Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #238010
| From | didier gaumet <didier.gaumet@gmail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Apparmor: 1 processes are unconfined but have a profile defined |
| Date | 2021-08-02 09:50 +0200 |
| Message-ID | <CHARX-Iu-5@gated-at.bofh.it> (permalink) |
| References | <CGxMt-2W5-5@gated-at.bofh.it> <CHxho-6Kq-3@gated-at.bofh.it> <CHARX-Iu-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Le lundi 2 août 2021 à 06:00:05 UTC+2, Ratan Gupta a écrit : [...] > In my case it is not at all complaining as it is because the process is unconfined. [...] If I am not mistaken, the purpose of the complain mode is precisely to inform about policy violations without forbidding them (forbidding, that is the purpose of the enforce mode). So, to me, there is no contradiction between complaining and unconfined I am not knowledgeable enough to really help you in this matter, so I would suggest you to take a look at the AppArmor doc: - Profiling_with_tools https://gitlab.com/apparmor/apparmor/-/wikis/Profiling_with_tools - or Profiling_by_hand, if you prefer https://gitlab.com/apparmor/apparmor/-/wikis/Profiling_by_hand - AppArmorMonitoring https://gitlab.com/apparmor/apparmor/-/wikis/AppArmorMonitoring Good luck ;-)
Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread
Apparmor: 1 processes are unconfined but have a profile defined Ratan Gupta <ratankgupta31@gmail.com> - 2021-07-30 12:20 +0200
Re: Apparmor: 1 processes are unconfined but have a profile defined didier gaumet <didier.gaumet@gmail.com> - 2021-07-30 14:40 +0200
Re: Apparmor: 1 processes are unconfined but have a profile defined Ratan Gupta <ratankgupta31@gmail.com> - 2021-08-02 06:00 +0200
Re: Apparmor: 1 processes are unconfined but have a profile defined didier gaumet <didier.gaumet@gmail.com> - 2021-08-02 09:50 +0200
csiph-web