apparmor global settings

[cdenley]

I was just playing around with apparmor, trying to figure out how it works. Is there a way to require a profile in order for any process to accomplish a certain task? Or can an application without a profile always do anything?

[cdenley]

Is there a way to prevent programs from running which don't have a profile?

[cdenley]

Is anyone familiar with apparmor? Is there a way to create a profile which says what a process can't do rather than what it can do?