mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

doc: cosmetic.

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-27 23:35:24 +00:00
parent 6600a7f513
commit bd562600cf
Failed to generate hash of commit
2 changed files with 2 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docs/development/structure.md
View file

@ -122,7 +122,7 @@ Here is an overview of the current children profile:
This profile supposes the pager is reading its data from stdin, not from a
file on disk.
3. **`child-systemctl`**: Common systemctl action. Do not use it too much as most
3. **`child-systemctl`**: Common `systemctl` action. Do not use it too much as most
of the time you will need more privilege than what this profile is giving you.
@ -130,7 +130,7 @@ Here is an overview of the current children profile:
Chromium based browsers share a similar structure. Therefore, they share the same abstraction: [`abstractions/chromium`][chromium] that includes most of the profile content.
This abstraction requires the following variables definied in the profile header:
This abstraction requires the following variables defined in the profile header:
```sh
@{name} = chromium
@{domain} = org.chromium.Chromium

14
docs/enforce.md
View file

@ -37,17 +37,3 @@ In `dists/apparmor.d.spec`, replace `%make_build` by `make enforce`
#### Partial install
Use the `make enforce` command to build instead of `make`
## Track profiles in complain mode
The [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory tracks the profile that have been forced in complain mode. It is used for profile that are not considered stable. Files in this directory should respect the following format: `<profile> <flags>`, flags should be comma separated.
For instance, to move `adb` in complain mode, edit **[`dists/flags/main.flags`](https://github.com/roddhjav/apparmor.d/blob/main/dists/flags/main.flags)** and add the following line:
```sh
adb complain
```
Beware, flags defined in this file overwrite flags in the profile. So you may need to add other flags. Example for `gnome-shell`:
```sh
gnome-shell attach_disconnected,mediate_deleted,complain
```