#!/bin/sh set -e # Load configs CONFIG_FILE=/mnt/data/hassos.json # Read configs PROFILES_DIR="$(jq --raw-output '.apparmor // empty' ${CONFIG_FILE})" if [ -z "${PROFILES_DIR}" ]; then exit 0 fi PROFILES_DIR="/mnt/data/${PROFILES_DIR}" CACHE_DIR="${PROFILES_DIR}/cache" REMOVE_DIR="${PROFILES_DIR}/remove" # Check folder structure mkdir -p ${PROFILES_DIR} mkdir -p ${CACHE_DIR} mkdir -p ${REMOVE_DIR} # Load/Update exists/new profiles for profile in ${PROFILES_DIR}/*; do if [ ! -f ${profile} ]; then continue fi # Load Profile if ! apparmor_parser -r -W -L ${CACHE_DIR} ${profile}; then echo "[Error]: Can't load profile ${profile}" fi done # Cleanup old profiles for profile in ${REMOVE_DIR}/*; do if [ ! -f ${profile} ]; then continue fi # Unload Profile if apparmor_parser -R -W -L ${CACHE_DIR} ${profile}; then if rm ${profile}; then continue fi fi echo "[Error]: Can't remove profile ${profile}" done