Re: Stretch => Buster: AppArmor

2020-10-16 Thread l0f4r0
Hi, 16 oct. 2020 à 12:23 de jd-debian-u...@dybdal.dk: > Is there a simple way to disable AppArmor completely until I've had time to > figure out what to do with it long-term? > Considering you are not asking for removal but just deactivation, the simplest way to me seems to be the following:

Re: Stretch => Buster: AppArmor

2020-10-16 Thread Tixy
On Fri, 2020-10-16 at 16:59 +0200, Jesper Dybdal wrote: > On 2020-10-16 16:39, Tixy wrote: > > Or do what I did, just uninstall the apparmor package which is > > pulled > > in as a 'recommends' of the Linux kernel. Or pin it to priority -1 > > for > > extra paranoia. > > > > Thanks. But will it

Re: Stretch => Buster: AppArmor

2020-10-16 Thread Jesper Dybdal
On 2020-10-16 16:39, Tixy wrote: Or do what I did, just uninstall the apparmor package which is pulled in as a 'recommends' of the Linux kernel. Or pin it to priority -1 for extra paranoia. Thanks.  But will it not be reinstalled the next time there is a kernel update? -- Jesper Dybdal ht

Re: Stretch => Buster: AppArmor

2020-10-16 Thread Reco
Hi. On Fri, Oct 16, 2020 at 03:39:29PM +0100, Tixy wrote: > On Fri, 2020-10-16 at 13:30 +0300, Reco wrote: > > > > On Fri, Oct 16, 2020 at 12:23:30PM +0200, Jesper Dybdal wrote: > [...] > > > Is there a simple way to disable AppArmor completely until I've had > > > time to figure out what

Re: Stretch => Buster: AppArmor

2020-10-16 Thread Tixy
On Fri, 2020-10-16 at 13:30 +0300, Reco wrote: > > On Fri, Oct 16, 2020 at 12:23:30PM +0200, Jesper Dybdal wrote: [...] > > Is there a simple way to disable AppArmor completely until I've had > > time to figure out what to do with it long-term? > > Adding "apparmor=0" to your kernel cmdline shoul

Re: Stretch => Buster: AppArmor

2020-10-16 Thread Reco
Hi. On Fri, Oct 16, 2020 at 12:23:30PM +0200, Jesper Dybdal wrote: > Buster enables AppArmor by default.  I know just about nothing at all > about AppArmor.  Does it constitute a risk that some of my existing > programs will not work? Depends. AppArmor is applied per-binary. If you're usi

Stretch => Buster: AppArmor

2020-10-16 Thread Jesper Dybdal
At some point I will have to upgrade from Stretch to Buster, and I am beginning to consider which problems I might run into.  So I have some more or less stupid questions that I will post in separate threads - this is the first. Buster enables AppArmor by default.  I know just about nothing at