2023-09-25 01:06:07 +02:00
|
|
|
// apparmor.d - Full set of apparmor profiles
|
|
|
|
// Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
|
|
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
|
|
|
|
package aa
|
|
|
|
|
|
|
|
type File struct {
|
|
|
|
Qualifier
|
|
|
|
Path string
|
|
|
|
Access string
|
|
|
|
Target string
|
|
|
|
}
|
|
|
|
|
2023-09-29 21:07:29 +02:00
|
|
|
func FileFromLog(log map[string]string) ApparmorRule {
|
2023-09-25 01:06:07 +02:00
|
|
|
return &File{
|
2023-09-29 21:07:29 +02:00
|
|
|
Qualifier: NewQualifierFromLog(log),
|
2023-09-25 01:06:07 +02:00
|
|
|
Path: log["name"],
|
|
|
|
Access: maskToAccess[log["requested_mask"]],
|
|
|
|
Target: log["target"],
|
|
|
|
}
|
|
|
|
}
|
2023-09-25 01:09:11 +02:00
|
|
|
|
|
|
|
func (r *File) Less(other any) bool {
|
|
|
|
o, _ := other.(*File)
|
2023-10-01 20:00:39 +02:00
|
|
|
letterR := getLetterIn(fileAlphabet, r.Path)
|
|
|
|
letterO := getLetterIn(fileAlphabet, o.Path)
|
2023-09-30 14:54:04 +02:00
|
|
|
if fileWeights[letterR] == fileWeights[letterO] || letterR == "" || letterO == "" {
|
2023-10-01 20:00:39 +02:00
|
|
|
if r.Qualifier.Equals(o.Qualifier) {
|
|
|
|
if r.Path == o.Path {
|
2023-09-30 14:54:04 +02:00
|
|
|
if r.Access == o.Access {
|
|
|
|
return r.Target < o.Target
|
|
|
|
}
|
|
|
|
return r.Access < o.Access
|
2023-09-25 01:09:11 +02:00
|
|
|
}
|
2023-10-01 20:00:39 +02:00
|
|
|
return r.Path < o.Path
|
2023-09-25 01:09:11 +02:00
|
|
|
}
|
2023-10-01 20:00:39 +02:00
|
|
|
return r.Qualifier.Less(o.Qualifier)
|
2023-09-25 01:09:11 +02:00
|
|
|
}
|
2023-09-30 14:54:04 +02:00
|
|
|
return fileWeights[letterR] < fileWeights[letterO]
|
2023-09-25 01:09:11 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
func (r *File) Equals(other any) bool {
|
|
|
|
o, _ := other.(*File)
|
|
|
|
return r.Path == o.Path && r.Access == o.Access &&
|
|
|
|
r.Target == o.Target && r.Qualifier.Equals(o.Qualifier)
|
|
|
|
}
|