[pkg-apparmor] Bug#830502: apparmor-profiles: Reconsider what profiles are shipped in /etc/apparmor.d/ and in which mode
intrigeri
intrigeri at debian.org
Thu Aug 10 20:49:09 UTC 2017
intrigeri:
> Drawbacks of shipping not-quite-ready-yet profiles (in complain mode)
> in /etc/apparmor.d/:
Here's another one, that might be a deal breaker:
* 'deny' rules are enforced even in complain mode, so *all* AppArmor
users are affected by any bug in such rules
More information about the pkg-apparmor-team
mailing list