From 69e05ffb7204c20dbf804143f0502c7bf9811f78 Mon Sep 17 00:00:00 2001 From: nobody43 <15267739+nobody43@users.noreply.github.com> Date: Mon, 17 Oct 2022 21:43:36 +0000 Subject: [PATCH] Explain single profile installation (#85) * Explain single profile installation * Update README.md --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 87e10c34..a7181f8e 100644 --- a/README.md +++ b/README.md @@ -83,10 +83,18 @@ sudo dpkg -i ../apparmor.d_*_all.deb **Partial install** +> **Note**: Manual installation is discouraged because files undergo post-processing dependent on the OS and desired configuration + For test purpose, you can install a specific profile with the following commands. The tool will also install required abstractions and tunables: ``` sudo ./pick ``` +However, `pick` does not fully automate single profile installation yet (the PR is welcome [#77](https://github.com/roddhjav/apparmor.d/issues/77)). For convenient usage you should: +- Ensure all related abstractions are installed (automated) +- Ensure all related tunables are installed (automated) +- Remove `abi` statement if needed (automated) +- Set distribution-related flags from `dists/flags` (not automated) +- Either switch desired `rPx` rules to `rPUx` (fallback to unconfined) or install these related profiles (not automated) ## Usage