Skip to content

Enable AppArmor in NixOS module#2

Draft
io12 wants to merge 21 commits intomainfrom
enable-apparmor
Draft

Enable AppArmor in NixOS module#2
io12 wants to merge 21 commits intomainfrom
enable-apparmor

Conversation

@io12
Copy link
Copy Markdown
Member

@io12 io12 commented Nov 25, 2023

No description provided.

@io12 io12 marked this pull request as draft November 25, 2023 09:32
@io12
Copy link
Copy Markdown
Member Author

io12 commented Nov 25, 2023

The current issue is for some reason snap-confine can't read libudev even though the AppArmor profile was patched to have this rule.

/{,usr/,/nix/store/aglgni7yskphxmpdkc8yvah61drjfkqk-systemd-minimal-libs-254.3/}lib{,32,64,x32}/{,@{multiarch}/}libudev.so* mr,

@io12
Copy link
Copy Markdown
Member Author

io12 commented Nov 26, 2023

The current issue is for some reason snap-confine can't read libudev even though the AppArmor profile was patched to have this rule.

/{,usr/,/nix/store/aglgni7yskphxmpdkc8yvah61drjfkqk-systemd-minimal-libs-254.3/}lib{,32,64,x32}/{,@{multiarch}/}libudev.so* mr,

Making a new rule instead of extending the old one with the {a,b} expansion seems to work.

@io12 io12 force-pushed the enable-apparmor branch from 2274a72 to 173b8af Compare April 25, 2024 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant