mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

doc: cosmetic.

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-27 23:35:24 +00:00
parent 6600a7f513
commit bd562600cf
Failed to generate hash of commit
2 changed files with 2 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docs/development/structure.md
View file

@ -122,7 +122,7 @@ Here is an overview of the current children profile:
This profile supposes the pager is reading its data from stdin, not from a This profile supposes the pager is reading its data from stdin, not from a
file on disk. file on disk.
3. **`child-systemctl`**: Common systemctl action. Do not use it too much as most 3. **`child-systemctl`**: Common `systemctl` action. Do not use it too much as most
of the time you will need more privilege than what this profile is giving you. of the time you will need more privilege than what this profile is giving you.
@ -130,7 +130,7 @@ Here is an overview of the current children profile:
Chromium based browsers share a similar structure. Therefore, they share the same abstraction: [`abstractions/chromium`][chromium] that includes most of the profile content. Chromium based browsers share a similar structure. Therefore, they share the same abstraction: [`abstractions/chromium`][chromium] that includes most of the profile content.
This abstraction requires the following variables definied in the profile header: This abstraction requires the following variables defined in the profile header:
```sh ```sh
@{name} = chromium @{name} = chromium
@{domain} = org.chromium.Chromium @{domain} = org.chromium.Chromium

14
docs/enforce.md
View file

@ -37,17 +37,3 @@ In `dists/apparmor.d.spec`, replace `%make_build` by `make enforce`
#### Partial install #### Partial install
Use the `make enforce` command to build instead of `make` Use the `make enforce` command to build instead of `make`
## Track profiles in complain mode
The [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory tracks the profile that have been forced in complain mode. It is used for profile that are not considered stable. Files in this directory should respect the following format: `<profile> <flags>`, flags should be comma separated.
For instance, to move `adb` in complain mode, edit **[`dists/flags/main.flags`](https://github.com/roddhjav/apparmor.d/blob/main/dists/flags/main.flags)** and add the following line:
```sh
adb complain
```
Beware, flags defined in this file overwrite flags in the profile. So you may need to add other flags. Example for `gnome-shell`:
```sh
gnome-shell attach_disconnected,mediate_deleted,complain
```