public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

apparmor: Fix loading multiple profiles 

apparmor's systemd service wasn't working when multiple profiles were
defined, due to the ExecStart commands in the service file being
broken into multiple lines, instead of being separated by ';'.
This commit is contained in:
Ricardo M. Correia 2013-05-28 16:15:16 +00:00
parent f60393975f
commit 84c0af80d7
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/security/apparmor.nix
View File

@ -53,12 +53,12 @@ with pkgs.lib;
serviceConfig = {
Type = "oneshot";
RemainAfterExit = "yes";
ExecStart = concatMapStrings (profile: ''
${pkgs.apparmor}/sbin/apparmor_parser -rKv -I ${pkgs.apparmor}/etc/apparmor.d/ "${profile}"
'') cfg.profiles;
ExecStop = concatMapStrings (profile: ''
${pkgs.apparmor}/sbin/apparmor_parser -Rv "${profile}"
'') cfg.profiles;
ExecStart = concatMapStrings (profile:
''${pkgs.apparmor}/sbin/apparmor_parser -rKv -I ${pkgs.apparmor}/etc/apparmor.d/ "${profile}" ; ''
) cfg.profiles;
ExecStop = concatMapStrings (profile:
''${pkgs.apparmor}/sbin/apparmor_parser -Rv "${profile}" ; ''
) cfg.profiles;
};
};