Alexandre Pujol
|
2cd14aa6bb
|
chore: add missing and update copyright year.
|
2024-02-07 00:16:21 +01:00 |
|
Alexandre Pujol
|
46641e6cc6
|
chore: update links to the documentation website.
|
2024-01-30 15:45:03 +00:00 |
|
Alexandre Pujol
|
c8f37afe9a
|
feat(aa-log): improve profile rendering.
|
2024-01-21 11:58:44 +00:00 |
|
Alexandre Pujol
|
7cf7adc197
|
fix(aa-log): ensure aa-log -s return valid result.
Fix #268
|
2023-12-29 18:28:14 +01:00 |
|
Alexandre Pujol
|
4091fca3f0
|
fix(build): cleanup go import.
|
2023-12-15 22:37:37 +00:00 |
|
Alexandre Pujol
|
66a4a17924
|
build: add inital support for dbus directive.
|
2023-12-15 22:11:25 +00:00 |
|
Alexandre Pujol
|
6fa2c8ec3a
|
build: improve build output.
|
2023-12-15 19:14:32 +00:00 |
|
Alexandre Pujol
|
1ead127675
|
feat(aa-log): add indentation option to the logging function.
|
2023-12-13 17:39:21 +00:00 |
|
Alexandre Pujol
|
5cf5b74f4b
|
fix(build): ensure full system policy build works.
|
2023-12-10 14:30:47 +00:00 |
|
Alexandre Pujol
|
735e3529fb
|
feat(aa-log): add support for mqueue.
|
2023-12-05 20:47:32 +00:00 |
|
Alexandre Pujol
|
07a6f35b4e
|
chore(aa-log): minor template improvement.
|
2023-11-29 22:08:37 +00:00 |
|
Alexandre Pujol
|
66efedfb01
|
fix(aa-log): fix go linter.
|
2023-11-28 15:31:43 +00:00 |
|
Alexandre Pujol
|
d4bc07895a
|
feat(aa-log): add support change_profile & pivot_rule
|
2023-11-27 19:21:43 +00:00 |
|
Alexandre Pujol
|
4b61abf7ce
|
build: simplify full system policy generation.
|
2023-11-26 21:19:16 +00:00 |
|
Alexandre Pujol
|
0d124065b9
|
build: enforce the use on the default profile on full mode.
|
2023-11-22 20:52:25 +00:00 |
|
Alexandre Pujol
|
9ab0745e2d
|
feat(full): add default fallback profile.
See #252
|
2023-11-22 20:12:20 +00:00 |
|
Alexandre Pujol
|
7909bb1948
|
fix(build): tunable path.
|
2023-11-19 23:21:50 +00:00 |
|
Alexandre Pujol
|
9e04743156
|
build: do not use rsync to synchronise file anymore.
|
2023-11-19 14:47:55 +00:00 |
|
Alexandre Pujol
|
96ea9d17ae
|
feat(full): disable nnp flag on some services.
|
2023-11-19 14:32:57 +00:00 |
|
Alexandre Pujol
|
f564347580
|
refractor: move default systemd drop in files.
|
2023-11-19 14:20:14 +00:00 |
|
Alexandre Pujol
|
88555a12d0
|
feat(profiles): add initial userns rule.
Require apparmor 4 to be enabled.
|
2023-11-19 11:19:24 +00:00 |
|
Alexandre Pujol
|
6dc990ac02
|
feat(full): set systemd profile name on build time.
|
2023-11-19 11:14:31 +00:00 |
|
Alexandre Pujol
|
3197f52a97
|
feat(aa-log): improve log to rule conversion.
|
2023-11-19 10:59:46 +00:00 |
|
Alexandre Pujol
|
3b42cc0ca7
|
build: update full system policy setup.
|
2023-11-11 20:25:27 +00:00 |
|
Alexandre Pujol
|
46d25ed922
|
feat(aa-log): improve error formating on rules.
|
2023-10-20 23:11:11 +01:00 |
|
Alexandre Pujol
|
11ca694af7
|
feat(aa-log): more log cleanup.
|
2023-10-10 23:47:31 +01:00 |
|
Alexandre Pujol
|
a4033f7950
|
fix(test): aa-log unit tests.
|
2023-10-01 19:12:27 +01:00 |
|
Alexandre Pujol
|
5b74cb665f
|
feat(aa-log): add dummy rule struct.
|
2023-10-01 19:06:27 +01:00 |
|
Alexandre Pujol
|
68be85b5c2
|
test(aa-log): add some unit tests.
|
2023-10-01 19:05:44 +01:00 |
|
Alexandre Pujol
|
4798b2d04a
|
chore(aa-log): cleanup test data.
|
2023-10-01 19:04:43 +01:00 |
|
Alexandre Pujol
|
fd46022d5b
|
test(aa-log): test aa-log against real profile.
|
2023-10-01 19:03:12 +01:00 |
|
Alexandre Pujol
|
b99bb8da46
|
feat(aa-log): format rule before print.
|
2023-10-01 19:00:39 +01:00 |
|
Alexandre Pujol
|
4d0ccebb21
|
test(integration): update aa-test.
|
2023-09-30 23:21:26 +01:00 |
|
Alexandre Pujol
|
2cc7627879
|
test(integration): update the test suite.
|
2023-09-30 18:15:55 +01:00 |
|
Alexandre Pujol
|
0068c1b9a3
|
test(aa-log): add some missing unit tests.
|
2023-09-30 15:36:01 +01:00 |
|
Alexandre Pujol
|
cd80a7d919
|
refractor(aa-log): merge identical function together.
|
2023-09-30 15:34:30 +01:00 |
|
Alexandre Pujol
|
95c322d62a
|
test: add more profile sorting test.
|
2023-09-30 13:55:56 +01:00 |
|
Alexandre Pujol
|
c0bc903101
|
feat(aa): use profile guideline to sort file rules.
|
2023-09-30 13:54:04 +01:00 |
|
Alexandre Pujol
|
4dfc1388e3
|
feat(aa): add support for audit log.
|
2023-09-30 13:28:41 +01:00 |
|
Alexandre Pujol
|
e93c1bf4d8
|
feat(aa): support multiple comments.
|
2023-09-30 13:22:46 +01:00 |
|
Alexandre Pujol
|
1da0073120
|
refractor: rename comment template.
|
2023-09-30 13:22:04 +01:00 |
|
Alexandre Pujol
|
26d05f1869
|
feat(aa): sort local include at the end of a profile.
|
2023-09-29 21:24:15 +01:00 |
|
Alexandre Pujol
|
c249005958
|
fix(aa): import missing lib & improve template indentation.
|
2023-09-29 20:37:15 +01:00 |
|
Alexandre Pujol
|
09a06db803
|
feat(aa): add sub templates.
|
2023-09-29 20:28:56 +01:00 |
|
Alexandre Pujol
|
cb441733c0
|
feat(aa): ensure the template does not append useless space.
|
2023-09-29 20:17:38 +01:00 |
|
Alexandre Pujol
|
eb98d2b49f
|
build: initial preparation for apparmor 4.
|
2023-09-29 20:12:00 +01:00 |
|
Alexandre Pujol
|
d810acd58f
|
chore: cleanup test data.
|
2023-09-29 20:10:38 +01:00 |
|
Alexandre Pujol
|
c7485326e8
|
feat(aa): improve rule creation from log.
|
2023-09-29 20:07:29 +01:00 |
|
Alexandre Pujol
|
13de4182c8
|
fix(aa-log): ensure unix logs generate unix rule.
It may break some rule generation on old apparmor version (<3.1). But I don't have the time to support all apparmor version anyway...
fix #225
|
2023-09-29 20:01:30 +01:00 |
|
Alexandre Pujol
|
5b180bfeb2
|
refractor: move profile template in its own directory.
|
2023-09-28 19:42:17 +01:00 |
|
Alexandre Pujol
|
6cbc076ba4
|
test(aa-log): add unit tests for profile printing.
|
2023-09-25 00:28:28 +01:00 |
|
Alexandre Pujol
|
a5b6373b02
|
test(aa-log): add unit tests for profile rules.
|
2023-09-25 00:22:41 +01:00 |
|
Alexandre Pujol
|
43981517b2
|
feat(aa-log): add profile sort & merge methods.
|
2023-09-25 00:17:41 +01:00 |
|
Alexandre Pujol
|
88f275ef43
|
feat(aa-log): rewrite the profile template.
|
2023-09-25 00:15:51 +01:00 |
|
Alexandre Pujol
|
422418e0e2
|
test(aa-log): add & update some variabe parsing test
|
2023-09-25 00:13:18 +01:00 |
|
Alexandre Pujol
|
73109bb09c
|
feat(aa-log): update addrule method to new structure.
|
2023-09-25 00:10:12 +01:00 |
|
Alexandre Pujol
|
e23e10d7b7
|
feat(aa-log): add less & equals rule methods.
|
2023-09-25 00:09:11 +01:00 |
|
Alexandre Pujol
|
923bb66eba
|
feat(aa-log): new structure for apparmor rules.
|
2023-09-25 00:06:07 +01:00 |
|
Alexandre Pujol
|
99d1a4e302
|
feat(aa-log): add --raw option.
|
2023-09-24 19:50:15 +01:00 |
|
Alexandre Pujol
|
edd0e6ff55
|
fix(build): fix unit test build.
|
2023-09-18 17:35:32 +01:00 |
|
Alexandre Pujol
|
dc2971da1b
|
fix(build): ensure int is resolved during prebuild.
See: #222
|
2023-09-18 13:10:22 +01:00 |
|
Alexandre Pujol
|
e71fc00d8e
|
test: refractor integration tests.
|
2023-09-10 12:21:55 +01:00 |
|
Alexandre Pujol
|
cad27a3f78
|
build: add the ability to set enforce all profiles.
Do not do that!!! It forces ALL profiles in enforce mode.
|
2023-09-05 19:44:36 +01:00 |
|
Alexandre Pujol
|
aea0034fcc
|
chore: various cosmetic changes.
|
2023-09-01 19:26:52 +01:00 |
|
Alexandre Pujol
|
256d4abde8
|
feat(aa-log): improve log cleaning.
|
2023-09-01 19:19:19 +01:00 |
|
Alexandre Pujol
|
393f7001dc
|
fix(aa-log): profile template.
See #182
|
2023-08-26 11:32:56 +01:00 |
|
Alexandre Pujol
|
7273bde534
|
feat(aa-log): update default tunables according to guideline.
|
2023-08-22 23:09:34 +01:00 |
|
Alexandre Pujol
|
5516eef952
|
fix(aa-log): profile template.
|
2023-08-22 22:59:12 +01:00 |
|
Alexandre Pujol
|
f4ba16861f
|
feat(aa-log): minor apparmor profile struct tweak.
|
2023-08-22 22:58:35 +01:00 |
|
Alexandre Pujol
|
a3f21425e5
|
fix: remove unused go import.
|
2023-08-17 23:36:46 +01:00 |
|
Alexandre Pujol
|
d06a474b0c
|
feat(aa-log): parse log file to AA object to allow easy print.
|
2023-08-17 23:12:46 +01:00 |
|
Alexandre Pujol
|
574891d445
|
feat(aa-log): add AppArmorProfile.String using a template.
|
2023-08-17 23:11:11 +01:00 |
|
Alexandre Pujol
|
4f40cb6d78
|
feat(aa-log): add a new constructors for aa rules.
|
2023-08-17 23:05:07 +01:00 |
|
Alexandre Pujol
|
a8470dfa38
|
feat(aa-log): add a new apparmor profile struct
Also rewrite variables resolution to this new struct.
|
2023-08-17 23:00:52 +01:00 |
|
Alexandre Pujol
|
e0f79b9c9a
|
feat(aa-log): resolve all main apparmor vars in log.
This also deprecate the anonymize option
|
2023-08-17 19:12:02 +01:00 |
|
Alexandre Pujol
|
fe0238250a
|
fix: ubuntu build.
|
2023-07-25 23:06:14 +01:00 |
|
Alexandre Pujol
|
c36801700c
|
chore: fix go linter.
|
2023-07-25 22:07:38 +01:00 |
|
Alexandre Pujol
|
f2e755b77b
|
build: allow a larger set of distribution.
See #180
|
2023-07-25 22:02:18 +01:00 |
|
Alexandre Pujol
|
6ea2df19eb
|
build: simplify profile struct.
|
2023-07-25 22:01:07 +01:00 |
|
Alexandre Pujol
|
c6a048c9ca
|
build: add FlagDir variable in prebuild code.
|
2023-07-23 20:36:48 +01:00 |
|
Alexandre Pujol
|
6325314825
|
feat(aa-log): minor structure improvments.
|
2023-07-23 17:00:52 +01:00 |
|
Alexandre Pujol
|
98c701f33d
|
feat(aa-log): show target in log, show access as owner too.
|
2023-07-20 23:45:14 +01:00 |
|
Alexandre Pujol
|
1eda41dbc6
|
build: fix tests.
|
2023-07-09 15:32:39 +01:00 |
|
Alexandre Pujol
|
1f75dc9956
|
build: update build for new bin & lib variables
|
2023-07-09 15:09:32 +01:00 |
|
Alexandre Pujol
|
dec5a29e19
|
fix: go linter
|
2023-06-18 12:07:45 +01:00 |
|
Alexandre Pujol
|
a1946aa171
|
feat: support for debian 12, drop support for debian 11.
|
2023-06-18 11:44:56 +01:00 |
|
Alexandre Pujol
|
b83569f393
|
chore: fix go linter
|
2023-05-06 13:29:55 +01:00 |
|
Alexandre Pujol
|
298360fff1
|
test(integration): initial version of integration tests manager
|
2023-05-06 13:23:16 +01:00 |
|
Alexandre Pujol
|
913ac3131c
|
feat(prebuild): make prebuild available as an external package.
Usefull for downstream repo.
|
2023-05-06 13:01:07 +01:00 |
|
Alexandre Pujol
|
538da05696
|
feat(aa-log): add -a option to anonymize the logs.
|
2023-05-06 12:18:20 +01:00 |
|
Alexandre Pujol
|
26bd9350f2
|
chore(aa-log): make some resource internal only.
|
2023-05-01 22:21:30 +01:00 |
|
Alexandre Pujol
|
c53049293b
|
feat(aa-log): use os.ReadFile instead of ioutil.ReadFile
|
2023-04-25 23:23:09 +01:00 |
|
Alexandre Pujol
|
7a70252e26
|
build: improve attachments resolution.
|
2023-04-24 12:51:16 +01:00 |
|
Alexandre Pujol
|
d2c1aa72ff
|
fix(build): ensure attachment nesting return value even on non valid string.
|
2023-04-19 21:48:53 +01:00 |
|
Alexandre Pujol
|
fdbf58abfb
|
feat(aa-log): move useless global variables.
|
2023-04-19 19:03:47 +01:00 |
|
Alexandre Pujol
|
458db2601a
|
build(prebuild): add new prebuild command.
Fix #146, #136
|
2023-04-19 17:40:40 +01:00 |
|
Alexandre Pujol
|
22b12fade0
|
fix: remove unused import, add missing InSlice.
|
2023-04-16 23:42:15 +01:00 |
|
Alexandre Pujol
|
400ecc52f5
|
refractor: add logs internal pkg module.
|
2023-04-16 23:31:05 +01:00 |
|
Alexandre Pujol
|
049b939349
|
refractor: add initial go internall pkg module.
|
2023-04-16 23:26:46 +01:00 |
|