secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 11:12:29 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix(antirootkit): don't double-install <pkg>.service to /lib+/usr/lib (merged-usr dpkg collision) — let dh_installsystemd own it (ref #915)

Browse Source 
Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
This commit is contained in:
CyberMind-FR 2026-07-28 10:10:27 +02:00
parent 388b390370
commit ffba634d72
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
packages/secubox-antirootkit/debian/rules
View File

@ -17,15 +17,18 @@ override_dh_auto_install:
install -m 644 $(CURDIR)/nft/secubox-antiescape.nft \
$(CURDIR)/debian/secubox-antirootkit/usr/share/secubox-antirootkit/
# Install systemd units: FastAPI daemon, exec-watcher daemon, untrusted
# slice (top-level — NOT nested under system.slice, see the slice unit).
install -d $(CURDIR)/debian/secubox-antirootkit/lib/systemd/system
install -m 644 $(CURDIR)/debian/secubox-antirootkit.service \
$(CURDIR)/debian/secubox-antirootkit/lib/systemd/system/
# Install systemd units. NOTE: debian/secubox-antirootkit.service is
# auto-installed by dh_installsystemd (it is named debian/<pkg>.service) to
# /usr/lib/systemd/system — do NOT also install it manually to
# /lib/systemd/system: on merged-usr (bookworm) those aliased paths collide
# and dpkg fails ("unable to open .service.dpkg-new"). Only the two units
# under systemd/ (not <pkg>.service-named) need a manual install here.
# The untrusted slice is top-level (NOT nested under system.slice).
install -d $(CURDIR)/debian/secubox-antirootkit/usr/lib/systemd/system
install -m 644 $(CURDIR)/systemd/sbx-antirootkitd.service \
$(CURDIR)/debian/secubox-antirootkit/lib/systemd/system/
$(CURDIR)/debian/secubox-antirootkit/usr/lib/systemd/system/
install -m 644 $(CURDIR)/systemd/sbx-untrusted.slice \
$(CURDIR)/debian/secubox-antirootkit/lib/systemd/system/
$(CURDIR)/debian/secubox-antirootkit/usr/lib/systemd/system/
# Install scoped sudoers (secubox-antirootkit -> secubox-antirootkitctl,
# exact verbs only)