Apparmor: check that we are running an AppArmor-enabled kernel.
This commit is contained in:
parent
44eb1bac65
commit
a9e4eca8bf
@ -35,6 +35,11 @@ AppArmor.
|
|||||||
|
|
||||||
config = mkIf (cfg.enable) {
|
config = mkIf (cfg.enable) {
|
||||||
|
|
||||||
|
assertions = [ { assertion = config.boot.kernelPackages.kernel.features ? apparmor
|
||||||
|
&& config.boot.kernelPackages.kernel.features.apparmor;
|
||||||
|
message = "AppArmor is enabled, but the kernel doesn't have AppArmor support"; }
|
||||||
|
];
|
||||||
|
|
||||||
jobs.apparmor =
|
jobs.apparmor =
|
||||||
{ startOn = "startup";
|
{ startOn = "startup";
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user