felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

build: add filter for apparmor version.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-15 00:26:47 +01:00
parent 07dbb0c7d3
commit 96e79d9d88
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/tunables/multiarch.d/profiles
View file

@ -12,9 +12,14 @@
@{p_systemd_user}=unconfined
# Name of the dbus daemon profiles
@{p_dbus_accessibility}=dbus-accessibility
#aa:only apparmor4.1
@{p_dbus_system}=dbus-system//&unconfined
@{p_dbus_session}=dbus-session//&unconfined
#aa:exclude apparmor4.1
@{p_dbus_system}=dbus-system
@{p_dbus_session}=dbus-session
@{p_dbus_accessibility}=dbus-accessibility
@{p_at_spi2_registryd}=at-spi2-registryd
@{p_colord}=colord

4
pkg/prebuild/directive/filter.go
View file

@ -43,6 +43,10 @@ func filterRuleForUs(opt *Option) bool {
if slices.Contains(opt.ArgList, abiStr) {
return true
}
versionStr := fmt.Sprintf("apparmor%s", prebuild.Version)
if slices.Contains(opt.ArgList, versionStr) {
return true
}
return slices.Contains(opt.ArgList, prebuild.Distribution) || slices.Contains(opt.ArgList, prebuild.Family)
}