Adjust cache paths in apparmor.service

The initial apparmor.service assumed the profile cache is in
/var/lib/apparmor/ which was an openSUSE-specific path that was chosen
for historical reasons, but was far from perfect.

In the meantime, the profile cache moved to /var/cache/apparmor/ and the
read-only/packaged version was added in /usr/share/apparmor/cache/

This commit adjusts apparmor.service to use these paths.
This commit is contained in:
Christian Boltz 2018-06-16 23:14:19 +02:00
parent 288ae9049a
commit 3a9b0fd74a
Failed to generate hash of commit

View file

@ -3,8 +3,8 @@ Description=Load AppArmor profiles
DefaultDependencies=no DefaultDependencies=no
Before=sysinit.target Before=sysinit.target
After=systemd-journald-audit.socket After=systemd-journald-audit.socket
# profile cache # profile cache: /var/cache/apparmor/ and /usr/share/apparmor/cache/
After=var.mount var-lib.mount After=var.mount var-cache.mount usr.mount usr-share.mount
ConditionSecurity=apparmor ConditionSecurity=apparmor
[Service] [Service]