53 lines
1.5 KiB
Bash
53 lines
1.5 KiB
Bash
#!/usr/bin/env bash
|
|
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
set -eux
|
|
|
|
_lsb_release() {
|
|
# shellcheck source=/dev/null
|
|
. /etc/os-release
|
|
echo "$ID"
|
|
}
|
|
DISTRIBUTION="$(_lsb_release)"
|
|
readonly SRC=/tmp/
|
|
readonly DISTRIBUTION
|
|
|
|
main() {
|
|
install -dm0750 -o "$SUDO_USER" -g "$SUDO_USER" "/home/$SUDO_USER/Projects/" "/home/$SUDO_USER/Projects/apparmor.d" "/home/$SUDO_USER/.config/"
|
|
install -Dm0644 -o "$SUDO_USER" -g "$SUDO_USER" $SRC/.bash_aliases "/home/$SUDO_USER/.bash_aliases"
|
|
install -Dm0644 -o "$SUDO_USER" -g "$SUDO_USER" $SRC/htoprc "/home/$SUDO_USER/.config/htop/htoprc"
|
|
install -Dm0644 $SRC/parser.conf /etc/apparmor/parser.conf
|
|
install -Dm0644 $SRC/site.local /etc/apparmor.d/tunables/multiarch.d/site.local
|
|
install -Dm0755 $SRC/aa-update /usr/bin/aa-update
|
|
install -Dm0755 $SRC/aa-clean /usr/bin/aa-clean
|
|
chown -R "$SUDO_USER:$SUDO_USER" "/home/$SUDO_USER/.config/"
|
|
|
|
case "$DISTRIBUTION" in
|
|
arch)
|
|
rm -f $SRC/*.sig # Ignore signature files
|
|
pacman --noconfirm -U $SRC/*.pkg.tar.zst
|
|
;;
|
|
|
|
debian | ubuntu)
|
|
apt install -y apparmor-profiles
|
|
dpkg -i $SRC/*.deb || true
|
|
;;
|
|
|
|
opensuse*)
|
|
mv "/home/$SUDO_USER/.bash_aliases" "/home/$SUDO_USER/.alias"
|
|
rpm -i $SRC/*.rpm
|
|
;;
|
|
|
|
esac
|
|
|
|
verb="start"
|
|
rm -rf /var/cache/apparmor/* || true
|
|
if systemctl is-active -q apparmor; then
|
|
verb="reload"
|
|
fi
|
|
systemctl "$verb" apparmor.service || journalctl -xeu apparmor.service
|
|
}
|
|
|
|
main "$@"
|