build: initial build support for full system policy.

This commit is contained in:
Alexandre Pujol 2023-01-24 20:17:00 +00:00
parent 807bf7f1c8
commit dc8134589d
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 15 additions and 1 deletions

14
configure vendored
View File

@ -158,7 +158,19 @@ complain() {
# Set AppArmor for full system policy
# See https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy
full() {
cp -a apparmor.d/groups/_full/* "$ROOT/apparmor.d/"
cp -a apparmor.d/groups/_full/init "$ROOT/apparmor.d/"
cp -a apparmor.d/groups/_full/systemd "$ROOT/apparmor.d/"
case "$DISTRIBUTION" in
arch|endeavouros|cachyos|manjarolinux)
cp -r root/usr/lib/initcpio root/usr/lib/systemd/ "$ROOT/root/"
;;
debian|ubuntu|whonix)
cp -r root/etc/initramfs-tools "$ROOT/root/"
;;
*) _die "$DISTRIBUTION is not a supported distribution." ;;
esac
}
# Print help message

View File

@ -5,6 +5,8 @@
# when ./configure is given the --full option
apparmor.d/groups/_full
root/etc/initramfs-tools
root/usr/lib/initcpio
root/usr/lib/systemd/
apparmor.d/groups/apps