On Tue, Jun 02, 2015 at 04:42:40PM -0700, Steve Beattie wrote: > > BTW: I'm not sure if filtering and having different default buttons > > based on the profile mode makes sense, except for "historical reasons". > > Opinions? > > Yeah, I don't recall or understand why things were done that way > either.
I think the theory was that in complain mode you were going to be allowing nearly everything, since your tests were going to be filled with primarily positive inputs but in enforce mode you were going to be looking at exceptional events, possibly even attacks, and thus most things were going to be denied. It makes sense to me but if it leads to excessively ugly code I wouldn't mind ditching that. Thanks
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
