[pkg-apparmor] Bug#924622: Bug#924622: Can the disabling of AppArmor upon removal of its userland tools be made simpler and more complete?

intrigeri intrigeri at debian.org
Sat Jul 27 19:06:53 BST 2019


Control: retitle -1 Make it easier to fully disable AppArmor

Hi Nathan,

first, thanks for caring :)

Nathan Howard:
> Removal of AppArmor from the userland leaves a moreso unexpected kernel
> side completely enabled and functioning.  So, upon AppArmor's package
> removal is it possible to either:

> (1) Automate some of the following from
> https://wiki.debian.org/AppArmor/HowToUse#Disable_AppArmor

Indeed, it could be nice to ship a script that automates these steps,
at least for GRUB.

> (2) Simply display a splash screen with the remaining steps needed should
> the user want to complete the removal themselves.

I'm not sure this is worth asking the question interactively but at
the very least, we could display a message that would:

 - Explain the user that if they want to fully disable AppArmor, they
   need to take extra steps

 - Point them to the doc where these extra steps are documented.

I would happily review merge requests for any of these :)

Cheers,
-- 
intrigeri



More information about the pkg-apparmor-team mailing list