> After latest upgrade I've discovered via `aa-status` that new named profile 
> `nvidia_modrpobe` is loaded in complain mode:

Good catch!

That's because debian/rules does this:

        # set all profiles in apparmor-profiles to complain mode
        cd $(CURDIR)/debian/tmp && sh 
$(CURDIR)/debian/put-all-profiles-in-complain-mode.sh

… which unfortunately, now that the apparmor binary package ships its
first profile (previously it only shipped abstractions), sets it to
complain mode.

I'll try to prepare a fix ASAP unless you tell me you're on it.

Reply via email to