doc: recommand using the AUR to install on Archlinux.

This commit is contained in:
Alexandre Pujol 2022-09-13 18:28:27 +01:00
parent c242a59996
commit a47278b89c
Failed to generate hash of commit

View file

@ -44,7 +44,7 @@ This is fundamentally different from how AppArmor is used on Linux server as it
## Installation ## Installation
> **Warning**: In order to not break your system, the default package configuration install all profiles in complain mode. They can be enforced later. See [Enforce Mode](#enfore_mode) > **Warning**: In order to not break your system, the default package configuration install all profiles in complain mode. They can be enforced later. See [Enforce Mode](#enfore-mode)
**Requirements** **Requirements**
* An `apparmor` based linux distribution. * An `apparmor` based linux distribution.
@ -55,8 +55,10 @@ This is fundamentally different from how AppArmor is used on Linux server as it
**Archlinux** **Archlinux**
Build and install the package with: `apparmor.d-git` is available in the [Arch User Repository][aur]:
```sh ```sh
git clone https://aur.archlinux.org/apparmor.d-git.git
cd apparmor.d-git
makepkg -s makepkg -s
sudo pacman -U apparmor.d-*.pkg.tar.zst \ sudo pacman -U apparmor.d-*.pkg.tar.zst \
--overwrite etc/apparmor.d/tunables/global \ --overwrite etc/apparmor.d/tunables/global \
@ -64,13 +66,17 @@ sudo pacman -U apparmor.d-*.pkg.tar.zst \
--overwrite etc/apparmor.d/abstractions/trash --overwrite etc/apparmor.d/abstractions/trash
``` ```
> **Note**: The overwrite options are only required on the first install. You can use `yay` or your preferred AUR install method to update it.
The `PKGBUILD` included in this repository is intended for development only.
**Debian / Ubuntu** **Debian / Ubuntu**
Build using standard Debian package build tools: Build using standard Debian package build tools:
```sh ```sh
sudo apt install apparmor-profiles build-essential config-package-dev debhelper golang-go rsync git sudo apt install apparmor-profiles build-essential config-package-dev debhelper golang-go rsync git
git clone https://github.com/roddhjav/apparmor.d.git && cd apparmor.d git clone https://github.com/roddhjav/apparmor.d.git
cd apparmor.d
dpkg-buildpackage -b -d --no-sign dpkg-buildpackage -b -d --no-sign
sudo dpkg -i ../apparmor.d_*_all.deb sudo dpkg -i ../apparmor.d_*_all.deb
``` ```
@ -164,7 +170,7 @@ Then, reload the apparmor rules with `sudo systemctl restart apparmor`.
## Enfore Mode ## Enfore Mode
The default package configuration installs all profile in *complain* mode. The default package configuration installs all profile in *complain* mode.
You can easily swicth to *enforce* mode. To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove the `--complain` option to the configure script. Then build the package as usual: You can easily switch to *enforce* mode. To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove the `--complain` option to the configure script. Then build the package as usual:
```diff ```diff
- ./configure --complain - ./configure --complain
+ ./configure + ./configure
@ -254,6 +260,7 @@ with this program; if not, write to the Free Software Foundation, Inc.,
[quality]: https://img.shields.io/badge/go%20report-A+-brightgreen.svg?style=flat-square [quality]: https://img.shields.io/badge/go%20report-A+-brightgreen.svg?style=flat-square
[goreportcard]: https://goreportcard.com/report/github.com/roddhjav/apparmor.d [goreportcard]: https://goreportcard.com/report/github.com/roddhjav/apparmor.d
[aur]: https://aur.archlinux.org/packages/apparmor.d-git
[android_model]: https://arxiv.org/pdf/1904.05572 [android_model]: https://arxiv.org/pdf/1904.05572
[clipos]: https://clip-os.org/en/ [clipos]: https://clip-os.org/en/
[Speed up AppArmor Start]: https://wiki.archlinux.org/title/AppArmor#Speed-up_AppArmor_start_by_caching_profiles [Speed up AppArmor Start]: https://wiki.archlinux.org/title/AppArmor#Speed-up_AppArmor_start_by_caching_profiles