Standard Linux user permissions are not enough to stop lateral movement after a remote code execution vulnerability. This tutorial explains how to deploy AppArmor and build custom, path-based security profiles to isolate vulnerable daemons and neutralize zero-day exploits.