From 7a1f491093972de79471bc62bb7127e5d407d25f Mon Sep 17 00:00:00 2001 From: z3rOR0ne Date: Tue, 30 Aug 2022 22:49:18 -0700 Subject: [PATCH] :memo: Made notation on installing apparmor on artix --- install_apparmor_on_artix.txt | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 install_apparmor_on_artix.txt diff --git a/install_apparmor_on_artix.txt b/install_apparmor_on_artix.txt new file mode 100644 index 00000000..b6e5d413 --- /dev/null +++ b/install_apparmor_on_artix.txt @@ -0,0 +1,27 @@ +In your /etc/default/grub file, input the following at GRUB_CMDLINE_LINUX: + +GRUB_CMDLINE_LINUX="lsm=landlock,lockdown,yama,apparmor,bpf net.ifnames=0" + +Run: + +grub-mkconfig -o /boot/grub/grub.cfg + +Install apparmor and its corresponding init script: + +doas pacman -S apparmor apparmor-runit + +Create the usual softlink + +doas ln -s /etc/runit/sv/apparmor /run/runit/service + +Note that you don't need to enable or start this service manually + +Enable the apparmor profiles: + +doas apparmor_parser /usr/share/apparmor/extra-profiles + +And that should be it, just check on it using: + +doas aa-status + +When you reboot, you should also see a series of log messages letting you know apparmor is running.