Comment 2 for bug 950921

Revision history for this message
Daniel Richard G. (skunk) wrote :

The aa-* scripts would probably do better to replace "complain" with "enforce" and vice versa, rather than edit the "flags=(...)" bit as a whole.

(Better yet, according to http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference , "the mode flags specify the mode the profile is in and are mutually exclusive. They have been deprecated in favor of external controls in order to better separate policy and state.")