apparmor.d/docs/enforce.md
2023-04-19 19:23:57 +01:00

33 lines
952 B
Markdown

---
title: Enforce Mode
---
# Enforce Mode
The default package configuration installs all profiles in *complain* mode. This is a safety measure to ensure you are not going to break your system on initial install. Once you have tested it and it works fine, you can easily switch to *enforce* mode. The profiles that are not considered stable are kept in complain mode, they can be tracked in the [`dists/flags`](https://github.com/roddhjav/apparmor.d/tree/main/dists/flags) directory.
!!! warning
When reporting issue. Please ensure the profiles are in complain mode
#### :material-arch: Archlinux
In `PKGBUILD`, replace `make` by `make enforce`:
```diff
- make
+ make enforce
```
#### :material-ubuntu: Ubuntu & :material-debian: Debian
In `debian/rules`, add the following lines:
```make
override_dh_auto_build:
make enforce
```
#### :simple-suse: OpenSUSE & Partial install
Use the `make enforce` command to build instead of `make`