[apparmor] Linked profiles in complain mode

Mark Wadham ubuntu at rkw.io
Tue Jul 26 11:50:38 UTC 2016


aa-status shows:

9 profiles are in complain mode.
    /usr/sbin/exim4//null-/usr/lib/dovecot/dovecot-lda
    
/usr/sbin/exim4//null-/usr/lib/dovecot/dovecot-lda//null-/usr/bin/doveconf
    
/usr/sbin/exim4//null-/usr/lib/dovecot/dovecot-lda//null-/usr/bin/doveconf//null-/usr/lib/dovecot/dovecot-lda
    /usr/sbin/exim4//null-/usr/sbin/exim4
    
/usr/sbin/exim4//null-/usr/sbin/exim4//null-/usr/lib/dovecot/dovecot-lda
    
/usr/sbin/exim4//null-/usr/sbin/exim4//null-/usr/lib/dovecot/dovecot-lda//null-/usr/bin/doveconf
    
/usr/sbin/exim4//null-/usr/sbin/exim4//null-/usr/lib/dovecot/dovecot-lda//null-/usr/bin/doveconf//null-/usr/lib/dovecot/dovecot-lda
    /usr/sbin/exim4//null-/usr/sbin/exim4//null-/usr/sbin/exim4
    
/usr/sbin/exim4//null-/usr/sbin/exim4//null-/usr/sbin/exim4//null-/usr/sbin/exim4


What are these and how can I set them to enforce mode?  Do I have to 
create links in the various profiles in order to link them to the child 
things they're calling or something like that?

Thanks,
Mark



More information about the AppArmor mailing list