mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
- Move flow/security/ghcr.md to tools/ghcr/authentication.md - Move flow/security/mirror-cleanup.md to tools/ghcr/cleanup.md - Move flow/security/branch.md to tools/github/branch.md - Move flow/security/repository.md to tools/github/repository.md - Move code/frameworks/ansible.md to tools/ansible.md - Merge code/frameworks/Makefile.md into tools/make.md and extract file rules to artefact/files/makefile.md - Rename tools/makefile.md to tools/make.md - Add .github/workflows/images-mirror-cleanup.yml for manual GHCR cleanup - Apply documentation.md standards: emojis on headlines, no em dashes, filename link text - Fix all cross-references broken by directory restructuring Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
17 lines
980 B
Markdown
17 lines
980 B
Markdown
# AppArmor Administration 🛡️
|
|
|
|
This directory contains the AppArmor-facing maintenance layer for the local and CI development experience.
|
|
|
|
The focus here is not feature work, but control and safety: development workflows sometimes need a softer security posture, while cleanup paths must leave the system in a predictable state again. That makes this area less about convenience and more about trust, reversibility, and clear operational boundaries. 🔒
|
|
|
|
When changing anything in this area, prefer behavior that is:
|
|
|
|
- explicit rather than magical
|
|
- reversible rather than destructive
|
|
- capability-aware rather than assumption-driven
|
|
- quiet on unsupported systems, but loud when real integrity risks appear
|
|
|
|
In short: these files exist to help development move quickly without teaching the project to be careless around host security controls. ⚙️
|
|
|
|
For the canonical Make target index that invokes these helpers, see [make.md](../../../docs/contributing/tools/make.md).
|