[apparmor] Let's enable AppArmor by default (why not?)
daniel curtis
sidetripping at gmail.com
Mon Nov 20 16:06:07 UTC 2017
Hello
In His answer about removing the profile etc., Mr. John Johansen wrote,
that "it is important to do removal before adding the symlink (...)" [see
1.]
However, according to the Ubuntu "AppArmor Community Help Wiki" [see 2.]
users should first make a symlink via ln(1) command and next use an
apparmor_parser(8) utility along with '-R' option. So, this is the opposite
of what Mr. Johansen has wrote.
I thought, that maybe in such a situation Community Help Wiki should be
updated to contain a proper way to disable one profile. What do you think?
By the way; I have always used the method mentioned on Wiki - without
problems.
But now, thanks to Mr. Johansen, I will first remove profile before adding
symlink.
Best regards, Thanks.
_____________________
[1] https://lists.ubuntu.com/archives/apparmor/2017-November/011314.html
[2] https://help.ubuntu.com/community/AppArmor#Disable_one_profile
.
.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20171120/1bfa9129/attachment.html>
More information about the AppArmor
mailing list