2023-01-29 22:18:22 +01:00
|
|
|
---
|
|
|
|
|
title: Enforce Mode
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# Enforce Mode
|
|
|
|
|
|
|
|
|
|
The default package configuration installs all profiles in *complain* mode.
|
2023-01-31 22:13:35 +01:00
|
|
|
Once you tested have them and it works fine, you can easily switch to *enforce* mode.
|
2023-01-29 22:18:22 +01:00
|
|
|
To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove
|
|
|
|
|
the `--complain` option to the configure script. Then build the package as usual:
|
|
|
|
|
```diff
|
|
|
|
|
- ./configure --complain
|
|
|
|
|
+ ./configure
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Do not worry, the profiles that are not considered stable are kept in complain mode.
|
2023-02-11 20:00:14 +01:00
|
|
|
They can be tracked in the [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory.
|
