public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

AppArmor: try converting to a systemd unit

This commit is contained in:
Evgeny Egorochkin 2013-05-11 08:40:45 +03:00
parent a9e4eca8bf
commit d7cc2415ea
1 changed files with 15 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
modules/security/apparmor.nix
View File

@ -40,19 +40,26 @@ AppArmor.
message = "AppArmor is enabled, but the kernel doesn't have AppArmor support"; }
];
jobs.apparmor =
{ startOn = "startup";
environment.systemPackages = [ pkgs.apparmor ];
path = [ pkgs.apparmor ];
systemd.services.apparmor = {
#wantedBy = [ "basic.target" ];
wantedBy = [ "local-fs.target" ];
path = [ pkgs.apparmor ];
preStart = concatMapStrings (profile: ''
apparmor_parser -Kv -I ${pkgs.apparmor}/etc/apparmor.d/ "${profile}"
serviceConfig = {
Type = "oneshot";
RemainAfterExit = "yes";
ExecStart = concatMapStrings (profile: ''
${pkgs.apparmor}/sbin/apparmor_parser -rKv -I ${pkgs.apparmor}/etc/apparmor.d/ "${profile}"
'') cfg.profiles;
ExecStop = concatMapStrings (profile: ''
${pkgs.apparmor}/sbin/apparmor_parser -Rv "${profile}"
'') cfg.profiles;
postStop = ''
'';
};
};
};
}