felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: rewrite the local installation method.

Browse source
This commit is contained in:
Alexandre Pujol 2023-01-28 22:29:33 +00:00
parent aea5184251
commit 15e33a1fe6
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 30 additions and 106 deletions
Download patch file Download diff file Expand all files Collapse all files

21
README.md
View file

@ -83,18 +83,19 @@ sudo dpkg -i ../apparmor.d_*_all.deb
**Partial install**
> **Note**: Manual installation is discouraged because files undergo post-processing dependent on the OS and desired configuration
For test purpose, you can install a specific profile with the following commands.
Abstractions, tunables, and most of the OS dependent post-processing is managed.
For test purpose, you can install a specific profile with the following commands. The tool will also install required abstractions and tunables:
```sh
./configure --complain
make
sudo make profile-names...
```
sudo ./pick <profiles-name>
```
However, `pick` does not fully automate single profile installation yet (the PR is welcome [#77](https://github.com/roddhjav/apparmor.d/issues/77)). For convenient usage you should:
- Ensure all related abstractions are installed (automated)
- Ensure all related tunables are installed (automated)
- Remove `abi` statement if needed (automated)
- Set distribution-related flags from `dists/flags` (not automated)
- Either switch desired `rPx` rules to `rPUx` (fallback to unconfined) or install these related profiles (not automated)
> **Note** Partial installation is discouraged because profile dependencies are
> not fetched. You may need to Either switch desired `rPx` rules to `rPUx`
> (fallback to unconfined) or install these related profiles.
> (PR is welcome [#77](https://github.com/roddhjav/apparmor.d/issues/77))
## Usage