nixos/pam: filter include/substack paths from apparmor mr rules (#511479)

2026-04-19 18:35:19 +00:00
parent 5aded1111c 9d5a303cfb
commit 70bcfffcb1
1 changed files with 7 additions and 0 deletions
@@ -2636,6 +2636,13 @@ in
          (lib.concatMap lib.attrValues)
          (lib.concatMap lib.attrValues)
          (lib.filter (rule: rule.enable))
+          (lib.filter (
+            rule:
+            !builtins.elem rule.control [
+              "include"
+              "substack"
+            ]
+          ))
          (lib.catAttrs "modulePath")
          (map (
            modulePath: