Gecko [ paroquia-rio-de-mouro.pt ]

Name	Size	Permission	Date
acpid.conf	338 B	-rw-r--r--	2016-04-09 00:05
apparmor.conf	3.62 KB	-rw-r--r--	2017-03-03 23:52
apport.conf	1.7 KB	-rw-r--r--	2025-07-11 17:07
cloud-config.conf	236 B	-rw-r--r--	2016-09-15 15:32
cloud-final.conf	297 B	-rw-r--r--	2016-09-15 15:32
cloud-init-blocknet.conf	2.5 KB	-rw-r--r--	2016-09-15 15:32
cloud-init-container.conf	1.98 KB	-rw-r--r--	2016-09-15 15:32
cloud-init-local.conf	379 B	-rw-r--r--	2016-09-15 15:32
cloud-init-nonet.conf	1.86 KB	-rw-r--r--	2016-09-15 15:32
cloud-init.conf	202 B	-rw-r--r--	2016-09-15 15:32
cloud-log-shutdown.conf	562 B	-rw-r--r--	2016-09-15 15:32
console-font.conf	250 B	-rw-r--r--	2016-04-04 19:41
console-setup.conf	509 B	-rw-r--r--	2016-04-04 19:41
cron.conf	297 B	-rw-r--r--	2016-04-05 23:59
cryptdisks-udev.conf	412 B	-rw-r--r--	2015-03-28 21:38
cryptdisks.conf	1.48 KB	-rw-r--r--	2015-03-28 21:38
dbus.conf	482 B	-rw-r--r--	2015-09-01 18:31
dovecot.conf	1.08 KB	-rw-r--r--	2016-03-21 20:30
ephemeral-disk-warning.conf	1.87 KB	-rw-r--r--	2016-09-20 19:54
friendly-recovery.conf	1.22 KB	-rw-r--r--	2015-06-01 15:19
hostname.conf	284 B	-rw-r--r--	2013-07-23 11:25
hostname.sh.conf	300 B	-rw-r--r--	2014-05-21 16:59
hv-fcopy-daemon.conf	674 B	-rw-r--r--	2016-10-26 21:39
hv-kvp-daemon.conf	662 B	-rw-r--r--	2016-10-26 21:39
hv-vss-daemon.conf	665 B	-rw-r--r--	2016-10-26 21:39
hwclock-save.conf	561 B	-rw-r--r--	2016-03-14 10:08
hwclock.conf	674 B	-rw-r--r--	2016-03-14 10:08
hwclock.sh.conf	109 B	-rw-r--r--	2016-03-14 10:08
irqbalance.conf	597 B	-rw-r--r--	2016-04-11 19:39
kmod.conf	689 B	-rw-r--r--	2015-08-20 13:41
lxcfs.conf	540 B	-rw-r--r--	2016-10-13 16:03
lxd.conf	813 B	-rw-r--r--	2016-10-13 16:04
mysql.conf	1.72 KB	-rw-r--r--	2016-07-11 15:36
network-conf-ethX.conf	696 B	-rw-r--r--	2016-11-15 23:12
network-interface-container.conf	530 B	-rw-r--r--	2015-06-02 09:32
network-interface-security.conf	1.71 KB	-rw-r--r--	2015-06-02 09:32
network-interface.conf	933 B	-rw-r--r--	2015-06-02 09:32
networking.conf	2.43 KB	-rw-r--r--	2015-06-02 09:32
passwd.conf	568 B	-rw-r--r--	2016-02-01 21:35
pollinate.conf	264 B	-rw-r--r--	2016-09-28 01:19
procps-instance.conf	363 B	-rw-r--r--	2014-06-05 16:27
procps.conf	119 B	-rw-r--r--	2014-06-05 17:06
resolvconf.conf	457 B	-rw-r--r--	2015-06-03 22:58
rsyslog.conf	426 B	-rw-r--r--	2015-12-02 17:23
setvtrgb.conf	230 B	-rw-r--r--	2016-04-04 19:41
ssh.conf	641 B	-rw-r--r--	2016-04-28 02:46
thermald.conf	360 B	-rw-r--r--	2016-06-01 14:42
ttyS0.conf	628 B	-rw-r--r--	2016-11-15 15:19
udev.conf	337 B	-rw-r--r--	2016-04-12 12:06
udevmonitor.conf	360 B	-rw-r--r--	2016-04-12 12:06
udevtrigger.conf	352 B	-rw-r--r--	2016-04-12 12:06
ufw.conf	473 B	-rw-r--r--	2014-08-07 14:58
ureadahead-other.conf	683 B	-rw-r--r--	2015-02-24 10:35
ureadahead.conf.disabled	889 B	-rw-r--r--	2015-02-24 10:35
walinuxagent.conf	481 B	-rw-r--r--	2016-09-20 19:54

Rename

description "Pre-cache and pre-load apparmor profiles"
author "Dimitri John Ledkov <xnox@ubuntu.com> and Jamie Strandboge <jamie@ubuntu.com>"

task

start on starting rc-sysinit

script
    [ -d /rofs/etc/apparmor.d ]  && exit 0 # do not load on liveCD
    [ -d /sys/module/apparmor ]  || exit 0 # do not load without AppArmor
    [ -x /sbin/apparmor_parser ] || exit 0 # do not load without parser

. /lib/apparmor/functions

systemd-detect-virt --quiet --container && ! is_container_with_internal_policy && exit 0 || true

# Need securityfs for any mode
    if [ ! -d /sys/kernel/security/apparmor ]; then
        if cut -d" " -f2,3 /proc/mounts | grep -q "^/sys/kernel/security securityfs"'$' ; then
            exit 0
        else
            mount -t securityfs none /sys/kernel/security || exit 0
        fi
    fi

[ -w /sys/kernel/security/apparmor/.load ] || exit 0

apparmor_was_updated=0
    if ! compare_previous_version ; then
        # On snappy flavors, if the current and previous versions are
        # different then clear the system cache. snappy will handle
        # "$PROFILES_CACHE_VAR" itself  (on Touch flavors
        # compare_previous_version  always returns '0' since snappy
        # isn't available).
        clear_cache_system
        apparmor_was_updated=1
    elif ! compare_and_save_debsums apparmor ; then
        # If the system policy has been updated since the last time we
        # ran, clear the cache to prevent potentially stale binary
        # cache files after an Ubuntu image based upgrade (LP:
        # #1350673). This can be removed once all system image flavors
        # move to snappy (on snappy systems compare_and_save_debsums
        # always returns '0' since /var/lib/dpkg doesn't exist).
        clear_cache
        apparmor_was_updated=1
    fi

if [ -x /usr/bin/aa-clickhook ] || [ -x /usr/bin/aa-profile-hook ] ; then
        # If packages for system policy that affect click packages have
        # been updated since the last time we ran, run aa-clickhook -f
        force_clickhook=0
        force_profile_hook=0
        if ! compare_and_save_debsums apparmor-easyprof-ubuntu ; then
            force_clickhook=1
        fi
        if ! compare_and_save_debsums apparmor-easyprof-ubuntu-snappy ; then
            force_clickhook=1
        fi
        if ! compare_and_save_debsums click-apparmor ; then
            force_clickhook=1
            force_profile_hook=1
        fi
        if [ -x /usr/bin/aa-clickhook ] && ([ $force_clickhook -eq 1 ] || [ $apparmor_was_updated -eq 1 ]) ; then
            aa-clickhook -f
        fi
        if [ -x /usr/bin/aa-profile-hook ] && ([ $force_profile_hook -eq 1 ] || [ $apparmor_was_updated -eq 1 ]) ; then
            aa-profile-hook -f
        fi
    fi

if [ "$ACTION" = "teardown" ]; then
        running_profile_names | while read profile; do
            unload_profile "$profile"
        done
        exit 0
    fi

if [ "$ACTION" = "clear" ]; then
        clear_cache
        exit 0
    fi

if [ "$ACTION" = "reload" ] || [ "$ACTION" = "force-reload" ]; then
        clear_cache
        load_configured_profiles
        exit 0
    fi

# Note: if apparmor-easyprof-ubuntu md5sums didn't match up above,
    # aa-clickhook will have already compiled the policy, generated the cache
    # files and loaded them into the kernel by this point, so reloading click
    # policy from cache, while fairly fast (<2 seconds for 250 profiles on
    # armhf), is redundant. Fixing this would complicate the logic quite a bit
    # and it wouldn't improve the (by far) common case (ie, when
    # 'aa-clickhook -f' is not run).
    load_configured_profiles
end script