Confine I2P with AppArmor.

Bugfix on 2.0~beta1. Will-fix: #10925

Confine I2P with AppArmor.
Bugfix on 2.0~beta1. Will-fix: #10925
513bf02d · intrigeri · 2aea3503 · 513bf02d
Commit 513bf02d authored Jan 18, 2016 by intrigeri
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

config/chroot_local-includes/lib/systemd/system/i2p.service.d/AppArmor.conf ...l-includes/lib/systemd/system/i2p.service.d/AppArmor.conf +5 -0

No files found.
--- a/config/chroot_local-includes/lib/systemd/system/i2p.service.d/AppArmor.conf
+++ b/config/chroot_local-includes/lib/systemd/system/i2p.service.d/AppArmor.conf
+[Service]
+# XXX:Stretch: on Jessie, AppArmorProfile=system_i2p is a no-op, since
+# AppArmor support was enabled in Debian's systemd 218-4 (#10925).
+ExecStart=
+ExecStart=/usr/sbin/aa-exec --profile=system_i2p -- /usr/sbin/wrapper "$I2P_ARGS"