felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

doc: small update & improvements.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-27 14:28:18 +02:00
parent 2bc87f68a8
commit 475d8dc082
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
5 changed files with 42 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/full-system-policy.md
View file

@ -29,6 +29,8 @@ Particularly:
- Desktop environment must be explicitly supported, your UI will not start otherwise. Again, it is a **feature**.
- FSP mode will run unknown user application into the `default` profile. It might be enough for your application. If not you have to make a profile for it.
- In FSP mode, all sandbox managers **must** have a profile. Then user sandboxed applications (flatpak, snap, etc) will work as expected.
- PID 1 is the last program that should be confined. It does not make sense to confine only PID. All other programs must be confined first.
## Installation