From fea2c3c6b25824a15bf981b1eb9f1f018c121984 Mon Sep 17 00:00:00 2001 From: kytv <kytv@mail.i2p> Date: Thu, 21 May 2015 17:27:29 +0000 Subject: [PATCH] Install the apparmor profiles in complain mode Instead of enabling exceptions when needed for custom set-ups, some users will opt for disabling all security functions. --- debian/apparmor/system_i2p | 3 ++- debian/apparmor/usr.bin.i2prouter | 4 ++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/debian/apparmor/system_i2p b/debian/apparmor/system_i2p index 0645b5f858..c2764b92e3 100644 --- a/debian/apparmor/system_i2p +++ b/debian/apparmor/system_i2p @@ -1,7 +1,8 @@ +# Last Modified: Thu May 21 18:30:32 2015 # vim:syntax=apparmor et #include <tunables/global> -profile system_i2p { +profile system_i2p flags=(complain) { #include <abstractions/i2p> owner /{,lib/live/mount/overlay/}var/lib/i2p/** rwkl, diff --git a/debian/apparmor/usr.bin.i2prouter b/debian/apparmor/usr.bin.i2prouter index cf8f9a17b9..8150c39e65 100644 --- a/debian/apparmor/usr.bin.i2prouter +++ b/debian/apparmor/usr.bin.i2prouter @@ -1,9 +1,9 @@ -# Last Modified: Sun Apr 12 22:08:32 2015 +# Last Modified: Thu May 21 18:30:32 2015 # vim:syntax=apparmor et ts=8 sw=4 #include <tunables/global> -/usr/bin/i2prouter { +/usr/bin/i2prouter flags=(complain) { #include <abstractions/i2p> capability sys_ptrace, -- GitLab