Merge pull request #12478 from alanmcanonical/default_apparmor_enforce

[ubuntu] Set the default behaviour of AppArmor to enforce
ComplianceAsCode · Oct 10, 2024 · 50b92cd · 50b92cd
2 parents e2ea33b + a7c69e2
commit 50b92cd
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/products/ubuntu2004/profiles/cis_level1_server.profile b/products/ubuntu2004/profiles/cis_level1_server.profile
@@ -162,7 +162,7 @@ selections:
  - grub2_enable_apparmor
 
  #### 1.7.1.3 Ensure all AppArmor Profiles are in enforce or complain mode (Automated)
- - var_apparmor_mode=complain
+ - var_apparmor_mode=enforce
  - all_apparmor_profiles_in_enforce_complain_mode
 
  #### 1.7.1.4 Ensure all AppArmor Profiles are enforcing (Automated)

diff --git a/products/ubuntu2204/profiles/cis_level1_server.profile b/products/ubuntu2204/profiles/cis_level1_server.profile
@@ -157,7 +157,7 @@ selections:
  - grub2_enable_apparmor
 
  #### 1.6.1.3 Ensure all AppArmor Profiles are in enforce or complain mode (Automated)
- - var_apparmor_mode=complain
+ - var_apparmor_mode=enforce
  - all_apparmor_profiles_in_enforce_complain_mode
 
  #### 1.6.1.4 Ensure all AppArmor Profiles are enforcing (Automated)