2024-03-25 23:38:01 +01:00
|
|
|
// apparmor.d - Full set of apparmor profiles
|
|
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
|
|
|
|
package cfg
|
|
|
|
|
2024-04-28 01:36:16 +02:00
|
|
|
import "github.com/roddhjav/apparmor.d/pkg/paths"
|
2024-03-25 23:38:01 +01:00
|
|
|
|
|
|
|
var (
|
|
|
|
// Root is the root directory for the build
|
|
|
|
Root *paths.Path = paths.New(".build")
|
|
|
|
|
|
|
|
// RootApparmord is the final built apparmor.d directory
|
|
|
|
RootApparmord *paths.Path = Root.Join("apparmor.d")
|
|
|
|
|
|
|
|
// DistDir is the directory where the distribution specific files are stored
|
|
|
|
DistDir *paths.Path = paths.New("dists")
|
|
|
|
|
|
|
|
// FlagDir is the directory where the flags are stored
|
|
|
|
FlagDir *paths.Path = DistDir.Join("flags")
|
|
|
|
|
2024-03-26 19:05:55 +01:00
|
|
|
// IgnoreDir is the directory where the ignore files are stored
|
|
|
|
IgnoreDir *paths.Path = DistDir.Join("ignore")
|
|
|
|
|
2024-03-25 23:38:01 +01:00
|
|
|
// SystemdDir is the directory where the systemd drop-in files are stored
|
|
|
|
SystemdDir *paths.Path = paths.New("systemd")
|
|
|
|
|
2024-03-26 19:05:55 +01:00
|
|
|
// DebianDir is the directory where the debian specific files are stored
|
2024-03-27 17:26:01 +01:00
|
|
|
DebianDir *paths.Path = paths.New("debian")
|
2024-03-26 19:05:55 +01:00
|
|
|
|
2024-06-04 20:52:06 +02:00
|
|
|
// AppArmor 4.0 contains several profiles that allow userns and are otherwise
|
|
|
|
// unconfined. Overwriter disables upstream profile in favor of (better) apparmor.d
|
|
|
|
// counterpart
|
|
|
|
Overwrite Overwriter = false
|
|
|
|
|
2024-06-04 20:55:53 +02:00
|
|
|
// DebianHide is the path to the debian/apparmor.d.hide file
|
|
|
|
DebianHide = DebianHider{path: DebianDir.Join("apparmor.d.hide")}
|
2024-03-26 19:05:55 +01:00
|
|
|
|
|
|
|
Ignore = Ignorer{}
|
|
|
|
Flags = Flagger{}
|
2024-03-25 23:38:01 +01:00
|
|
|
)
|