[Pkg-libvirt-commits] [libvirt] 05/06: Build with apparmor support
Guido Guenther
agx at moszumanska.debian.org
Thu Jan 9 08:32:40 UTC 2014
This is an automated email from the git hooks/post-receive script.
agx pushed a commit to annotated tag debian/1.2.1_rc1-1
in repository libvirt.
commit 3061b11ae107e9475b379d46b2f1fadb3458a1dc
Author: Guido Günther <agx at sigxcpu.org>
Date: Wed Jan 8 18:07:47 2014 +0100
Build with apparmor support
Note that this isn't enough to run with apparmor support since the
profiles will need more work but it makes testing this a lot simpler.
This is heavily based on a patch by Felix Geyer.
See: #725144
---
debian/control | 3 ++-
debian/libvirt-bin.install | 1 +
debian/rules | 8 ++++++--
3 files changed, 9 insertions(+), 3 deletions(-)
diff --git a/debian/control b/debian/control
index 155dee8..348b9f5 100644
--- a/debian/control
+++ b/debian/control
@@ -37,6 +37,7 @@ Build-Depends:
libsanlock-dev [linux-any],
libaudit-dev [linux-any],
libselinux1-dev (>= 2.0.82) [linux-any],
+ libapparmor-dev [linux-any],
systemtap-sdt-dev [amd64 armel armhf i386 ia64 powerpc s390],
# for --with-storage-sheepdog
sheepdog [linux-any],
@@ -76,7 +77,7 @@ Recommends: netcat-openbsd,
iproute,
parted,
pm-utils
-Suggests: policykit-1, radvd, auditd, systemtap, systemd
+Suggests: policykit-1, radvd, auditd, systemtap, systemd, apparmor
Breaks: avahi-daemon (<< 0.6.31-3~)
Description: programs for the libvirt library
Libvirt is a C toolkit to interact with the virtualization capabilities
diff --git a/debian/libvirt-bin.install b/debian/libvirt-bin.install
index 914cf93..a791717 100644
--- a/debian/libvirt-bin.install
+++ b/debian/libvirt-bin.install
@@ -2,6 +2,7 @@ usr/bin/*
usr/sbin/*
etc/libvirt/*
etc/sasl2/*
+etc/apparmor.d
usr/share/polkit-1
usr/lib/libvirt/libvirt*
usr/lib/libvirt/connection-driver
diff --git a/debian/rules b/debian/rules
index 039d35a..671ed12 100755
--- a/debian/rules
+++ b/debian/rules
@@ -30,6 +30,7 @@ ifneq (,$(findstring $(DEB_HOST_ARCH_OS), linux))
WITH_INIT_SCRIPT = --with-init-script=systemd
WITH_AUDIT = --with-audit
WITH_SELINUX = --with-selinux --with-secdriver-selinux --with-selinux-mount=/sys/fs/selinux
+ WITH_APPARMOR = --with-apparmor --with-secdriver-apparmor --with-apparmor-profiles
ifneq (,$(findstring $(DEB_HOST_ARCH), amd64 armel armhf i386 ia64 powerpc s390))
WITH_DTRACE = --with-dtrace
else
@@ -63,6 +64,7 @@ else
WITH_INIT_SCRIPT = --with-init-script=none
WITH_AUDIT = --without-audit
WITH_SELINUX = --without-selinux
+ WITH_APPARMOR = --without-apparmor
WITH_DTRACE = --without-dtrace
WITH_XEN = --without-xen
WITH_LIBXL = --without-libxl
@@ -91,6 +93,7 @@ DEB_CONFIGURE_EXTRA_ARGS := \
$(WITH_INIT_SCRIPT) \
$(WITH_NUMA) \
$(WITH_SELINUX) \
+ $(WITH_APPARMOR) \
--without-esx \
--without-phyp \
$(WITH_CAPNG) \
@@ -119,10 +122,11 @@ override_dh_auto_configure:
override_dh_auto_install:
dh_auto_install
# Add empty dirs so dh_install doesn't fail on kFreebsd until we have
- # Polkit/Systemd/systemtap support
+ # Polkit/Systemd/systemtap/apparmor support
mkdir -p debian/tmp/usr/share/polkit-1 \
debian/tmp/lib/systemd/system \
- debian/tmp/usr/share/systemtap
+ debian/tmp/usr/share/systemtap \
+ debian/tmp/etc/apparmor.d/
override_dh_auto_test:
export LD_PRELOAD=""; \
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-libvirt/libvirt.git
More information about the Pkg-libvirt-commits
mailing list