debian: Install apparmor profiles

[waydroid.git] / Makefile

diff --git a/Makefile b/Makefile
index d543f7cf57427c0417d43a5b33dab2df58f22857..b128ef5a8580e9450e8a949fe489a1ef0e4130ab 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -3,23 +3,47 @@ PREFIX := /usr
 USE_SYSTEMD ?= 1
 USE_NFTABLES ?= 0
 
 USE_SYSTEMD ?= 1
 USE_NFTABLES ?= 0
 

-WAYDROID_DIR := $(DESTDIR)$(PREFIX)/lib/waydroid
-BIN_DIR := $(DESTDIR)$(PREFIX)/bin
-APPS_DIR := $(DESTDIR)$(PREFIX)/share/applications
-SYSD_DIR := $(DESTDIR)/lib/systemd/system
+WAYDROID_DIR := $(PREFIX)/lib/waydroid
+BIN_DIR := $(PREFIX)/bin
+APPS_DIR := $(PREFIX)/share/applications
+METAINFO_DIR := $(PREFIX)/share/metainfo
+SYSD_DIR := $(PREFIX)/lib/systemd/system
+APPARMOR_DIR := /etc/apparmor.d
+
+INSTALL_WAYDROID_DIR := $(DESTDIR)$(WAYDROID_DIR)
+INSTALL_BIN_DIR := $(DESTDIR)$(BIN_DIR)
+INSTALL_APPS_DIR := $(DESTDIR)$(APPS_DIR)
+INSTALL_METAINFO_DIR := $(DESTDIR)$(METAINFO_DIR)
+INSTALL_SYSD_DIR := $(DESTDIR)$(SYSD_DIR)
+INSTALL_APPARMOR_DIR := $(DESTDIR)$(APPARMOR_DIR)

 
 build:
        @echo "Nothing to build, run 'make install' to copy the files!"
 
 install:
 
 build:
        @echo "Nothing to build, run 'make install' to copy the files!"
 
 install:

-       install -d $(WAYDROID_DIR) $(BIN_DIR) $(APPS_DIR)
-       cp -a data tools waydroid.py $(WAYDROID_DIR)
-       ln -sr $(WAYDROID_DIR)/waydroid.py $(BIN_DIR)/waydroid
-       mv $(WAYDROID_DIR)/data/*.desktop $(APPS_DIR)
+       install -d $(INSTALL_WAYDROID_DIR) $(INSTALL_BIN_DIR) $(INSTALL_APPS_DIR) $(INSTALL_METAINFO_DIR)
+       cp -a data tools waydroid.py $(INSTALL_WAYDROID_DIR)
+       ln -sf $(WAYDROID_DIR)/waydroid.py $(INSTALL_BIN_DIR)/waydroid
+       mv $(INSTALL_WAYDROID_DIR)/data/*.desktop $(INSTALL_APPS_DIR)
+       mv $(INSTALL_WAYDROID_DIR)/data/*.metainfo.xml $(INSTALL_METAINFO_DIR)

        if [ $(USE_SYSTEMD) = 1 ]; then \
        if [ $(USE_SYSTEMD) = 1 ]; then \

-               install -d $(SYSD_DIR); \
-               cp systemd/waydroid-container.service $(SYSD_DIR); \
+               install -d $(INSTALL_SYSD_DIR); \
+               cp systemd/waydroid-container.service $(INSTALL_SYSD_DIR); \

        fi
        if [ $(USE_NFTABLES) = 1 ]; then \
        fi
        if [ $(USE_NFTABLES) = 1 ]; then \

-               sed '/LXC_USE_NFT=/ s/false/true/' -i $(WAYDROID_DIR)/data/scripts/waydroid-net.sh; \
+               sed '/LXC_USE_NFT=/ s/false/true/' -i $(INSTALL_WAYDROID_DIR)/data/scripts/waydroid-net.sh; \
+       fi
+
+install_apparmor:
+       install -d $(INSTALL_APPARMOR_DIR) $(INSTALL_APPARMOR_DIR)/lxc
+       cp -f data/configs/apparmor_profiles/adbd $(INSTALL_APPARMOR_DIR)/adbd
+       cp -f data/configs/apparmor_profiles/android_app $(INSTALL_APPARMOR_DIR)/android_app
+       cp -f data/configs/apparmor_profiles/lxc-waydroid $(INSTALL_APPARMOR_DIR)/lxc/lxc-waydroid
+       sed --sandbox -i "/lxc.aa_profile/ s/unconfined/lxc-waydroid/g" $(DESTDIR)$(WAYDROID_DIR)/data/configs/config_1
+       sed --sandbox -i "/lxc.apparmor.profile/ s/unconfined/lxc-waydroid/g" $(DESTDIR)$(WAYDROID_DIR)/data/configs/config_2
+       # Load the profiles if not just packaging
+       if [ -z $(DESTDIR) ] && aa-enabled --quiet 2>/dev/null; then \
+               apparmor_parser -r -T -W "$(INSTALL_APPARMOR_DIR)/adbd"; \
+               apparmor_parser -r -T -W "$(INSTALL_APPARMOR_DIR)/android_app"; \
+               apparmor_parser -r -T -W "$(INSTALL_APPARMOR_DIR)/lxc/lxc-waydroid"; \

        fi
        fi