Default mode for apparmor profiles : complain or enforce ?

Matthew East mdke at ubuntu.com
Thu Jun 7 13:55:24 BST 2007


On Wed, June 6, 2007 8:07 pm, Kees Cook wrote:
> On Tue, Jun 05, 2007 at 04:56:07PM -0400, Mathias Gug wrote:
>> So to avoid the same fiasco, I thought about shipping all profiles in
>> complain mode at first. Once profiles have been more tested, they could
>> be installed in enforce mode by default.

{snip}

> The updates you've made to https://wiki.ubuntu.com/UsingAppArmor seem to
> cover the immediate needs for toggling enforce/complain mode for anyone
> doing AppArmor testing.

Incidentally - that page is user documentation, and should really be on
the documentation wiki at https://help.ubuntu.com/community, not the
development wiki. If you have a chance to move it, that would be great.

Matt
-- 
http://www.mdke.org
gnupg pub 1024D/0E6B06FF





More information about the ubuntu-devel mailing list