Override Apparmor profile setting Update apparmor_binprofiles.bbclass - #155
Override Apparmor profile setting Update apparmor_binprofiles.bbclass#155muraliselvaraj2020 wants to merge 2 commits into
Conversation
|
I have read the CLA Document and I hereby sign the CLA 1 out of 2 committers have signed the CLA. |
There was a problem hiding this comment.
Pull request overview
This PR updates the AppArmor rootfs post-processing flow to allow a vendor-provided AppArmor defaults file to override the generic defaults in the image rootfs prior to compiling AppArmor profiles.
Changes:
- Extend
ROOTFS_POSTPROCESS_COMMANDto run a new override step before profile compilation. - Add
override_apparmor_generic_defaults()to copy a vendor defaults file overapparmor_generic_defaultswhen present.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| ROOTFS_POSTPROCESS_COMMAND:append = " execute_aa_compile_std_profiles;" | ||
| ROOTFS_POSTPROCESS_COMMAND:append = " override_apparmor_generic_defaults; execute_aa_compile_std_profiles;" | ||
|
|
||
| override_apparmor_generic_defaults() { |
| if [ -f "${VENDOR_AA_DEFAULTS}" ]; then | ||
| bbnote "Overriding apparmor_generic_defaults with vendor apparmor_defaults" | ||
|
|
||
| cp -f "${VENDOR_AA_DEFAULTS}" "${GENERIC_AA_DEFAULTS}" |
No description provided.