2023-09-25 01:06:07 +02:00
|
|
|
// apparmor.d - Full set of apparmor profiles
|
2024-02-07 00:16:21 +01:00
|
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
2023-09-25 01:06:07 +02:00
|
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
|
|
|
|
package aa
|
|
|
|
|
2024-04-23 22:26:09 +02:00
|
|
|
const tokPTRACE = "ptrace"
|
|
|
|
|
2023-09-25 01:06:07 +02:00
|
|
|
type Ptrace struct {
|
2024-04-19 23:43:02 +02:00
|
|
|
RuleBase
|
2023-09-25 01:06:07 +02:00
|
|
|
Qualifier
|
2024-04-23 22:17:25 +02:00
|
|
|
Access []string
|
2023-09-25 01:06:07 +02:00
|
|
|
Peer string
|
|
|
|
}
|
|
|
|
|
2024-04-19 23:43:02 +02:00
|
|
|
func newPtraceFromLog(log map[string]string) Rule {
|
2023-09-25 01:06:07 +02:00
|
|
|
return &Ptrace{
|
2024-04-19 23:43:02 +02:00
|
|
|
RuleBase: newRuleFromLog(log),
|
2024-04-15 00:58:34 +02:00
|
|
|
Qualifier: newQualifierFromLog(log),
|
2024-04-23 22:17:25 +02:00
|
|
|
Access: toAccess(tokPTRACE, log["requested_mask"]),
|
2023-09-25 01:06:07 +02:00
|
|
|
Peer: log["peer"],
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2023-09-25 01:09:11 +02:00
|
|
|
func (r *Ptrace) Less(other any) bool {
|
|
|
|
o, _ := other.(*Ptrace)
|
2024-04-23 22:17:25 +02:00
|
|
|
if len(r.Access) != len(o.Access) {
|
|
|
|
return len(r.Access) < len(o.Access)
|
2023-09-25 01:09:11 +02:00
|
|
|
}
|
2024-04-15 00:58:34 +02:00
|
|
|
if r.Peer != o.Peer {
|
|
|
|
return r.Peer == o.Peer
|
|
|
|
}
|
2023-09-25 01:09:11 +02:00
|
|
|
return r.Qualifier.Less(o.Qualifier)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Ptrace) Equals(other any) bool {
|
|
|
|
o, _ := other.(*Ptrace)
|
2024-04-23 22:17:25 +02:00
|
|
|
return slices.Equal(r.Access, o.Access) && r.Peer == o.Peer &&
|
2023-09-25 01:09:11 +02:00
|
|
|
r.Qualifier.Equals(o.Qualifier)
|
|
|
|
}
|
2024-04-23 22:26:09 +02:00
|
|
|
|
|
|
|
func (r *Ptrace) String() string {
|
|
|
|
return renderTemplate(tokPTRACE, r)
|
|
|
|
}
|