felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

build: use the same technique to disable upstream profile on all distribution.

Browse source 
Only enabled on Ubuntu & opensuse
This commit is contained in:
Alexandre Pujol 2024-06-04 19:52:06 +01:00
parent c40c3e1c98
commit 34973baaea
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 45 additions and 95 deletions
Download patch file Download diff file Expand all files Collapse all files

7
pkg/prebuild/cfg/directories.go
View file

@ -28,8 +28,11 @@ var (
// DebianDir is the directory where the debian specific files are stored
DebianDir *paths.Path = paths.New("debian")
// Either or not overwrite some upstreamed profile
Overwrite = Overwriter{Enabled: false}
// AppArmor 4.0 contains several profiles that allow userns and are otherwise
// unconfined. Overwriter disables upstream profile in favor of (better) apparmor.d
// counterpart
Overwrite Overwriter = false
Ignore = Ignorer{}
Flags = Flagger{}