On Wed, 26 Jun 2019, John Johansen wrote: > AppArmor can be built-in (compiled) without being on the Enabled list. > If you had apparmor in your enabled list along with selinux before, > it would attempt to enabled and fail with the message > > exclusive disabled: apparmor > > now it will be enabled but it does match what is documented in > the lsm enabled description > > A comma-separated list of LSMs, in initialization order. > Any LSMs left off this list will be ignored. This can be > controlled at boot with the "lsm=" parameter. Ok -- I suspect the only people who have SELinux and AppArmor selected are doing testing / development. -- James Morris <jmorris@xxxxxxxxx>
