2023-09-25 01:06:07 +02:00
|
|
|
// apparmor.d - Full set of apparmor profiles
|
2024-02-07 00:16:21 +01:00
|
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
2023-09-25 01:06:07 +02:00
|
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
|
|
|
|
package aa
|
|
|
|
|
2024-04-23 22:26:09 +02:00
|
|
|
const tokUSERNS = "userns"
|
|
|
|
|
2023-09-25 01:06:07 +02:00
|
|
|
type Userns struct {
|
2024-04-19 23:43:02 +02:00
|
|
|
RuleBase
|
2023-09-25 01:06:07 +02:00
|
|
|
Qualifier
|
|
|
|
Create bool
|
|
|
|
}
|
|
|
|
|
2024-04-19 23:43:02 +02:00
|
|
|
func newUsernsFromLog(log map[string]string) Rule {
|
2023-09-25 01:06:07 +02:00
|
|
|
return &Userns{
|
2024-04-19 23:43:02 +02:00
|
|
|
RuleBase: newRuleFromLog(log),
|
2024-04-15 00:58:34 +02:00
|
|
|
Qualifier: newQualifierFromLog(log),
|
2023-09-25 01:06:07 +02:00
|
|
|
Create: true,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2024-05-25 23:36:39 +02:00
|
|
|
func (r *Userns) Validate() error {
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2023-09-25 01:09:11 +02:00
|
|
|
func (r *Userns) Less(other any) bool {
|
|
|
|
o, _ := other.(*Userns)
|
2024-04-15 00:58:34 +02:00
|
|
|
if r.Create != o.Create {
|
2023-09-25 01:09:11 +02:00
|
|
|
return r.Create
|
|
|
|
}
|
|
|
|
return r.Qualifier.Less(o.Qualifier)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Userns) Equals(other any) bool {
|
|
|
|
o, _ := other.(*Userns)
|
|
|
|
return r.Create == o.Create && r.Qualifier.Equals(o.Qualifier)
|
|
|
|
}
|
2024-04-23 22:26:09 +02:00
|
|
|
|
|
|
|
func (r *Userns) String() string {
|
2024-05-05 00:41:47 +02:00
|
|
|
return renderTemplate(r.Kind(), r)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Userns) Constraint() constraint {
|
|
|
|
return blockKind
|
|
|
|
}
|
|
|
|
|
|
|
|
func (r *Userns) Kind() string {
|
|
|
|
return tokUSERNS
|
2024-04-23 22:26:09 +02:00
|
|
|
}
|