-apparmor:
- cp -f data/configs/adbd /etc/apparmor.d/adbd
- apparmor_parser -r /etc/apparmor.d/adbd
- cp -f data/configs/android_app /etc/apparmor.d/android_app
- apparmor_parser -r /etc/apparmor.d/android_app
- cp -f data/configs/lxc-waydroid /etc/apparmor.d/lxc/lxc-waydroid
- apparmor_parser -r /etc/apparmor.d/lxc/lxc-waydroid
- sed --sandbox -i "s/lxc.aa_profile = unconfined/lxc.aa_profile = lxc-waydroid/g;" /var/lib/waydroid/lxc/waydroid/config
- sed --sandbox -i "s/lxc.apparmor.profile = unconfined/lxc.apparmor.profile = lxc-waydroid/g;" /var/lib/waydroid/lxc/waydroid/config
-
+install_apparmor:
+ install -d $(INSTALL_APPARMOR_DIR) $(INSTALL_APPARMOR_DIR)/lxc
+ mkdir -p $(INSTALL_APPARMOR_DIR)/local/
+ touch $(INSTALL_APPARMOR_DIR)/local/adbd
+ touch $(INSTALL_APPARMOR_DIR)/local/android_app
+ touch $(INSTALL_APPARMOR_DIR)/local/lxc-waydroid
+ cp -f data/configs/apparmor_profiles/adbd $(INSTALL_APPARMOR_DIR)/adbd
+ cp -f data/configs/apparmor_profiles/android_app $(INSTALL_APPARMOR_DIR)/android_app
+ cp -f data/configs/apparmor_profiles/lxc-waydroid $(INSTALL_APPARMOR_DIR)/lxc/lxc-waydroid
+ # Load the profiles if not just packaging
+ if [ -z $(DESTDIR) ] && { aa-enabled --quiet || systemctl is-active -q apparmor; } 2>/dev/null; then \
+ apparmor_parser -r -T -W "$(INSTALL_APPARMOR_DIR)/adbd"; \
+ apparmor_parser -r -T -W "$(INSTALL_APPARMOR_DIR)/android_app"; \
+ apparmor_parser -r -T -W "$(INSTALL_APPARMOR_DIR)/lxc/lxc-waydroid"; \
+ fi