Merge pull request #319286 from JohnRTitor/roddhjav-apparmor-rules

{

  lib,

  stdenvNoCC,

  fetchFromGitHub,

  unstableGitUpdater,

}:

stdenvNoCC.mkDerivation {

  pname = "roddhjav-apparmor-rules";

  version = "0-unstable-2024-06-11";

  src = fetchFromGitHub {

    owner = "roddhjav";

    repo = "apparmor.d";

    rev = "6d549b7c70415e884586c23a8a5d2448d89e543d";

    hash = "sha256-iHBIBOKOsagDwQRD8SjymEeM3xTQhtTDeL8YvqhHtPQ=";

  };

  dontConfigure = true;

  dontBuild = true;

  installPhase = ''

    runHook preInstall

    mkdir -p $out/etc/apparmor.d

    cp -r apparmor.d/* $out/etc/apparmor.d

    runHook postInstall

  '';

  passthru.updateScript = unstableGitUpdater { };

  meta = {

    homepage = "https://github.com/roddhjav/apparmor.d";

    description = "Over 1500 AppArmor profiles aiming to confine most linux processes";

    longDescription = ''

      AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine

      most Linux based applications and processes. Confines all system services, user services

      and most desktop environments. Currently supported DEs are GNOME, KDE and XFCE (partial).

      If your DE is not listed in https://github.com/roddhjav/apparmor.d

      Do not use this, else it may break your system.

    '';

    license = lib.licenses.gpl2;

    platforms = lib.platforms.linux;

    maintainers = with lib.maintainers; [

      johnrtitor

    ];

  };

}