Commit Graph

88 Commits

Author SHA1 Message Date
Alexandre Pujol
66efedfb01
fix(aa-log): fix go linter. 2023-11-28 15:31:43 +00:00
Alexandre Pujol
d4bc07895a
feat(aa-log): add support change_profile & pivot_rule 2023-11-27 19:21:43 +00:00
Alexandre Pujol
4b61abf7ce
build: simplify full system policy generation. 2023-11-26 21:19:16 +00:00
Alexandre Pujol
0d124065b9
build: enforce the use on the default profile on full mode. 2023-11-22 20:52:25 +00:00
Alexandre Pujol
9ab0745e2d
feat(full): add default fallback profile.
See #252
2023-11-22 20:12:20 +00:00
Alexandre Pujol
7909bb1948
fix(build): tunable path. 2023-11-19 23:21:50 +00:00
Alexandre Pujol
9e04743156
build: do not use rsync to synchronise file anymore. 2023-11-19 14:47:55 +00:00
Alexandre Pujol
96ea9d17ae
feat(full): disable nnp flag on some services. 2023-11-19 14:32:57 +00:00
Alexandre Pujol
f564347580
refractor: move default systemd drop in files. 2023-11-19 14:20:14 +00:00
Alexandre Pujol
88555a12d0
feat(profiles): add initial userns rule.
Require apparmor 4 to be enabled.
2023-11-19 11:19:24 +00:00
Alexandre Pujol
6dc990ac02
feat(full): set systemd profile name on build time. 2023-11-19 11:14:31 +00:00
Alexandre Pujol
3197f52a97
feat(aa-log): improve log to rule conversion. 2023-11-19 10:59:46 +00:00
Alexandre Pujol
3b42cc0ca7
build: update full system policy setup. 2023-11-11 20:25:27 +00:00
Alexandre Pujol
46d25ed922
feat(aa-log): improve error formating on rules. 2023-10-20 23:11:11 +01:00
Alexandre Pujol
11ca694af7
feat(aa-log): more log cleanup. 2023-10-10 23:47:31 +01:00
Alexandre Pujol
a4033f7950
fix(test): aa-log unit tests. 2023-10-01 19:12:27 +01:00
Alexandre Pujol
5b74cb665f
feat(aa-log): add dummy rule struct. 2023-10-01 19:06:27 +01:00
Alexandre Pujol
68be85b5c2
test(aa-log): add some unit tests. 2023-10-01 19:05:44 +01:00
Alexandre Pujol
4798b2d04a
chore(aa-log): cleanup test data. 2023-10-01 19:04:43 +01:00
Alexandre Pujol
fd46022d5b
test(aa-log): test aa-log against real profile. 2023-10-01 19:03:12 +01:00
Alexandre Pujol
b99bb8da46
feat(aa-log): format rule before print. 2023-10-01 19:00:39 +01:00
Alexandre Pujol
4d0ccebb21
test(integration): update aa-test. 2023-09-30 23:21:26 +01:00
Alexandre Pujol
2cc7627879
test(integration): update the test suite. 2023-09-30 18:15:55 +01:00
Alexandre Pujol
0068c1b9a3
test(aa-log): add some missing unit tests. 2023-09-30 15:36:01 +01:00
Alexandre Pujol
cd80a7d919
refractor(aa-log): merge identical function together. 2023-09-30 15:34:30 +01:00
Alexandre Pujol
95c322d62a
test: add more profile sorting test. 2023-09-30 13:55:56 +01:00
Alexandre Pujol
c0bc903101
feat(aa): use profile guideline to sort file rules. 2023-09-30 13:54:04 +01:00
Alexandre Pujol
4dfc1388e3
feat(aa): add support for audit log. 2023-09-30 13:28:41 +01:00
Alexandre Pujol
e93c1bf4d8
feat(aa): support multiple comments. 2023-09-30 13:22:46 +01:00
Alexandre Pujol
1da0073120
refractor: rename comment template. 2023-09-30 13:22:04 +01:00
Alexandre Pujol
26d05f1869
feat(aa): sort local include at the end of a profile. 2023-09-29 21:24:15 +01:00
Alexandre Pujol
c249005958
fix(aa): import missing lib & improve template indentation. 2023-09-29 20:37:15 +01:00
Alexandre Pujol
09a06db803
feat(aa): add sub templates. 2023-09-29 20:28:56 +01:00
Alexandre Pujol
cb441733c0
feat(aa): ensure the template does not append useless space. 2023-09-29 20:17:38 +01:00
Alexandre Pujol
eb98d2b49f
build: initial preparation for apparmor 4. 2023-09-29 20:12:00 +01:00
Alexandre Pujol
d810acd58f
chore: cleanup test data. 2023-09-29 20:10:38 +01:00
Alexandre Pujol
c7485326e8
feat(aa): improve rule creation from log. 2023-09-29 20:07:29 +01:00
Alexandre Pujol
13de4182c8
fix(aa-log): ensure unix logs generate unix rule.
It may break some rule generation on old apparmor version (<3.1). But I don't have the time to support all apparmor version anyway...

fix #225
2023-09-29 20:01:30 +01:00
Alexandre Pujol
5b180bfeb2
refractor: move profile template in its own directory. 2023-09-28 19:42:17 +01:00
Alexandre Pujol
6cbc076ba4
test(aa-log): add unit tests for profile printing. 2023-09-25 00:28:28 +01:00
Alexandre Pujol
a5b6373b02
test(aa-log): add unit tests for profile rules. 2023-09-25 00:22:41 +01:00
Alexandre Pujol
43981517b2
feat(aa-log): add profile sort & merge methods. 2023-09-25 00:17:41 +01:00
Alexandre Pujol
88f275ef43
feat(aa-log): rewrite the profile template. 2023-09-25 00:15:51 +01:00
Alexandre Pujol
422418e0e2
test(aa-log): add & update some variabe parsing test 2023-09-25 00:13:18 +01:00
Alexandre Pujol
73109bb09c
feat(aa-log): update addrule method to new structure. 2023-09-25 00:10:12 +01:00
Alexandre Pujol
e23e10d7b7
feat(aa-log): add less & equals rule methods. 2023-09-25 00:09:11 +01:00
Alexandre Pujol
923bb66eba
feat(aa-log): new structure for apparmor rules. 2023-09-25 00:06:07 +01:00
Alexandre Pujol
99d1a4e302
feat(aa-log): add --raw option. 2023-09-24 19:50:15 +01:00
Alexandre Pujol
edd0e6ff55
fix(build): fix unit test build. 2023-09-18 17:35:32 +01:00
Alexandre Pujol
dc2971da1b
fix(build): ensure int is resolved during prebuild.
See: #222
2023-09-18 13:10:22 +01:00