mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(aa-log): improve rule generation on debian.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-06-11 00:08:17 +01:00
parent 08a1aba39d
commit 6f5986a05e
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 14 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
pkg/aa/profile.go
View File

@ -190,10 +190,14 @@ var (
return newFileFromLog(log)
}
},
"exec": newFileFromLog,
"file_inherit": newFileFromLog,
"file_perm": newFileFromLog,
"open": newFileFromLog,
"exec": newFileFromLog,
"getattr": newFileFromLog,
"mkdir": newFileFromLog,
"mknod": newFileFromLog,
"open": newFileFromLog,
"rename_src": newFileFromLog,
"truncate": newFileFromLog,
"unlink": newFileFromLog,
}
newLogMountMap = map[string]func(log map[string]string) Rule{
"mount": newMountFromLog,
@ -229,10 +233,13 @@ func (p *Profile) AddRule(log map[string]string) {
}
if !done {
if strings.Contains(log["operation"], "dbus") {
switch {
case strings.HasPrefix(log["operation"], "file_"):
p.Rules = append(p.Rules, newFileFromLog(log))
case strings.Contains(log["operation"], "dbus"):
p.Rules = append(p.Rules, newDbusFromLog(log))
} else {
fmt.Printf("unknown log type: %s", log)
default:
fmt.Printf("unknown log type: %s", log["operation"])
}
}
}