The aa-lsm-hook from getsolus

aa-lsm-hook's People

Contributors

Stargazers

Watchers

aa-lsm-hook's Issues

Update apparmor

I tried updating apparmor but after this it throws an error when usysconf is running,

the error


[✗] Compiling AppArmor profiles                                         failed

A copy of the command output follows:

Unable to unlink() /var/cache/aa-lsm-hook/ab6ae91e.0: Is a directory

The Package.yml I got from kyrios for testing and which generates the error from above

name       : apparmor
version    : 2.13.2
release    : 6
source     :
    - https://launchpad.net/apparmor/2.13/2.13.2/+download/apparmor-2.13.2.tar.gz : 844def9926dfda5c7858428d06e44afc80573f9706458b6e7282edbb40b11a30
license    :
    - GPL-2.0-only
    - LGPL-2.1-or-later
component  : security.library
summary    : AppArmor LSM user-space component
description: |
    AppArmor LSM user-space component
builddeps  :
    - dejagnu-devel
    - perl-gettext
    - pyflakes
environment: |
    export PYTHON=/usr/bin/python3
    export PYTHON_VERSIONS=python3
setup      : |
    %patch -p1 < $pkgfiles/0001-apparmor-pyflakes3.patch

    pushd ./libraries/libapparmor
    %autogen
build      : |
    %make -C ./libraries/libapparmor
    %make -C utils
    %make -C binutils
    %make -C parser
    %make -C profiles
    # %make_install -C changehat/pam_apparmor
install    : |
    %make_install -C ./libraries/libapparmor
    # TODO: Validate profiles, tools, etc, and make stateless!
    %make_install -C utils
    %make_install -C binutils
    %make_install -C parser
    %make_install -C profiles
    # %make_install -C changehat/pam_apparmor

    # For now remove unvalidated profiles..
    rm -v $installdir/etc/apparmor.d/*.*.*
check     : |
    # %make check -C ./libraries/libapparmor
    # %make check -C binutils
    # %make check -C parser
    # %make check -C utils || :

The makefile "install" goal writes config files as executables

To the install command here is passed a 00755 mode, which is correct for directory creation but not optimal for the config file and systemd service unit. A permission mode like 00644 would be ideal. In fact, systemd complains about aa-lsm-hook.service being executable when it reloads services.

Recommend Projects