[pkg-apparmor] [apparmor-profiles-extra] 01/02: Add a script allowing the source package to put specific profiles in complain mode.

intrigeri intrigeri at debian.org
Sat Sep 9 18:03:49 UTC 2017


intrigeri:
> Cool! Indeed, I only looked at the manpage. I'll switch
> apparmor-profiles-extra to aa-complain right away:

Sadly this doesn't work: aa-complain takes profile names
("executable") and looks in the --dir directory, and all the bits
included from that profile have to be in the same (--dir) directory.
This condition is not satisfied when building apparmor-profiles-extra:
e.g. tunables/global is in /etc/apparmor.d, while the profile I want
to disable is somewhere inside the build directory.



More information about the pkg-apparmor-team mailing list