Merge pull request #118 from freedomofpress/384-svs-disp-apparmor-pro…

…files

Install apparmor profiles in sd-svs-disp

securedrop-workstation-svs-disp/debian/changelog-buster

@@ -1,3 +1,9 @@
+securedrop-workstation-svs-disp (0.1.4+buster) unstable; urgency=medium
+
+  * Add apparmor-utils, apparmor-profiles and apparmor-profiles-extra to list of dependencies.
+
+ -- SecureDrop Team <[email protected]>  Fri, 20 Dec 2019 10:24:05 -0500
+
 securedrop-workstation-svs-disp (0.1.3+buster) unstable; urgency=medium
 
   * Provides Debian 10 (Buster) compatibility.

securedrop-workstation-svs-disp/debian/control

@@ -8,5 +8,5 @@ Homepage: https://github.com/freedomofpress/securedrop-debian-packaging
 
 Package: securedrop-workstation-svs-disp
 Architecture: all
-Depends: securedrop-workstation-config,securedrop-workstation-grsec,audacious,eog,file-roller,totem
+Depends: securedrop-workstation-config,securedrop-workstation-grsec,audacious,eog,file-roller,totem,apparmor-utils,apparmor-profiles,apparmor-profiles-extra
 Description: This is the SecureDrop workstation SVS Disposable VM template configuration package. This package provides dependencies and configuration for the Qubes SecureDrop workstation sd-svs-disp Template VM.

securedrop-workstation-svs-disp/debian/postinst

@@ -21,7 +21,7 @@ set -e
 case "$1" in
     configure)
     # move pax flags and restart paxctld
-    mv /etc/paxctld.conf.svsdisp /etc/paxctld.conf
+    mv /opt/paxctld.conf.svsdisp /etc/paxctld.conf
     systemctl restart paxctld
     ;;
 

securedrop-workstation-svs-disp/debian/securedrop-workstation-svs-disp.install

@@ -1,2 +1,2 @@
 mimeapps.list usr/share/applications/
-paxctld.conf.svsdisp etc/
+paxctld.conf.svsdisp opt/