AppArmor policy setup has been moved to the Makefile

[waydroid.git] / Makefile

diff --git a/Makefile b/Makefile
index 810902e0555faa3281850de99fce7531eaa04ff5..4652ea525b11debe2de90e2947adc21e0073b3c7 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -31,3 +31,14 @@ install:
        if [ $(USE_NFTABLES) = 1 ]; then \
                sed '/LXC_USE_NFT=/ s/false/true/' -i $(INSTALL_WAYDROID_DIR)/data/scripts/waydroid-net.sh; \
        fi
+
+apparmor:
+       cp -f data/configs/adbd /etc/apparmor.d/adbd
+       apparmor_parser -r /etc/apparmor.d/adbd
+       cp -f data/configs/android_app /etc/apparmor.d/android_app
+       apparmor_parser -r /etc/apparmor.d/android_app
+       cp -f data/configs/lxc-waydroid /etc/apparmor.d/lxc/lxc-waydroid
+       apparmor_parser -r /etc/apparmor.d/lxc/lxc-waydroid
+       sed --sandbox -i "s/lxc.aa_profile = unconfined/lxc.aa_profile = lxc-waydroid/g;" /var/lib/waydroid/lxc/waydroid/config
+       sed --sandbox -i "s/lxc.apparmor.profile = unconfined/lxc.apparmor.profile = lxc-waydroid/g;" /var/lib/waydroid/lxc/waydroid/config
+