mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 00:14:44 +01:00
5d9d4483fb
This is taken from Debian's apparmor.service, and is the first (and easiest) step to get the upstream and Debian file closer.
28 lines
973 B
Desktop File
28 lines
973 B
Desktop File
[Unit]
|
|
Description=Load AppArmor profiles
|
|
DefaultDependencies=no
|
|
Before=sysinit.target
|
|
After=systemd-journald-audit.socket
|
|
# profile cache: /var/cache/apparmor/ and /usr/share/apparmor/cache/
|
|
After=var.mount var-cache.mount usr.mount usr-share.mount
|
|
ConditionSecurity=apparmor
|
|
Documentation=man:apparmor(7)
|
|
Documentation=https://gitlab.com/apparmor/apparmor/wikis/home/
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/lib/apparmor/apparmor.systemd reload
|
|
ExecReload=/lib/apparmor/apparmor.systemd reload
|
|
|
|
# systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement
|
|
# from running processes (and not being able to re-apply it later).
|
|
# Upstream systemd developers refused to implement an option that allows overriding
|
|
# this behaviour, therefore we have to make ExecStop a no-op to error out on the
|
|
# safe side.
|
|
#
|
|
# If you really want to unload all AppArmor profiles, run aa-teardown
|
|
ExecStop=/bin/true
|
|
RemainAfterExit=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|