Default mode for apparmor profiles : complain or enforce ?
Matthew East
mdke at ubuntu.com
Thu Jun 7 13:55:24 BST 2007
On Wed, June 6, 2007 8:07 pm, Kees Cook wrote:
> On Tue, Jun 05, 2007 at 04:56:07PM -0400, Mathias Gug wrote:
>> So to avoid the same fiasco, I thought about shipping all profiles in
>> complain mode at first. Once profiles have been more tested, they could
>> be installed in enforce mode by default.
{snip}
> The updates you've made to https://wiki.ubuntu.com/UsingAppArmor seem to
> cover the immediate needs for toggling enforce/complain mode for anyone
> doing AppArmor testing.
Incidentally - that page is user documentation, and should really be on
the documentation wiki at https://help.ubuntu.com/community, not the
development wiki. If you have a chance to move it, that would be great.
Matt
--
http://www.mdke.org
gnupg pub 1024D/0E6B06FF
More information about the ubuntu-devel
mailing list