mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-05 17:01:00 +01:00
6cf4cbea21
This patch removes the '--remove' option on aa-enforce as well as from the man page. It also removes the test entry that contains it, but I don't think this is entirely correct because I think the second half of the test is dependent on the (now deleted) first half of the test. (It also removes a missed reference to --revert in the aa-disable man page.) Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Seth Arnold <seth.arnold@canonical.com>
58 lines
2 KiB
Text
58 lines
2 KiB
Text
# This publication is intellectual property of Novell Inc. and Canonical
|
|
# Ltd. Its contents can be duplicated, either in part or in whole, provided
|
|
# that a copyright label is visibly located on each copy.
|
|
#
|
|
# All information found in this book has been compiled with utmost
|
|
# attention to detail. However, this does not guarantee complete accuracy.
|
|
# Neither SUSE LINUX GmbH, Canonical Ltd, the authors, nor the translators
|
|
# shall be held liable for possible errors or the consequences thereof.
|
|
#
|
|
# Many of the software and hardware descriptions cited in this book
|
|
# are registered trademarks. All trade names are subject to copyright
|
|
# restrictions and may be registered trade marks. SUSE LINUX GmbH
|
|
# and Canonical Ltd. essentially adhere to the manufacturer's spelling.
|
|
#
|
|
# Names of products and trademarks appearing in this book (with or without
|
|
# specific notation) are likewise subject to trademark and trade protection
|
|
# laws and may thus fall under copyright restrictions.
|
|
#
|
|
|
|
|
|
=pod
|
|
|
|
=head1 NAME
|
|
|
|
aa-enforce - set an AppArmor security profile to I<enforce> mode from
|
|
being disabled or I<complain> mode.
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
B<aa-enforce I<E<lt>executableE<gt>> [I<E<lt>executableE<gt>> ...] [I<-d /path/to/profiles>] [I<-r>]>
|
|
|
|
=head1 OPTIONS
|
|
|
|
B<-d --dir / path/to/profiles>
|
|
|
|
Specifies where to look for the AppArmor security profile set.
|
|
Defaults to /etc/apparmor.d.
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
B<aa-enforce> is used to set one or more profiles to I<enforce> mode.
|
|
This command is only relevant in conjunction with the I<aa-complain> utility
|
|
which sets a profile to complain mode and the I<aa-disable> utility which
|
|
unloads and disables a profile.
|
|
The default mode for a security policy is enforce and the I<aa-complain>
|
|
utility must be run to change this behavior.
|
|
|
|
=head1 BUGS
|
|
|
|
If you find any bugs, please report them at
|
|
L<https://bugs.launchpad.net/apparmor/+filebug>.
|
|
|
|
=head1 SEE ALSO
|
|
|
|
apparmor(7), apparmor.d(5), aa-complain(1), aa-disable(1),
|
|
aa_change_hat(2), and L<http://wiki.apparmor.net>.
|
|
|
|
=cut
|