felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: some clarrification.

Browse source
This commit is contained in:
Alexandre Pujol 2023-04-24 12:18:57 +01:00
parent 9727d1ce1f
commit 1223b70467
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 28 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/enforce.md
View file

@ -10,6 +10,8 @@ The default package configuration installs all profiles in *complain* mode. This
When reporting issue. Please ensure the profiles are in complain mode
## Install
#### :material-arch: Archlinux
In `PKGBUILD`, replace `make` by `make enforce`:
@ -30,3 +32,17 @@ override_dh_auto_build:
#### :simple-suse: OpenSUSE & Partial install
Use the `make enforce` command to build instead of `make`
## Track profiles in complain mode
The [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory tracks the profile that have been forced in complain mode. It is used for profile that are not considered stable. Files in this directory should respect the following format: `<profile> <flags>`, flags should be coma separated.
For instance, to move `adb` in complain mode, edit **[`dists/flags/main.flags`](https://github.com/roddhjav/apparmor.d/blob/main/dists/flags/main.flags)** and add the following line:
```sh
adb complain
```
Beware, flags defined in this file overwrite flags in the profile. So you may need to add other flags. Example for `gnome-shell`:
```sh
gnome-shell attach_disconnected,mediate_deleted,complain
```