Apparmor activate rEFInd

Issues & Assistance
1

Hello, sorry for noob question but I wanted to use apparmor on Cachyos,

Currently I got inactive apparmor:

sudo apparmor_status
apparmor module is loaded.
apparmor filesystem is not mounted.

I looked into CachyOS documentation and I found:

From documentation I assume I need to paste “lsm=landlock,lockdown,yama,integrity,apparmor,bpf“

to /boot/efi/refind/refind.conf: (in Cachyos wiki there is other name for conf file refind_linux.conf)

menuentry "Arch Linux" {
icon     /EFI/refind/icons/os_arch.png
volume   "Arch Linux"
loader   /boot/vmlinuz-linux
initrd   /boot/initramfs-linux.img
options  "root=PARTUUID=502a50-0079-4c40-b240-abf3462sea rw add_efi_memmap"
submenuentry "Boot using fallback initramfs" {
initrd /boot/initramfs-linux-fallback.img
}
submenuentry "Boot to terminal" {
add_options "systemd.unit=multi-user.target"
}
disabled
}

But where to paste it in options to not brick my install?

My guess is in line of options after “rw add_efi_memmap lsm=landlock,lockdown,yama,integrity,apparmor,bpf“

2

Should be ok :slight_smile:

3

Thanks it works.

My problem was mainly:
Refind settings and boot options, are in different folders
I needed to edit:
/boot/refind_linux.conf

But I edited:
/boot/efi/refind/refind.conf
And what edited above is sample of archlinux boot options not entry.