mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
restore.sh returned at apparmor_should_manage before it reached apparmor_reinstate_unconfined_restriction. When AppArmor userspace is removed or disabled after teardown, the kernel sysctl still exists, so make environment-teardown left the restriction lifted. The reinstate now runs first; it is a no-op without a recorded value, and the guard still protects the service and profile restore. Reported by CodeRabbit on #1371. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Script Collection
This directory contains automation scripts used across the project.
-
system/ contains host and system-facing helpers.
-
container/ contains helpers that run inside the local container.
-
github/ contains GitHub workflow helper scripts.
-
For the canonical Make target index, see make.md.
-
🛠️ Organize operational helpers for development, CI, release, and maintenance
-
🧭 Separate responsibilities into focused subdirectories with clear scope
-
📚 Keep script-based workflows discoverable and easier to navigate
The scope of this folder is script organization at the repository level. Detailed responsibilities belong in the README files of the respective subdirectories.