extras: adjust 'localstatedir' value for the AppArmor profile

Comments in the shipped AppArmor profile state that fwknopd is assumed
to be built with 'localstatedir=/var', which is misleading for several
reasons:

* AppArmor profile assumes that fwknopd's pidfile and digest cache are
under /run/fwknop by the looks of it, i.e. 'localstatedir' is '/run'.

* By default these files are placed under /var/run/fwknop. Thus this
profile implicitly relies on the existence of '/var/run -> /run' symlink
and won't work otherwise when 'localstatedir' is '/var'

Since GitHub PR#152 was merged, 'localstatedir' can be simply set to
'/run' for AppArmor users to avoid this confusion. This changeset does
it.

If anyone had it working before, they should have it working now as the
shipped AppArmor profile required /run existence before as well.
This commit is contained in:
Ilya Tumaykin
2015-04-20 14:32:37 +03:00
parent b2109f5630
commit f757b4ebda
2 changed files with 2 additions and 2 deletions
+1 -1
View File
@@ -7,7 +7,7 @@
#
if [ -x ./configure ]; then
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var $@
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/run $@
else
echo "[*] Execute from the fwknop top level sources directory"
fi
+1 -1
View File
@@ -1,6 +1,6 @@
# Last Modified: Sun Aug 18 22:54:57 2013
# Assumes fwknopd was built with:
# './configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var'
# './configure --prefix=/usr --sysconfdir=/etc --localstatedir=/run'
#include <tunables/global>
/usr/sbin/fwknopd {