apparmor.d/docs/issues.md

34 lines
1.2 KiB
Markdown
Raw Normal View History

2023-01-29 22:18:22 +01:00
---
title: Known issues
---
2024-09-26 00:19:54 +02:00
!!! info
2023-04-16 22:35:15 +02:00
2024-09-26 00:19:54 +02:00
Known bugs are tracked on the meta issue **[#75](https://github.com/roddhjav/apparmor.d/issues/74)**.
2023-01-29 22:18:22 +01:00
2024-09-26 00:19:54 +02:00
## Complain mode
2023-01-29 22:18:22 +01:00
2024-09-26 00:19:54 +02:00
A profile in *complain* mode cannot break the program it confines. However, there are some **major exceptions**:
2023-01-29 22:18:22 +01:00
2024-09-26 00:19:54 +02:00
1. `deny` rules are enforced even in *complain* mode,
2. `attach_disconnected` (and `mediate_deleted`) will break the program if they are required and missing in the profile,
3. If AppArmor does not find the profile to transition `rPx`.
## Pacman "could not get current working directory"
2023-01-29 22:18:22 +01:00
```sh
$ sudo pacman -Syu
...
error: could not get current working directory
:: Processing package changes...
...
```
2023-09-19 20:18:15 +02:00
This is **a feature, not a bug!** It can safely be ignored. Pacman tries to get your current directory. You will only get this error when you run pacman in your home directory.
2023-01-29 22:18:22 +01:00
According to the Arch Linux guideline, on Arch Linux, packages cannot install files under `/home/`. Therefore, the [`pacman`][pacman] profile purposely does not allow access of your home directory.
2023-01-29 22:18:22 +01:00
2023-09-19 20:18:15 +02:00
This provides a basic protection against some packages (on the AUR) that may have rogue install script.
2023-01-29 22:18:22 +01:00
2023-02-11 20:00:14 +01:00
[pacman]: https://github.com/roddhjav/apparmor.d/blob/main/apparmor.d/groups/pacman/pacman