Apparmor: check that we are running an AppArmor-enabled kernel.

This commit is contained in:
Evgeny Egorochkin 2013-05-10 16:07:56 +03:00
parent 44eb1bac65
commit a9e4eca8bf

View File

@ -35,6 +35,11 @@ AppArmor.
config = mkIf (cfg.enable) {
assertions = [ { assertion = config.boot.kernelPackages.kernel.features ? apparmor
&& config.boot.kernelPackages.kernel.features.apparmor;
message = "AppArmor is enabled, but the kernel doesn't have AppArmor support"; }
];
jobs.apparmor =
{ startOn = "startup";