On 2024-10-27 10:10, Stakanov via openSUSE Users wrote:
Else, I am considering since some time the setting up of a separate hardware only for these purposes, (here this would be an argument of a very frugal system set up e.g. with SLED (because they have alike ALP ab unchangeable root, which, if I well understood, hardens the system. Apparmor has very little profiles active with me by default and I have the experience if you activate more you have a high workload to maintain these profiles and the learning curve of what is an allowable and correct behavior of every software profile is somewhat steep.
Strange. I have all the profiles of Apparmor that come with the distribution without any issue or impact on the workload. -- Cheers / Saludos, Carlos E. R. (from 15.5 x86_64 at Telcontar)