content icon indicating copy to clipboard operation
content copied to clipboard

Load all the profile if not loaded for Ubuntu

Open alanmcanonical opened this issue 4 months ago • 7 comments

Description:

  • Load all the profile if not loaded for Ubuntu without change the mode of loaded profiles

Rationale:

  • We change the default mode to enforce for Ubuntu so if the var_apparmor_mode has been changed it means the customs tailored the benchmark and don't want to enforce all existing profiles. In order to preserve the modes of loaded profiles and still to be compliant, we should only load the not loaded profiles into complain mode.

alanmcanonical avatar Oct 09 '24 08:10 alanmcanonical