enable apparmor support by default in update_deb.sh (#3450)

* enable apparmor support by default in update_deb.sh

* Add fix for Debian bug 916920

This should bring the script in sync with packages installed from PPA.

1 files changed, 10 insertions, 2 deletions

diff --git a/contrib/update_deb.sh b/contrib/update_deb.sh
index d417a09ea..1fceca788 100755
--- a/contrib/update_deb.sh
+++ b/contrib/update_deb.sh
@@ -6,11 +6,19 @@
 # Purpose: Fetch, compile, and install firejail from GitHub source. For
 # Debian-based distros only (Ubuntu, Mint, etc).
 set -e
+
 git clone --depth=1 https://github.com/netblue30/firejail.git
 cd firejail
-./configure --prefix=/usr
+./configure --enable-apparmor --prefix=/usr
+
+# Fix https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916920
+sed -i \
+    -e "s/# cgroup .*/cgroup no/" \
+    -e "s/# restricted-network .*/restricted-network yes/" \
+    etc/firejail.config
+
 make deb
 sudo dpkg -i firejail*.deb
-echo "Firejail was updated!"
+echo "Firejail updated."
 cd ..
 rm -rf firejail