0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-14 06:00:33 +03:00

Revert "Revert "apparmor: fix and improve the service""

This reverts commit 420f89ceb2.
This commit is contained in:
Julien Moutinho 2020-10-18 15:36:24 +02:00
parent d239bc3643
commit 05d334cfe2
20 changed files with 805 additions and 164 deletions

View file

@ -171,6 +171,14 @@ in
export PATH="${wrapperDir}:$PATH"
'';
security.apparmor.includes."nixos/security.wrappers" = ''
include "${pkgs.apparmorRulesFromClosure { name="security.wrappers"; } [
securityWrapper
pkgs.stdenv.cc.cc
pkgs.stdenv.cc.libc
]}"
'';
###### setcap activation script
system.activationScripts.wrappers =
lib.stringAfter [ "specialfs" "users" ]