← All posts

#aws

1 post.

• Escaping the AWS SSM AppArmor profile with systemd-run - 25 April 2026
  On Ubuntu, SSM Session Manager shells inherit the snap-amazon-ssm-agent AppArmor profile. Even root hits silent EACCES on writes. Escape via systemd-run.