mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-12-25 14:36:33 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update profile_check.py

Browse source
This commit is contained in:
nobody43 2024-11-22 19:57:13 +00:00 committed by Alex
parent 679df325de
commit 3030c28c05
1 changed files with 22 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
tests/profile_check.py
View file

@ -13,6 +13,21 @@ import shlex
import json import json
from copy import deepcopy from copy import deepcopy
try:
from apparmor.regex import *
from apparmor.aa import is_skippable_file
from apparmor.rule.file import FileRule, FileRuleset
from apparmor.common import convert_regexp
try:
from apparmor.rule.variable import separate_vars
except ImportError:
from apparmor.aa import separate_vars
LIBAPPARMOR = True
except ImportError:
LIBAPPARMOR = False
def sanitizeProfileName(name): def sanitizeProfileName(name):
if name.startswith('/') or name.startswith('@{'): if name.startswith('/') or name.startswith('@{'):
@ -118,6 +133,7 @@ def readApparmorFile(fullpath):
gotHeaders = {} gotHeaders = {}
gotAttach = False gotAttach = False
isAfterProfileStart = False isAfterProfileStart = False
lastLineNum = None
try: try:
with open(fullpath, 'r') as f: with open(fullpath, 'r') as f:
for n,line in enumerate(f, start=1): for n,line in enumerate(f, start=1):
@ -262,6 +278,8 @@ def readApparmorFile(fullpath):
localExists_eol[profileIdentity] = n localExists_eol[profileIdentity] = n
del nestingStacker[-1] # remove last del nestingStacker[-1] # remove last
lastLineNum = n
except PermissionError: except PermissionError:
exceptionMsg = 'Unable to read the file (PermissionError)' exceptionMsg = 'Unable to read the file (PermissionError)'
@ -308,12 +326,12 @@ def readApparmorFile(fullpath):
# Ensure trailing vim syntax # Ensure trailing vim syntax
if line: if line:
trailingSyntax = '# vim:syntax=apparmor' trailingSyntax = '# vim:syntax=apparmor\n'
if line != trailingSyntax: if line != trailingSyntax:
messages.append({'filename': fullpath, messages.append({'filename': fullpath,
'profile': None, 'profile': None,
'severity': 'WARNING', 'severity': 'WARNING',
'line': None, 'line': lastLineNum,
'reason': 'No trailing syntax hint', 'reason': 'No trailing syntax hint',
'suggestion': trailingSyntax}) 'suggestion': trailingSyntax})
@ -448,18 +466,8 @@ def main(argv):
if __name__ == '__main__': if __name__ == '__main__':
try: if not LIBAPPARMOR:
from apparmor.regex import * raise ImportError(f"""Can't find 'python3-apparmor' package! Install with:
from apparmor.aa import is_skippable_file
from apparmor.rule.file import FileRule, FileRuleset
from apparmor.common import convert_regexp
try:
from apparmor.rule.variable import separate_vars
except ModuleNotFoundError:
from apparmor.aa import separate_vars
except ModuleNotFoundError:
raise ModuleNotFoundError(f"""Can't find 'python3-apparmor' package! Install with:
$ sudo apt install python3-apparmor""") $ sudo apt install python3-apparmor""")
main(sys.argv) main(sys.argv)