mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-24 11:58:12 +01:00
Explain single profile installation (#85)
* Explain single profile installation * Update README.md
This commit is contained in:
parent
cf5a4168ea
commit
69e05ffb72
1 changed files with 8 additions and 0 deletions
|
@ -83,10 +83,18 @@ sudo dpkg -i ../apparmor.d_*_all.deb
|
|||
|
||||
**Partial install**
|
||||
|
||||
> **Note**: Manual installation is discouraged because files undergo post-processing dependent on the OS and desired configuration
|
||||
|
||||
For test purpose, you can install a specific profile with the following commands. The tool will also install required abstractions and tunables:
|
||||
```
|
||||
sudo ./pick <profiles-name>
|
||||
```
|
||||
However, `pick` does not fully automate single profile installation yet (the PR is welcome [#77](https://github.com/roddhjav/apparmor.d/issues/77)). For convenient usage you should:
|
||||
- Ensure all related abstractions are installed (automated)
|
||||
- Ensure all related tunables are installed (automated)
|
||||
- Remove `abi` statement if needed (automated)
|
||||
- Set distribution-related flags from `dists/flags` (not automated)
|
||||
- Either switch desired `rPx` rules to `rPUx` (fallback to unconfined) or install these related profiles (not automated)
|
||||
|
||||
|
||||
## Usage
|
||||
|
|
Loading…
Reference in a new issue