646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
48 lines
1.3 KiB
Nix
48 lines
1.3 KiB
Nix
{
|
|
lib,
|
|
stdenvNoCC,
|
|
fetchFromGitHub,
|
|
unstableGitUpdater,
|
|
}:
|
|
|
|
stdenvNoCC.mkDerivation {
|
|
pname = "roddhjav-apparmor-rules";
|
|
version = "0-unstable-2025-10-05";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "roddhjav";
|
|
repo = "apparmor.d";
|
|
rev = "cdc782ce0836f3d5566fafb93cb43cbae21b3f58";
|
|
hash = "sha256-uXa78bFhCYkMCOTdNnQJLu7Yz3do+hZBUG3TIZWv544=";
|
|
};
|
|
|
|
dontConfigure = true;
|
|
dontBuild = true;
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
mkdir -p $out/etc/apparmor.d
|
|
cp -r apparmor.d/* $out/etc/apparmor.d
|
|
runHook postInstall
|
|
'';
|
|
|
|
passthru.updateScript = unstableGitUpdater { };
|
|
|
|
meta = {
|
|
homepage = "https://github.com/roddhjav/apparmor.d";
|
|
description = "Over 1500 AppArmor profiles aiming to confine most linux processes";
|
|
longDescription = ''
|
|
AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine
|
|
most Linux based applications and processes. Confines all system services, user services
|
|
and most desktop environments. Currently supported DEs are GNOME, KDE and XFCE (partial).
|
|
If your DE is not listed in https://github.com/roddhjav/apparmor.d
|
|
Do not use this, else it may break your system.
|
|
'';
|
|
license = lib.licenses.gpl2;
|
|
platforms = lib.platforms.linux;
|
|
maintainers = with lib.maintainers; [
|
|
johnrtitor
|
|
];
|
|
};
|
|
}
|