2023-09-25 01:06:07 +02:00
|
|
|
// apparmor.d - Full set of apparmor profiles
|
2024-02-07 00:16:21 +01:00
|
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
2023-09-25 01:06:07 +02:00
|
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
|
|
|
|
package aa
|
|
|
|
|
2024-04-23 22:26:09 +02:00
|
|
|
const tokPIVOTROOT = "pivot_root"
|
|
|
|
|
2023-09-25 01:06:07 +02:00
|
|
|
type PivotRoot struct {
|
2024-04-19 23:43:02 +02:00
|
|
|
RuleBase
|
2023-09-25 01:06:07 +02:00
|
|
|
Qualifier
|
|
|
|
OldRoot string
|
|
|
|
NewRoot string
|
|
|
|
TargetProfile string
|
|
|
|
}
|
|
|
|
|
2024-04-19 23:43:02 +02:00
|
|
|
func newPivotRootFromLog(log map[string]string) Rule {
|
2023-09-25 01:06:07 +02:00
|
|
|
return &PivotRoot{
|
2024-04-19 23:43:02 +02:00
|
|
|
RuleBase: newRuleFromLog(log),
|
2024-04-15 00:58:34 +02:00
|
|
|
Qualifier: newQualifierFromLog(log),
|
2023-11-27 20:21:43 +01:00
|
|
|
OldRoot: log["srcname"],
|
|
|
|
NewRoot: log["name"],
|
|
|
|
TargetProfile: "",
|
2023-09-25 01:06:07 +02:00
|
|
|
}
|
|
|
|
}
|
2023-09-25 01:09:11 +02:00
|
|
|
|
|
|
|
func (r *PivotRoot) Less(other any) bool {
|
|
|
|
o, _ := other.(*PivotRoot)
|
2024-04-15 00:58:34 +02:00
|
|
|
if r.OldRoot != o.OldRoot {
|
2023-09-25 01:09:11 +02:00
|
|
|
return r.OldRoot < o.OldRoot
|
|
|
|
}
|
2024-04-15 00:58:34 +02:00
|
|
|
if r.NewRoot != o.NewRoot {
|
|
|
|
return r.NewRoot < o.NewRoot
|
|
|
|
}
|
|
|
|
if r.TargetProfile != o.TargetProfile {
|
|
|
|
return r.TargetProfile < o.TargetProfile
|
|
|
|
}
|
2023-09-25 01:09:11 +02:00
|
|
|
return r.Qualifier.Less(o.Qualifier)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *PivotRoot) Equals(other any) bool {
|
|
|
|
o, _ := other.(*PivotRoot)
|
|
|
|
return r.OldRoot == o.OldRoot && r.NewRoot == o.NewRoot &&
|
|
|
|
r.TargetProfile == o.TargetProfile &&
|
|
|
|
r.Qualifier.Equals(o.Qualifier)
|
|
|
|
}
|
2024-04-23 22:26:09 +02:00
|
|
|
|
|
|
|
func (r *PivotRoot) String() string {
|
|
|
|
return renderTemplate(tokPIVOTROOT, r)
|
|
|
|
}
|