Apparmor: check that we are running an AppArmor-enabled kernel.
This commit is contained in:
parent
44eb1bac65
commit
a9e4eca8bf
|
@ -35,6 +35,11 @@ AppArmor.
|
|||
|
||||
config = mkIf (cfg.enable) {
|
||||
|
||||
assertions = [ { assertion = config.boot.kernelPackages.kernel.features ? apparmor
|
||||
&& config.boot.kernelPackages.kernel.features.apparmor;
|
||||
message = "AppArmor is enabled, but the kernel doesn't have AppArmor support"; }
|
||||
];
|
||||
|
||||
jobs.apparmor =
|
||||
{ startOn = "startup";
|
||||
|
||||
|
|
Loading…
Reference in New Issue