From 7d1d20048a06b47ddf0139c93a8917f03b00e32a Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Fri, 19 Nov 2021 20:29:54 +0100 Subject: [PATCH] restart -> better use reload --- AppArmorInSystemd.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/AppArmorInSystemd.md b/AppArmorInSystemd.md index 20f4ef4..e6c9dbd 100644 --- a/AppArmorInSystemd.md +++ b/AppArmorInSystemd.md @@ -85,6 +85,8 @@ The restart problem Restarting the apparmor unit should be avoided. +Better use `reload` which doesn't have the problems described in this section. + Systemd handles restart as a stop followed by a start. Unfortunately this removes all apparmor policy from the kernel and results in all tasks entering the unconfined state. The start will then load new