Enforce Mode
The default package configuration installs all profiles in complain mode. This is a safety measure to ensure you are not going to break your system on initial installation. Once you have tested it, and it works fine, you can easily switch to enforce mode. The profiles that are not considered stable are kept in complain mode, they can be tracked in the dists/flags
directory.
Warning
- You need to test it in complain mode first and ensure your system boot!
- When reporting issue. Please ensure the profiles are in complain mode
Archlinux¶
In PKGBUILD
, replace make
by make enforce
:
Ubuntu & Debian¶
In debian/rules
, add the following lines:
OpenSUSE¶
In dists/apparmor.d.spec
, replace %make_build
by make enforce
Partial install¶
Use the make enforce
command to build instead of make