Arch Linux

dab9966

Member

Registered: 2023-12-05

Posts: 36

Persist apparmor directory structure?

Managed to get apparmor setup using pacman a couple days ago and cleaned up /etc/apparmor.d directory to only contain profiles that I need, but then I just noticed that the default profiles returned back. If you are starting with apparmor its great to have these examples, but now its becoming a clutter.

Any way to persist configuration? I am not sure if it reverted because of pacman -Syu or because of something else.

espresso

Member

From: Pale Blue Dot, US

Registered: 2023-05-15

Posts: 38

Re: Persist apparmor directory structure?

To prevent those files from being [re]installed, you could use the NoExtract option in your pacman.conf (or include file, if you use that).

Those options can include shell-style glob patterns. but being curious which ones were not owned by apparmor, something like this seemed to work for me.

find /etc/apparmor.d -exec pacman -Qo {} \; | grep -v ' owned by apparmor '