doc: general update.
This commit is contained in:
parent
fe32720765
commit
fb29e8ba74
14 changed files with 350 additions and 223 deletions
|
|
@ -4,37 +4,59 @@ title: Enforce Mode
|
|||
|
||||
The default package configuration installs all profiles in *complain* mode. This is a safety measure to ensure you are not going to break your system on initial installation. Once you have tested it, and it works fine, you can easily switch to *enforce* mode. The profiles that are not considered stable are kept in complain mode, they can be tracked in the [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory.
|
||||
|
||||
!!! warning
|
||||
!!! danger
|
||||
|
||||
- Please test in complain mode first and ensure your system boots!
|
||||
- When reporting an issue, please ensure the affected profiles are in complain mode.
|
||||
- You **must** test in complain mode first and ensure your system works as expected.
|
||||
- You **must** regularly check AppArmor log with [`aa-log`](usage.md#apparmor-log) and [report](report.md) issues first.
|
||||
- When reporting an issue, you **must** ensure the affected profiles are in complain mode.
|
||||
|
||||
|
||||
#### :material-arch: Arch Linux
|
||||
=== ":material-arch: Archlinux"
|
||||
|
||||
In `PKGBUILD`, replace `make` by `make enforce`:
|
||||
```diff
|
||||
- make DISTRIBUTION=arch
|
||||
+ make enforce DISTRIBUTION=arch
|
||||
```
|
||||
In the `PKGBUILD`, replace `make` by `make enforce`:
|
||||
|
||||
#### :material-ubuntu: Ubuntu & :material-debian: Debian
|
||||
```diff
|
||||
- make DISTRIBUTION=arch
|
||||
+ make enforce DISTRIBUTION=arch
|
||||
```
|
||||
|
||||
In `debian/rules`, add the following lines:
|
||||
Then, build the package with: `make pkg`
|
||||
|
||||
```make
|
||||
override_dh_auto_build:
|
||||
make enforce
|
||||
```
|
||||
=== ":material-ubuntu: Ubuntu"
|
||||
|
||||
#### :simple-suse: openSUSE
|
||||
In `debian/rules`, add the following lines:
|
||||
|
||||
In `dists/apparmor.d.spec`, replace `%make_build` by `make enforce`
|
||||
```diff
|
||||
- %make_build
|
||||
+ %make_build enforce
|
||||
```
|
||||
```make
|
||||
override_dh_auto_build:
|
||||
make enforce
|
||||
```
|
||||
|
||||
#### Partial install
|
||||
Then, build the package with: `make dpkg`
|
||||
|
||||
Use the `make enforce` command to build instead of `make`
|
||||
=== ":material-debian: Debian"
|
||||
|
||||
In `debian/rules`, add the following lines:
|
||||
|
||||
```make
|
||||
override_dh_auto_build:
|
||||
make enforce
|
||||
```
|
||||
|
||||
Then, build the package with: `make dpkg`
|
||||
|
||||
=== ":simple-suse: openSUSE"
|
||||
|
||||
In `dists/apparmor.d.spec`, replace `%make_build` by `%make_build enforce`
|
||||
|
||||
```diff
|
||||
- %make_build
|
||||
+ %make_build enforce
|
||||
```
|
||||
|
||||
Then, build the package with: `make rpm`
|
||||
|
||||
=== ":material-home: Partial Install"
|
||||
|
||||
Use the `make enforce` command to build instead of `make`
|
||||
|
||||
[aur]: https://aur.archlinux.org/packages/apparmor.d-git
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue