28 lines
835 B
Bash
28 lines
835 B
Bash
|
# vim: set ts=4 sw=4 et:
|
||
|
|
|
||
|
|
# AppArmor is not enabled in kernel, silently exit
|
||
|
|
[ ! -d /sys/kernel/security/apparmor ] && return
|
||
|
|
|
||
|
|
# Load config
|
||
|
|
[ -r /etc/default/apparmor ] && . /etc/default/apparmor
|
||
|
|
|
||
|
|
# Proceed to load profiles depending on user settings
|
||
|
|
msg "Loading AppArmor profiles..."
|
||
|
|
|
||
|
|
if [ -n "$APPARMOR" ]; then
|
||
|
|
if [ "$APPARMOR" != "complain" -a "$APPARMOR" != "enforce" ]; then
|
||
|
|
printf '! AppArmor set to %s - ignoring profiles\n' "$APPARMOR"
|
||
|
|
return
|
||
|
|
fi
|
||
|
|
|
||
|
|
[ "$APPARMOR" = "complain" ] && AACOMPLAIN="-C"
|
||
|
|
|
||
|
|
if [ -d /etc/apparmor.d -a -x /usr/bin/apparmor_parser ]; then
|
||
|
|
apparmor_parser -a $AACOMPLAIN $(find /etc/apparmor.d -maxdepth 1 -type f ! -name '*.new-*_*')
|
||
|
|
else
|
||
|
|
printf '! AppArmor installation problem - ensure you have installed apparmor package\n'
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
printf '! AppArmor disabled - ignoring profiles\n'
|
||
|
|
fi
|