felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

build: initial build support for full system policy.

Browse source
This commit is contained in:
Alexandre Pujol 2023-01-24 20:17:00 +00:00
parent 807bf7f1c8
commit dc8134589d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

14
configure vendored
View file

@ -158,7 +158,19 @@ complain() {
# Set AppArmor for full system policy # Set AppArmor for full system policy
# See https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy # See https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy
full() { full() {
cp -a apparmor.d/groups/_full/* "$ROOT/apparmor.d/" cp -a apparmor.d/groups/_full/init "$ROOT/apparmor.d/"
cp -a apparmor.d/groups/_full/systemd "$ROOT/apparmor.d/"
case "$DISTRIBUTION" in
arch|endeavouros|cachyos|manjarolinux)
cp -r root/usr/lib/initcpio root/usr/lib/systemd/ "$ROOT/root/"
;;
debian|ubuntu|whonix)
cp -r root/etc/initramfs-tools "$ROOT/root/"
;;
*) _die "$DISTRIBUTION is not a supported distribution." ;;
esac
} }
# Print help message # Print help message

2
dists/ignore/main.ignore
View file

@ -5,6 +5,8 @@
# when ./configure is given the --full option # when ./configure is given the --full option
apparmor.d/groups/_full apparmor.d/groups/_full
root/etc/initramfs-tools root/etc/initramfs-tools
root/usr/lib/initcpio
root/usr/lib/systemd/
apparmor.d/groups/apps apparmor.d/groups/apps