From d629ac5788abba628f933a3e4b258869f2f6dddd Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Thu, 6 Oct 2022 21:44:57 +0100 Subject: [PATCH] doc: expand on the enforce mode swicth. --- README.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index c42028b8..87e10c34 100644 --- a/README.md +++ b/README.md @@ -170,12 +170,18 @@ Then, reload the apparmor rules with `sudo systemctl restart apparmor`. ## Enfore Mode The default package configuration installs all profile in *complain* mode. -You can easily switch to *enforce* mode. To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove the `--complain` option to the configure script. Then build the package as usual: +Once you tested them and it works fine, you can easily switch to *enforce* mode. +To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove +the `--complain` option to the configure script. Then build the package as usual: ```diff - ./configure --complain + ./configure ``` +Do not worry, the profiles that are not considered stable are kept in complain mode. +They can be tracked in the `dists/flags` directory. + + ## Troubleshooting **AppArmor messages**