pipewire: run with the System::Pipewire smack label

[AGL/meta-agl-devel.git] / meta-pipewire / recipes-multimedia / pipewire / pipewire_git.bbappend

diff --git a/meta-pipewire/recipes-multimedia/pipewire/pipewire_git.bbappend b/meta-pipewire/recipes-multimedia/pipewire/pipewire_git.bbappend
index 31253d0..8a0b074 100644 (file)
--- a/meta-pipewire/recipes-multimedia/pipewire/pipewire_git.bbappend
+++ b/meta-pipewire/recipes-multimedia/pipewire/pipewire_git.bbappend
@@ -1,11 +1,12 @@
 SRC_URI += "\
     file://pipewire@.service \
     file://pipewire@.socket \
+    file://smack-pipewire \
     "
 
 do_install_append() {
     if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
-        # remote the original user unit files shipped by pipewire
+        # remove the original user unit files shipped by pipewire
         rm -rf ${D}${systemd_unitdir}
 
         # install our own system-level templates
@@ -16,7 +17,14 @@ do_install_append() {
         # enable the socket to start together with afm-user-session
         mkdir -p ${D}${systemd_system_unitdir}/afm-user-session@.target.wants
         ln -sf ../pipewire@.socket ${D}${systemd_system_unitdir}/afm-user-session@.target.wants/pipewire@.socket
+
+        # install smack rules
+        mkdir -p ${D}${sysconfdir}/smack/accesses.d
+        install -m 0644 ${WORKDIR}/smack-pipewire ${D}${sysconfdir}/smack/accesses.d/pipewire
     fi
 }
 
-FILES_${PN} += "${systemd_system_unitdir}/*"
+FILES_${PN} += "\
+    ${systemd_system_unitdir}/* \
+    ${sysconfdir}/smack/accesses.d/* \
+"