casper: new method to enable abrowser apparmor profile

This commit is contained in:
Ruben Rodriguez 2025-05-14 15:35:12 -04:00
parent ff879f1520
commit 2461092a1a
2 changed files with 9 additions and 4 deletions

View file

@ -20,6 +20,11 @@ esac
log_begin_msg "$DESCRIPTION"
chroot /root /sbin/apparmor_parser -r /etc/apparmor.d/abrowser
cat << EOF > /root/etc/rc.local
#!/bin/sh
# Enable apparmor profile during live session to allow Abrowser to create user namespaces
[ -d /rofs ] && apparmor_parser -a /etc/apparmor.d/abrowser
EOF
chmod 755 /root/etc/rc.local
log_end_msg

View file

@ -18,7 +18,7 @@
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
#
VERSION=21
VERSION=22
. ./config
@ -44,8 +44,8 @@ sed "s/head -n1/sed -n 1p/" -i scripts/casper-functions
patch --no-backup-if-mismatch -p1 < $DATA/set_trisquel_iso_suggestion.patch
# Enable abrowser apparmor profile
cp $DATA/35-apparmor-abrowser scripts/casper-bottom
chmod 755 scripts/casper-bottom/35-apparmor-abrowser
cp $DATA/35apparmor_abrowser scripts/casper-bottom
chmod 755 scripts/casper-bottom/35apparmor_abrowser
changelog "Compiled for Trisquel"