Hi,

Christian Boltz:
> I think you are misreading the documentation here ;-)

I suspect it might be easier to improve the documentation,
than to fix all people who would "misread" it.

(Sorry I did not find this funny.)

> OTOH, if you already have a profile loaded, start a process and then 
> reload the modified profile, it will be applied instantly.

Thanks!

> Note that there were bugs both in apparmor_parser and the kernel that 
> broke reload and could cause the problem you described. So please check 
> if Debian has the fixes in apparmor_parser (likely, because this was fixed 
> a while ago) and the kernel (less likely because that patch is quite 
> new). If in doubt, John should be able to point you to the relevant 
> patches.

Good to know! Indeed, I have no clue what kernel patch you're
referring to ⇒ John, can you please point me to it? Is it part of the
pull request for 4.8? Thanks in advance!

Cheers,
-- 
intrigeri

Reply via email to