From bf976533ba03114101c0695645a4740a234df736 Mon Sep 17 00:00:00 2001 From: DragonSlayer_14 Date: Sat, 8 Aug 2026 21:44:58 +0200 Subject: [PATCH] Enable AppArmor in GRUB boot configuration. Added the `apparmor=1` parameter to the `GRUB_CMDLINE_LINUX_DEFAULT` option to explicitly enable AppArmor. This enhances security by enforcing mandatory access control policies. --- 04-grub.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/04-grub.sh b/04-grub.sh index 52aa3a9..44f9e42 100755 --- a/04-grub.sh +++ b/04-grub.sh @@ -4,7 +4,7 @@ GRUB_CFG="/etc/default/grub" GRUB_TIMEOUT=0 GRUB_TIMEOUT_STYLE=hidden -GRUB_CMDLINE_LINUX_DEFAULT="quiet splash usbcore.autosuspend=-1 vt.global_cursor_default=0 loglevel=3 rd.luks.options=discard plymouth.ignore-serial-consoles" +GRUB_CMDLINE_LINUX_DEFAULT="quiet splash apparmor=1 usbcore.autosuspend=-1 vt.global_cursor_default=0 loglevel=3 rd.luks.options=discard plymouth.ignore-serial-consoles" GRUB_CMDLINE_LINUX="rcutree.rcu_idle_gp_delay=1" GRUB_THEME_DIR="/usr/share/debian-gaming/grub/grub2-themes"