AppArmor policy setup has been moved to the Makefile

[waydroid.git] / Makefile

diff --git a/Makefile b/Makefile
index 7c58571e6d3a13e20e7204a74371168190085467..4652ea525b11debe2de90e2947adc21e0073b3c7 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -21,7 +21,7 @@ build:
 install:
        install -d $(INSTALL_WAYDROID_DIR) $(INSTALL_BIN_DIR) $(INSTALL_APPS_DIR) $(INSTALL_METAINFO_DIR)
        cp -a data tools waydroid.py $(INSTALL_WAYDROID_DIR)
-       ln -srf $(INSTALL_WAYDROID_DIR)/waydroid.py $(INSTALL_BIN_DIR)/waydroid
+       ln -sf $(WAYDROID_DIR)/waydroid.py $(INSTALL_BIN_DIR)/waydroid
        mv $(INSTALL_WAYDROID_DIR)/data/*.desktop $(INSTALL_APPS_DIR)
        mv $(INSTALL_WAYDROID_DIR)/data/*.metainfo.xml $(INSTALL_METAINFO_DIR)
        if [ $(USE_SYSTEMD) = 1 ]; then \
@@ -31,3 +31,14 @@ install:
        if [ $(USE_NFTABLES) = 1 ]; then \
                sed '/LXC_USE_NFT=/ s/false/true/' -i $(INSTALL_WAYDROID_DIR)/data/scripts/waydroid-net.sh; \
        fi
+
+apparmor:
+       cp -f data/configs/adbd /etc/apparmor.d/adbd
+       apparmor_parser -r /etc/apparmor.d/adbd
+       cp -f data/configs/android_app /etc/apparmor.d/android_app
+       apparmor_parser -r /etc/apparmor.d/android_app
+       cp -f data/configs/lxc-waydroid /etc/apparmor.d/lxc/lxc-waydroid
+       apparmor_parser -r /etc/apparmor.d/lxc/lxc-waydroid
+       sed --sandbox -i "s/lxc.aa_profile = unconfined/lxc.aa_profile = lxc-waydroid/g;" /var/lib/waydroid/lxc/waydroid/config
+       sed --sandbox -i "s/lxc.apparmor.profile = unconfined/lxc.apparmor.profile = lxc-waydroid/g;" /var/lib/waydroid/lxc/waydroid/config
+