#aws

1 article.

Escaping the AWS SSM AppArmor profile with systemd-run - 25 April 2026
On Ubuntu, SSM Session Manager shells inherit the snap-amazon-ssm-agent AppArmor profile. Even root hits silent EACCES on writes. Escape via systemd-run.