mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 10:07:12 +00:00
Code Issues Releases Wiki Activity

document intentionally broken ExecStop in upstream apparmor.service

Christian Boltz 2021-11-19 20:43:19 +01:00
parent 7d1d20048a
commit c4068b6eee
No known key found for this signature in database
GPG Key ID: C6A682EA63C82F1C
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
AppArmorInSystemd.md

@ -93,6 +93,8 @@ tasks entering the unconfined state. The start will then load new
policy however all tasks in the system will remain unconfined, only
tasks start after the start operation will gain the new confinement.
The upstream `apparmor.service` has intentionally broken `stop`. Using `restart` on distributions that use the upstream unit (for example openSUSE) isn't a problem. However, you'll need to use `aa-teardown` if you really want to unload all AppArmor profiles.
Using systemd to set the apparmor profile/label
===============================================