Add esvm service file

This commit is contained in:
2026-04-07 18:45:25 +03:00
parent 707786ea90
commit cde109747a
3 changed files with 15 additions and 5 deletions
+2 -4
View File
@@ -1,9 +1,7 @@
name: apparmor name: apparmor
description: |- description: Mandatory Access Control (MAC) mechanism which uses the Linux Security Module (LSM) framework
Mandatory Access Control (MAC) mechanism which uses the
Linux Security Module (LSM) framework
version: 4.1.7 version: 4.1.7
revision: 1 revision: 2
url: https://gitlab.com/apparmor/apparmor url: https://gitlab.com/apparmor/apparmor
license: GPL2-only license: GPL2-only
maintainers: maintainers:
+6
View File
@@ -0,0 +1,6 @@
name: apparmor
description: load AppArmor profiles
type: simple
start_cmd: /usr/lib/apparmor/apparmor.systemd restart
stop_cmd: /usr/lib/apparmor/apparmor.systemd stop
exit_method: stop_command
+7 -1
View File
@@ -28,10 +28,16 @@ build() {
package() { package() {
make -C libraries/libapparmor DESTDIR="$BPM_OUTPUT" install make -C libraries/libapparmor DESTDIR="$BPM_OUTPUT" install
make -C binutils DESTDIR="$BPM_OUTPUT" install make -C binutils DESTDIR="$BPM_OUTPUT" install
make -C parser DESTDIR="$BPM_OUTPUT" SBINDIR="$BPM_OUTPUT"/usr/sbin APPARMOR_BIN_PREFIX="$BPM_OUTPUT"/usr/lib/apparmor install make -C parser -j1 DESTDIR="$BPM_OUTPUT" SBINDIR="$BPM_OUTPUT"/usr/sbin APPARMOR_BIN_PREFIX="$BPM_OUTPUT"/usr/lib/apparmor install install-systemd
make -C profiles DESTDIR="$BPM_OUTPUT" install make -C profiles DESTDIR="$BPM_OUTPUT" install
make -C utils DESTDIR="$BPM_OUTPUT" install make -C utils DESTDIR="$BPM_OUTPUT" install
# Install esvm service
install -Dm644 "$BPM_WORKDIR"/apparmor.esv "$BPM_OUTPUT"/etc/esvm/services/apparmor.esv
# Remove systemd directory
rm -r "$BPM_OUTPUT"/usr/lib/systemd
# Set file mode to allow the perl library to be stripped: # Set file mode to allow the perl library to be stripped:
# https://gitlab.com/apparmor/apparmor/issues/34 # https://gitlab.com/apparmor/apparmor/issues/34
find "$BPM_OUTPUT"/usr/lib/perl/ -type f -iname "*.so" -exec chmod 755 {} \; find "$BPM_OUTPUT"/usr/lib/perl/ -type f -iname "*.so" -exec chmod 755 {} \;