[qubes-users] Enabling Apparmor in Debian-10 Fedora-30 Templates

2019-08-17 Thread ronpunz
Is it recommended to enable Apparmor in TemplateVM's? I note from whonix docs that this can be achieved in dom0 using qvm-prefs -s templatename kernelopts "nopat apparmor=1 security=apparmor". -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To un

Re: [qubes-users] Enabling Apparmor in Debian-10 Fedora-30 Templates

2019-08-17 Thread Chris Laprise
On 8/17/19 6:27 AM, ronpunz wrote: Is it recommended to enable Apparmor in TemplateVM's? I note from whonix docs that this can be achieved in dom0 using qvm-prefs -s templatename kernelopts "nopat apparmor=1 security=apparmor". I personally recommend doing this for Debian 10 (and Whonix 15, wh

Re: [qubes-users] Enabling Apparmor in Debian-10 Fedora-30 Templates

2019-08-17 Thread ronpunz
On 8/17/19 5:30 PM, Chris Laprise wrote: > On 8/17/19 6:27 AM, ronpunz wrote: >> Is it recommended to enable Apparmor in TemplateVM's? I note from whonix >> docs that this can be achieved in dom0 using qvm-prefs -s templatename >> kernelopts "nopat apparmor=1 security=apparmor". >> > > I personall

Re: [qubes-users] Enabling Apparmor in Debian-10 Fedora-30 Templates

2019-08-18 Thread Chris Laprise
On 8/18/19 2:50 AM, ronpunz wrote: On 8/17/19 5:30 PM, Chris Laprise wrote: On 8/17/19 6:27 AM, ronpunz wrote: Is it recommended to enable Apparmor in TemplateVM's? I note from whonix docs that this can be achieved in dom0 using qvm-prefs -s templatename kernelopts "nopat apparmor=1 security=a