0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-10 12:47:04 +00:00

Files

T

kevinveenbirkenbachandClaude Opus 5.5 623c6e8c12 fix(apparmor): reinstate the unconfined restriction before the guard

restore.sh returned at apparmor_should_manage before it reached
apparmor_reinstate_unconfined_restriction. When AppArmor userspace is
removed or disabled after teardown, the kernel sysctl still exists, so
make environment-teardown left the restriction lifted. The reinstate now
runs first; it is a no-op without a recorded value, and the guard still
protects the service and profile restore.

Reported by CodeRabbit on #1371.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-04 18:27:32 +01:00

apparmor

fix(apparmor): reinstate the unconfined restriction before the guard

2026-11-04 18:27:32 +01:00

cache

style: delete every comment the comments-valid policy rejects

2026-08-18 03:22:02 +02:00

kernel/loop

…

README.md

System Scripts

This directory holds system-facing helpers grouped by area. Use the README in each child directory as the canonical entry point for that area. For the canonical Make target index that invokes these helpers, see make.md.

Areas

apparmor/ for AppArmor maintenance helpers
network/ for DNS and IPv6 helpers
purge/ for host and repository cleanup helpers
systemd/ for WSL2 systemd helpers
tls/ for CA trust helpers