doc: general update.

This commit is contained in:
Alexandre Pujol 2024-08-30 20:38:30 +01:00
parent fe32720765
commit fb29e8ba74
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 350 additions and 223 deletions

View file

@ -4,37 +4,59 @@ title: Enforce Mode
The default package configuration installs all profiles in *complain* mode. This is a safety measure to ensure you are not going to break your system on initial installation. Once you have tested it, and it works fine, you can easily switch to *enforce* mode. The profiles that are not considered stable are kept in complain mode, they can be tracked in the [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory.
!!! warning
!!! danger
- Please test in complain mode first and ensure your system boots!
- When reporting an issue, please ensure the affected profiles are in complain mode.
- You **must** test in complain mode first and ensure your system works as expected.
- You **must** regularly check AppArmor log with [`aa-log`](usage.md#apparmor-log) and [report](report.md) issues first.
- When reporting an issue, you **must** ensure the affected profiles are in complain mode.
#### :material-arch: Arch Linux
=== ":material-arch: Archlinux"
In `PKGBUILD`, replace `make` by `make enforce`:
```diff
- make DISTRIBUTION=arch
+ make enforce DISTRIBUTION=arch
```
In the `PKGBUILD`, replace `make` by `make enforce`:
#### :material-ubuntu: Ubuntu & :material-debian: Debian
```diff
- make DISTRIBUTION=arch
+ make enforce DISTRIBUTION=arch
```
In `debian/rules`, add the following lines:
Then, build the package with: `make pkg`
```make
override_dh_auto_build:
make enforce
```
=== ":material-ubuntu: Ubuntu"
#### :simple-suse: openSUSE
In `debian/rules`, add the following lines:
In `dists/apparmor.d.spec`, replace `%make_build` by `make enforce`
```diff
- %make_build
+ %make_build enforce
```
```make
override_dh_auto_build:
make enforce
```
#### Partial install
Then, build the package with: `make dpkg`
Use the `make enforce` command to build instead of `make`
=== ":material-debian: Debian"
In `debian/rules`, add the following lines:
```make
override_dh_auto_build:
make enforce
```
Then, build the package with: `make dpkg`
=== ":simple-suse: openSUSE"
In `dists/apparmor.d.spec`, replace `%make_build` by `%make_build enforce`
```diff
- %make_build
+ %make_build enforce
```
Then, build the package with: `make rpm`
=== ":material-home: Partial Install"
Use the `make enforce` command to build instead of `make`
[aur]: https://aur.archlinux.org/packages/apparmor.d-git