The aa-* scripts would probably do better to replace "complain" with "enforce" and vice versa, rather than edit the "flags=(...)" bit as a whole.
(Better yet, according to http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference , "the mode flags specify the mode the profile is in and are mutually exclusive. They have been deprecated in favor of external controls in order to better separate policy and state.")
The aa-* scripts would probably do better to replace "complain" with "enforce" and vice versa, rather than edit the "flags=(...)" bit as a whole.
(Better yet, according to http:// wiki.apparmor. net/index. php/AppArmor_ Core_Policy_ Reference , "the mode flags specify the mode the profile is in and are mutually exclusive. They have been deprecated in favor of external controls in order to better separate policy and state.")