ospack: Switch AppArmor profiles to complain mode (!117) · Merge requests · infrastructure / apertis-image-recipes · GitLab

Snippets Groups Projects

Merged Emanuele Aina requested to merge wip/em/logind-canterbury-ribchester-to-apparmor-complain into apertis/v2019dev0 6 years ago

3 unresolved threads

Viewing commit 959c8ce9

Show latest version

5 files

+ 64

− 0

Files

5

959c8ce9

ospack: Switch AppArmor profiles to complain mode · 959c8ce9

Emanuele Aina authored 6 years ago

After the rebase to Buster, some AppArmor profiles have become
problematic and prevent the components from working.

In particular, the logind, Canterbury and Ribchester profiles prevent
the Mildenhall HMI from appearing on the screen.

Until they get updated, switch them to complain mode rather
than enforcing.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

scripts/apparmor-profile-switch-to-complain.sh 0 → 100755

+ 10

− 0

#!/bin/sh

set -eu

for ARG in "$@"
do
    PROFILE=$(basename "$ARG")
    "AppArmor: forcing profile $PROFILE in complain mode"
    ln -s "../$PROFILE" "${ROOTDIR}/etc/apparmor.d/force-complain/"
done

Apertis Website Terms of Use Privacy Policy