Revert "Revert "apparmor: fix and improve the service""

This reverts commit 420f89ceb2.
2021-04-23 07:17:55 +02:00
parent d239bc3643
commit 05d334cfe2
20 changed files with 805 additions and 164 deletions
@@ -171,6 +171,14 @@ in
      export PATH="${wrapperDir}:$PATH"
    '';

+    security.apparmor.includes."nixos/security.wrappers" = ''
+      include "${pkgs.apparmorRulesFromClosure { name="security.wrappers"; } [
+        securityWrapper
+        pkgs.stdenv.cc.cc
+        pkgs.stdenv.cc.libc
+      ]}"
+    '';
+
    ###### setcap activation script
    system.activationScripts.wrappers =
      lib.stringAfter [ "specialfs" "users" ]