diff --git a/profiles/Makefile b/profiles/Makefile index a388339c3..f6814288e 100644 --- a/profiles/Makefile +++ b/profiles/Makefile @@ -119,7 +119,7 @@ CHECK_PROFILES=$(filter-out ${IGNORE_FILES} ${SUBDIRS}, $(wildcard ${PROFILES_SO CHECK_ABSTRACTIONS=$(shell find ${ABSTRACTIONS_SOURCE} -type f -print) .PHONY: check -check: check-parser check-logprof check-abstractions.d check-extras +check: check-parser check-logprof check-abstractions.d check-tunables.d check-extras .PHONY: check-parser check-parser: test-dependencies local @@ -152,6 +152,15 @@ check-abstractions.d: grep -q "^ include if exists $$" $$file || { echo "$$file does not contain 'include if exists '"; exit 1; } ; \ done +.PHONY: check-tunables.d +check-tunables.d: + @echo "*** Checking if all tunables (with a few exceptions) contain include if exists " + $(Q)cd apparmor.d/tunables && for file in * ; do \ + test -d "$$file" && continue ; \ + test "$$file" = 'sys' && continue ; \ + grep -q "^include if exists $$" $$file || { echo "$$file does not contain 'include if exists '"; exit 1; } ; \ + done + .PHONY: check-extras check-extras: @echo "*** Checking if all extra profiles contain include if exists "