Lubuntu/livecd-rootfs
3
0
Fork 0
mirror of https://git.launchpad.net/livecd-rootfs synced 2025-02-23 03:11:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

apparmor: mount more up-to-date apparmor features in the chroot.

Browse Source
This commit is contained in:
Dimitri John Ledkov 2020-07-17 23:43:19 +01:00
parent 37be000f39
commit a14a31b751
No known key found for this signature in database
GPG Key ID: 9B8EC849D5EF70ED
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
live-build/auto/build
View File

@ -121,6 +121,8 @@ preinstall_snaps() {
mount --rbind /dev chroot/dev
mount --rbind /sys chroot/sys
mount --bind /proc chroot/proc
# Provide more up to date apparmor features, matching target kernel
mount -o bind /usr/share/livecd-rootfs/live-build/apparmor/generic chroot/sys/kernel/security/apparmor/features
snap_validate_seed chroot

2
live-build/functions
View File

@ -99,6 +99,8 @@ setup_mountpoint() {
mount proc-live -t proc "$mountpoint/proc"
mount sysfs-live -t sysfs "$mountpoint/sys"
mount securityfs -t securityfs "$mountpoint/sys/kernel/security"
# Provide more up to date apparmor features, matching target kernel
mount -o bind /usr/share/livecd-rootfs/live-build/apparmor/generic "$mountpoint/sys/kernel/security/apparmor/features/"
mount -t tmpfs none "$mountpoint/tmp"
mount -t tmpfs none "$mountpoint/var/lib/apt"
mount -t tmpfs none "$mountpoint/var/cache/apt"