apparmor полное отключение

[blank]

Добрый день!
навеяно темой https://forum.ubuntu.ru/index.php?topic=293575.0
поскольку удалить apparmor не получив ошибку "device appeared twice with different sysfs paths" мне так и не удалось, а решение проблемы я так и не нашел, решил зайти с другой стороны.
попробовал отключить его не удаляя пакеты.
выполнил:

Код: [Выделить]

sudo service apparmor stop
sudo service apparmor teardown
sudo update-rc.d -f apparmor removeперезагрузился, но apparmor все равно запущен

Код: [Выделить]

sudo apparmor_status
apparmor module is loaded.
0 profiles are loaded.
0 profiles are in enforce mode.
0 profiles are in complain mode.
0 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.

как исключить его из загрузки правильно?

если выполнить удаление пакетов возвращается ошибка "device appeared twice with different sysfs paths".

да, Ubuntu 16.04.3 LTS (GNU/Linux 4.4.0-97-generic x86_64)

[Morisson]

Код: [Выделить]

sudo systemctl stop apparmor && sudo systemctl disable apparmor && sudo systemctl mask apparmor

[Morisson]

В 16.04 - systemd.
Тут

[blank]

Morisson, спасибо, почитаю.

Код: [Выделить]

$ sudo systemctl stop apparmor && sudo systemctl disable apparmor && sudo systemctl mask apparmor
apparmor.service is not a native service, redirecting to systemd-sysv-install
Warning: apparmor.service changed on disk. Run 'systemctl daemon-reload' to reload units.
Synchronizing state of apparmor.service with SysV init with /lib/systemd/systemd-sysv-install...
Executing /lib/systemd/systemd-sysv-install disable apparmor
insserv: warning: current start runlevel(s) (empty) of script `apparmor' overrides LSB defaults (S).
insserv: warning: current stop runlevel(s) (S) of script `apparmor' overrides LSB defaults (empty).
insserv: warning: current start runlevel(s) (empty) of script `apparmor' overrides LSB defaults (S).
insserv: warning: current stop runlevel(s) (S) of script `apparmor' overrides LSB defaults (empty).

Код: [Выделить]

apparmor module is loaded.
0 profiles are loaded.
0 profiles are in enforce mode.
0 profiles are in complain mode.
0 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.

[Morisson]

systemctl daemon-reload

Код: [Выделить]

sudo systemctl daemon-reload

[Morisson]

Код: [Выделить]

sudo systemctl mask apparmorТАк сервис "замаскируется" и больше не запустится, пока не сделаете unmask.

[blank]

Код: [Выделить]

sudo systemctl daemon-reloadэто я выполнил еще в первый раз, однако после рестарта:

Код: [Выделить]

apparmor module is loaded.
0 profiles are loaded.
0 profiles are in enforce mode.
0 profiles are in complain mode.
0 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.


[Morisson]

Код: [Выделить]

sudo systemctl disable apparmor && sudo systemctl mask apparmorПовтори

[Morisson]

$ sudo systemctl stop apparmor && sudo systemctl disable apparmor && sudo systemctl mask apparmor
apparmor.service is not a native service, redirecting to systemd-sysv-install
Warning: apparmor.service changed on disk. Run 'systemctl daemon-reload' to reload units.

Тут не дало сделать

[Morisson]

Проверяй так:

Код: [Выделить]

systemctl status apparmor

[blank]

Код: [Выделить]

$ sudo systemctl disable apparmor && sudo systemctl mask apparmor
Synchronizing state of apparmor.service with SysV init with /lib/systemd/systemd-sysv-install...
Executing /lib/systemd/systemd-sysv-install disable apparmor
insserv: warning: current start runlevel(s) (empty) of script `apparmor' overrides LSB defaults (S).
insserv: warning: current stop runlevel(s) (S) of script `apparmor' overrides LSB defaults (empty).
insserv: warning: current start runlevel(s) (empty) of script `apparmor' overrides LSB defaults (S).
insserv: warning: current stop runlevel(s) (S) of script `apparmor' overrides LSB defaults (empty).


Код: [Выделить]

$ systemctl status apparmor
Warning: apparmor.service changed on disk. Run 'systemctl daemon-reload' to reload units.
● apparmor.service
   Loaded: masked (/dev/null; bad)
   Active: inactive (dead)
после очередного выполнения systemctl daemon-reload приходит к виду

Код: [Выделить]

$ systemctl status apparmor
● apparmor.service
   Loaded: masked (/dev/null; bad)
   Active: inactive (dead)
однако после рестарта опять

Код: [Выделить]

~$ systemctl status apparmor
Warning: apparmor.service changed on disk. Run 'systemctl daemon-reload' to reload units.
● apparmor.service
   Loaded: masked (/dev/null; bad)
   Active: inactive (dead)
$ sudo apparmor_status
[sudo] пароль для serg:
apparmor module is loaded.
0 profiles are loaded.
0 profiles are in enforce mode.
0 profiles are in complain mode.
0 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.


[Morisson]

Код: [Выделить]

sudo systemctl daemon-reload

[Morisson]

После ребута пробуй

Код: [Выделить]

systemctl status apparmor

[Morisson]

По очереди делается. Сначала stop- остановить, потом disable- отключить, потом mask- замаскировать

[blank]

понял, спасибо.