In Whonix 11 is it best practice to install all the app armor profiles for maximum security?
I noticed I get lots of popups for the whonix check app armor profile which is kind of annoying and ends to cause problems on the gateway when the script executes and never finished due to apt-get requests.
Thanks
Yes, but be prepared for such kind of trouble. Options:
live with it
check if those have been reported in the apparmor forums, report those
install the profiles from source code (often newer then in repository)
fix these issues in the profiles, send patches to be merged upstream
disable the notifications (not a great option)
sudo apt-get purge aa-notify