blob: 9fe79b3acc41c64edca85325aa290abbdb64e9fa (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
{
lib,
stdenvNoCC,
fetchFromGitHub,
unstableGitUpdater,
}:
stdenvNoCC.mkDerivation {
pname = "roddhjav-apparmor-rules";
version = "0-unstable-2024-07-12";
src = fetchFromGitHub {
owner = "roddhjav";
repo = "apparmor.d";
rev = "bd1239b46a006d3cb227fc6fffcf95cf684e1ea2";
hash = "sha256-gVm3z7bKUQlIBP6Jdy6OIYhb4juQ663gMzV5aoPr+iA=";
};
dontConfigure = true;
dontBuild = true;
installPhase = ''
runHook preInstall
mkdir -p $out/etc/apparmor.d
cp -r apparmor.d/* $out/etc/apparmor.d
runHook postInstall
'';
passthru.updateScript = unstableGitUpdater { };
meta = {
homepage = "https://github.com/roddhjav/apparmor.d";
description = "Over 1500 AppArmor profiles aiming to confine most linux processes";
longDescription = ''
AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine
most Linux based applications and processes. Confines all system services, user services
and most desktop environments. Currently supported DEs are GNOME, KDE and XFCE (partial).
If your DE is not listed in https://github.com/roddhjav/apparmor.d
Do not use this, else it may break your system.
'';
license = lib.licenses.gpl2;
platforms = lib.platforms.linux;
maintainers = with lib.maintainers; [
johnrtitor
];
};
}
|