#!/bin/sh set -e PROFILES_DIR="/mnt/data/supervisor/apparmor" CACHE_DIR="${PROFILES_DIR}/cache" REMOVE_DIR="${PROFILES_DIR}/remove" # Check folder structure mkdir -p "${PROFILES_DIR}" mkdir -p "${CACHE_DIR}" mkdir -p "${REMOVE_DIR}" # Load/Update exists/new profiles for profile in "${PROFILES_DIR}"/*; do if [ ! -f "${profile}" ]; then continue fi # Load Profile if ! apparmor_parser -r -W -L "${CACHE_DIR}" "${profile}"; then echo "[Error]: Can't load profile ${profile}" fi done # Cleanup old profiles for profile in "${REMOVE_DIR}"/*; do if [ ! -f "${profile}" ]; then continue fi # Unload Profile if apparmor_parser -R -W -L "${CACHE_DIR}" "${profile}"; then if rm "${profile}"; then continue fi fi echo "[Error]: Can't remove profile ${profile}" done