felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

doc: expand on the enforce mode swicth.

Browse source
This commit is contained in:
Alexandre Pujol 2022-10-06 21:44:57 +01:00
parent e226f4eb03
commit d629ac5788
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -170,12 +170,18 @@ Then, reload the apparmor rules with `sudo systemctl restart apparmor`.
## Enfore Mode ## Enfore Mode
The default package configuration installs all profile in *complain* mode. The default package configuration installs all profile in *complain* mode.
You can easily switch to *enforce* mode. To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove the `--complain` option to the configure script. Then build the package as usual: Once you tested them and it works fine, you can easily switch to *enforce* mode.
To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove
the `--complain` option to the configure script. Then build the package as usual:
```diff ```diff
- ./configure --complain - ./configure --complain
+ ./configure + ./configure
``` ```
Do not worry, the profiles that are not considered stable are kept in complain mode.
They can be tracked in the `dists/flags` directory.
## Troubleshooting ## Troubleshooting
**AppArmor messages** **AppArmor messages**