diff --git a/AppArmorInSystemd.md b/AppArmorInSystemd.md index 20f4ef4..e6c9dbd 100644 --- a/AppArmorInSystemd.md +++ b/AppArmorInSystemd.md @@ -85,6 +85,8 @@ The restart problem Restarting the apparmor unit should be avoided. +Better use `reload` which doesn't have the problems described in this section. + Systemd handles restart as a stop followed by a start. Unfortunately this removes all apparmor policy from the kernel and results in all tasks entering the unconfined state. The start will then load new