apparmor.d/docs/enforce.md
2023-02-11 19:00:14 +00:00

17 lines
625 B
Markdown

---
title: Enforce Mode
---
# Enforce Mode
The default package configuration installs all profiles in *complain* mode.
Once you tested have them and it works fine, you can easily switch to *enforce* mode.
To do this, edit `PKGBUILD` on Archlinux or `debian/rules` on Debian and remove
the `--complain` option to the configure script. Then build the package as usual:
```diff
- ./configure --complain
+ ./configure
```
Do not worry, the profiles that are not considered stable are kept in complain mode.
They can be tracked in the [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory.