Revert "Revert "apparmor: fix and improve the service""

This reverts commit 420f89ceb2.
2020-10-18 15:36:24 +02:00
parent d239bc3643
commit 05d334cfe2
20 changed files with 805 additions and 164 deletions
--- a/nixos/modules/config/malloc.nix
+++ b/nixos/modules/config/malloc.nix
@@ -87,5 +87,12 @@ in
    environment.etc."ld-nix.so.preload".text = ''
      ${providerLibPath}
    '';
+    security.apparmor.includes = {
+      "abstractions/base" = ''
+        r /etc/ld-nix.so.preload,
+        r ${config.environment.etc."ld-nix.so.preload".source},
+        mr ${providerLibPath},
+      '';
+    };
  };
 }