blob: cdf4eda2a2516ff7ac1b59c060d481a2f39bc983 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
#!/usr/bin/make -f
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
# Currently, we enable confinement for Ubuntu only, not for derivatives,
# because derivatives may have different kernels that don't support all the
# required confinement features and we don't to mislead anyone about the
# security of the system. Discuss a proper approach to this for downstreams
# if and when they approach us
ifeq ($(shell dpkg-vendor --query Vendor),Ubuntu)
VENDOR_ARGS=--enable-nvidia-ubuntu
else
VENDOR_ARGS=--disable-apparmor
endif
%:
dh $@ --with autoreconf
override_dh_auto_configure:
./configure --prefix=/usr --libexecdir=/usr/lib/snapd $(VENDOR_ARGS)
override_dh_fixperms:
dh_fixperms -Xusr/lib/snapd/snap-confine
override_dh_installdeb:
dh_apparmor --profile-name=usr.lib.snapd.snap-confine -psnap-confine
dh_installdeb
|
