Whonix 11 Is it best practice to install all apparmor profiles?

In Whonix 11 is it best practice to install all the app armor profiles for maximum security?

I noticed I get lots of popups for the whonix check app armor profile which is kind of annoying and ends to cause problems on the gateway when the script executes and never finished due to apt-get requests.


Yes, but be prepared for such kind of trouble. Options:

  • live with it

  • check if those have been reported in the apparmor forums, report those

  • install the profiles from source code (often newer then in repository)

  • fix these issues in the profiles, send patches to be merged upstream

  • disable the notifications (not a great option)
    sudo apt-get purge aa-notify