]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
apparmor: Allow version-specific bits in abstractions too
authorAndrea Bolognani <abologna@redhat.com>
Thu, 29 Jun 2023 09:45:35 +0000 (11:45 +0200)
committerAndrea Bolognani <abologna@redhat.com>
Mon, 3 Jul 2023 12:55:35 +0000 (14:55 +0200)
Compared to profiles, we only need a single preprocessing step
here, as there is no variable substitution happening.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
src/security/apparmor/libvirt-lxc.in [moved from src/security/apparmor/libvirt-lxc with 100% similarity]
src/security/apparmor/libvirt-qemu.in [moved from src/security/apparmor/libvirt-qemu with 100% similarity]
src/security/apparmor/meson.build

index c4745acdb9242a190d868422008bb3fb62c6df3d..8bc2405f880f0834cb68b0c4c6d4ecab54e8c9ea 100644 (file)
@@ -5,6 +5,11 @@ apparmor_gen_profiles = [
   'usr.sbin.virtxend',
 ]
 
+apparmor_gen_abstractions = [
+  'libvirt-qemu',
+  'libvirt-lxc',
+]
+
 apparmor_gen_profiles_conf = configuration_data({
   'sysconfdir': sysconfdir,
   'sbindir': sbindir,
@@ -56,10 +61,16 @@ foreach name : apparmor_gen_profiles
   )
 endforeach
 
-install_data(
-  [ 'libvirt-qemu', 'libvirt-lxc' ],
-  install_dir: apparmor_dir / 'abstractions',
-)
+foreach name : apparmor_gen_abstractions
+  configure_file(
+    input: '@0@.in'.format(name),
+    output: name,
+    command: apparmor_gen_cmd,
+    capture: true,
+    install: true,
+    install_dir: apparmor_dir / 'abstractions',
+  )
+endforeach
 
 install_data(
   [ 'TEMPLATE.qemu', 'TEMPLATE.lxc' ],