Apparmor: add local configuration

3 files changed, 4 insertions, 0 deletions

diff --git a/Makefile.in b/Makefile.in
index dabd9aa15..34a9eb856 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -128,6 +128,8 @@ ifeq ($(HAVE_APPARMOR),-DHAVE_APPARMOR)
         # install apparmor profile
         sh -c "if [ ! -d $(DESTDIR)/$(sysconfdir)/apparmor.d ]; then install -d -m 755 $(DESTDIR)/$(sysconfdir)/apparmor.d; fi;"
         install -c -m 0644 etc/firejail-default $(DESTDIR)/$(sysconfdir)/apparmor.d/.
+        sh -c "if [ ! -d $(DESTDIR)/$(sysconfdir)/apparmor.d/local ]; then install -d -m 755 $(DESTDIR)/$(sysconfdir)/apparmor.d/local; fi;"
+        install -c -m 0644 etc/firejail-local $(DESTDIR)/$(sysconfdir)/apparmor.d/local/.
 endif
         # man pages
         install -m 0755 -d $(DESTDIR)/$(mandir)/man1
diff --git a/etc/firejail-default b/etc/firejail-default
index 092fcbbcc..619e8a6ec 100644
--- a/etc/firejail-default
+++ b/etc/firejail-default
@@ -154,4 +154,5 @@ remount,
 umount,
 pivot_root,
 
+#include <local/firejail-local>
 }
diff --git a/etc/firejail-local b/etc/firejail-local
new file mode 100644
index 000000000..cddf44f13
--- /dev/null
+++ b/etc/firejail-local
@@ -0,0 +1 @@
+# Site-specific additions and overrides for 'firejail-default'