mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(aa): improve log conversion.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-05-30 12:34:10 +01:00
parent 992cab1fa4
commit 7efa4b3a4b
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 15 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
pkg/aa/profile.go
View File

@ -189,6 +189,10 @@ var (
return newFileFromLog(log)
}
},
"exec": newFileFromLog,
"file_inherit": newFileFromLog,
"file_perm": newFileFromLog,
"open": newFileFromLog,
}
newLogMountMap = map[string]func(log map[string]string) Rule{
"mount": newMountFromLog,
@ -214,15 +218,20 @@ func (p *Profile) AddRule(log map[string]string) {
default:
}
if newRule, ok := newLogMap[log["class"]]; ok {
p.Rules = append(p.Rules, newRule(log))
} else {
done := false
for _, key := range []string{"class", "family", "operation"} {
if newRule, ok := newLogMap[log[key]]; ok {
p.Rules = append(p.Rules, newRule(log))
done = true
break
}
}
if !done {
if strings.Contains(log["operation"], "dbus") {
p.Rules = append(p.Rules, newDbusFromLog(log))
} else if log["family"] == "unix" {
p.Rules = append(p.Rules, newUnixFromLog(log))
} else {
panic("unknown class: " + log["class"])
fmt.Printf("unknown log type: %s", log)
}
}
}