From 587fd2dad49d8af3f31d06e29ff43c986d6f35c4 Mon Sep 17 00:00:00 2001 From: Noé Lopez Date: Mon, 8 Dec 2025 16:39:11 +0100 Subject: etc: Add AppArmor profile for the daemon. * .gitignore: Add etc/apparmor.d/tunables/guix. * Makefile.am (nodist_apparmor_profile_DATA) (nodist_apparmor_profile_tunables_DATA): Define it. * configure.ac: Generate etc/apparmor.d/tunables/guix. Add --with-apparmor-profile-dir option. * etc/apparmor.d/guix-daemon: New file. * etc/apparmor.d/tunables/guix.in: New file. * doc/guix.texi: Document AppArmor profiles. * gnu/packages/package-management.scm (guix): Add future changes commented. Change-Id: Iac7df9d642383cc46a2d450c3badef31199ab041 Signed-off-by: Rutherther --- gnu/packages/package-management.scm | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'gnu') diff --git a/gnu/packages/package-management.scm b/gnu/packages/package-management.scm index f04bd5efd9..eadaea4967 100644 --- a/gnu/packages/package-management.scm +++ b/gnu/packages/package-management.scm @@ -234,6 +234,10 @@ (string-append "--with-bash-completion-dir=" (assoc-ref %outputs "out") "/etc/bash_completion.d") + ;; TODO: Uncomment after guix is updated. + ;; (string-append "--with-apparmor-profile-dir=" + ;; (assoc-ref %outputs "out") + ;; "/etc/apparmor.d") ;; Set 'DOT_USER_PROGRAM' to the empty string so ;; we don't keep a reference to Graphviz, whose -- cgit v1.3