What are the danger with disable apparmor in a lxc, on a proxmox server in production use

[Inlakesh]

I wonder what is the danger with disabling apparmor in a lxc (xxx.conf, lxc.apparmor.profile: unconfined ), on a proxmox server in production use?

 

[dcsapak]

well apparmor prevents using of kernel features of programs not intended to do so, avoiding exploitation of bugs (for example)
see https://wiki.ubuntu.com/AppArmor for more information

 

[Inlakesh]

I see, so it is a no no to disable this on a production server.
Thanks for the link.