to write AppArmor security profiles in order for it to enhance the system’s security. Purism’s blog mentions enabling AppArmor by default, and its GitLab says there are some profiles, I couldn’t find any details about what profiles there actually are. Of course, this points to a general flaw with AppArmor for security-focused OS: unlike SELinux, it doesn’t deny by default.

However, the AppArmor security profiles are located in the /etc/apparmor.d directory.