Alexandre Pujol
|
df21886965
|
fix(fsp): fix conflicting x modifiers in abstractions
|
2024-03-10 18:57:05 +00:00 |
|
Alexandre Pujol
|
e3545cc3bb
|
feat(aa-log): improve the regex helper type.
|
2024-03-10 15:53:25 +00:00 |
|
Alexandre Pujol
|
70b043cdae
|
build: improve build tests
|
2024-03-10 14:48:05 +00:00 |
|
Alexandre Pujol
|
be373dfb80
|
fix(build): rename boolean.
|
2024-03-10 14:47:13 +00:00 |
|
Alexandre Pujol
|
78a96eecd2
|
build: add a new "stack" directive.
|
2024-03-10 14:46:34 +00:00 |
|
Alexandre Pujol
|
f5aacbd029
|
build(debian): use hide instead of displace to overwrite upstream profiles.
|
2024-03-10 14:43:43 +00:00 |
|
Alexandre Pujol
|
b342df689a
|
build: improve error handling.
|
2024-03-10 14:24:59 +00:00 |
|
Alexandre Pujol
|
d40985099c
|
refractor: remove dependency on pkg/errors.
|
2024-03-07 17:25:13 +00:00 |
|
Alexandre Pujol
|
86898ec673
|
feat(aa-log): update order of impression.
|
2024-02-29 23:37:50 +00:00 |
|
Alexandre Pujol
|
65386321c2
|
feat(aa-log): update shell paths.
|
2024-02-29 23:14:01 +00:00 |
|
Alexandre Pujol
|
19b27a26c0
|
feat(aa-log): do not filter out addresses from the log.
|
2024-02-29 23:13:15 +00:00 |
|
Alexandre Pujol
|
3d4dd5c91a
|
feat(aa-log): correctly handle remount rule from mount log.
|
2024-02-29 23:12:19 +00:00 |
|
Alexandre Pujol
|
717496e7df
|
fix: cleanup go code.
|
2024-02-29 00:38:29 +00:00 |
|
Alexandre Pujol
|
e616b9b3fc
|
feat(aa-log): ensure unix rule are not confused with network unix rule.
Both are technically the same, we simply prioritize `unix` to `network unix`.
|
2024-02-29 00:20:37 +00:00 |
|
Alexandre Pujol
|
e3daaf3d4c
|
feat(aa-log): ensure rule access is always present.
|
2024-02-29 00:19:26 +00:00 |
|
Alexandre Pujol
|
45a6e0bf21
|
fix(build): ensure the displace file get cleaned when not needed.
|
2024-02-29 00:03:39 +00:00 |
|
Alexandre Pujol
|
58f130fbb2
|
tests(aa-log): add missing tests for osrelease.
|
2024-02-28 23:27:57 +00:00 |
|
Alexandre Pujol
|
ae9f7e7442
|
build: add initial build support for ubuntu 24.04
|
2024-02-28 17:35:14 +00:00 |
|
Alexandre Pujol
|
fbf154b860
|
fix(build): ensure the build system has support for empty profile.
|
2024-02-24 17:02:43 +00:00 |
|
Alexandre Pujol
|
1bc63becaf
|
feat(aa-log): an empty profile now return empty string.
|
2024-02-24 17:01:03 +00:00 |
|
Alexandre Pujol
|
48b39fa816
|
test(aa-log): add more tests about the mount rules.
|
2024-02-24 17:00:07 +00:00 |
|
Alexandre Pujol
|
d6dc89b4f3
|
feat(aa-log): parse mount conditions from logs.
|
2024-02-24 16:58:38 +00:00 |
|
Alexandre Pujol
|
e02bf03cca
|
feat(tunable): add new system_user variable.
|
2024-02-14 23:58:18 +00:00 |
|
Alexandre Pujol
|
e28e452ba4
|
build(dbus): improve generated dbus rules.
|
2024-02-14 23:22:01 +00:00 |
|
Alexandre Pujol
|
2cd14aa6bb
|
chore: add missing and update copyright year.
|
2024-02-07 00:16:21 +01:00 |
|
Alexandre Pujol
|
46641e6cc6
|
chore: update links to the documentation website.
|
2024-01-30 15:45:03 +00:00 |
|
Alexandre Pujol
|
c8f37afe9a
|
feat(aa-log): improve profile rendering.
|
2024-01-21 11:58:44 +00:00 |
|
Alexandre Pujol
|
7cf7adc197
|
fix(aa-log): ensure aa-log -s return valid result.
Fix #268
|
2023-12-29 18:28:14 +01:00 |
|
Alexandre Pujol
|
4091fca3f0
|
fix(build): cleanup go import.
|
2023-12-15 22:37:37 +00:00 |
|
Alexandre Pujol
|
66a4a17924
|
build: add inital support for dbus directive.
|
2023-12-15 22:11:25 +00:00 |
|
Alexandre Pujol
|
6fa2c8ec3a
|
build: improve build output.
|
2023-12-15 19:14:32 +00:00 |
|
Alexandre Pujol
|
1ead127675
|
feat(aa-log): add indentation option to the logging function.
|
2023-12-13 17:39:21 +00:00 |
|
Alexandre Pujol
|
5cf5b74f4b
|
fix(build): ensure full system policy build works.
|
2023-12-10 14:30:47 +00:00 |
|
Alexandre Pujol
|
735e3529fb
|
feat(aa-log): add support for mqueue.
|
2023-12-05 20:47:32 +00:00 |
|
Alexandre Pujol
|
07a6f35b4e
|
chore(aa-log): minor template improvement.
|
2023-11-29 22:08:37 +00:00 |
|
Alexandre Pujol
|
66efedfb01
|
fix(aa-log): fix go linter.
|
2023-11-28 15:31:43 +00:00 |
|
Alexandre Pujol
|
d4bc07895a
|
feat(aa-log): add support change_profile & pivot_rule
|
2023-11-27 19:21:43 +00:00 |
|
Alexandre Pujol
|
4b61abf7ce
|
build: simplify full system policy generation.
|
2023-11-26 21:19:16 +00:00 |
|
Alexandre Pujol
|
0d124065b9
|
build: enforce the use on the default profile on full mode.
|
2023-11-22 20:52:25 +00:00 |
|
Alexandre Pujol
|
9ab0745e2d
|
feat(full): add default fallback profile.
See #252
|
2023-11-22 20:12:20 +00:00 |
|
Alexandre Pujol
|
7909bb1948
|
fix(build): tunable path.
|
2023-11-19 23:21:50 +00:00 |
|
Alexandre Pujol
|
9e04743156
|
build: do not use rsync to synchronise file anymore.
|
2023-11-19 14:47:55 +00:00 |
|
Alexandre Pujol
|
96ea9d17ae
|
feat(full): disable nnp flag on some services.
|
2023-11-19 14:32:57 +00:00 |
|
Alexandre Pujol
|
f564347580
|
refractor: move default systemd drop in files.
|
2023-11-19 14:20:14 +00:00 |
|
Alexandre Pujol
|
88555a12d0
|
feat(profiles): add initial userns rule.
Require apparmor 4 to be enabled.
|
2023-11-19 11:19:24 +00:00 |
|
Alexandre Pujol
|
6dc990ac02
|
feat(full): set systemd profile name on build time.
|
2023-11-19 11:14:31 +00:00 |
|
Alexandre Pujol
|
3197f52a97
|
feat(aa-log): improve log to rule conversion.
|
2023-11-19 10:59:46 +00:00 |
|
Alexandre Pujol
|
3b42cc0ca7
|
build: update full system policy setup.
|
2023-11-11 20:25:27 +00:00 |
|
Alexandre Pujol
|
46d25ed922
|
feat(aa-log): improve error formating on rules.
|
2023-10-20 23:11:11 +01:00 |
|
Alexandre Pujol
|
11ca694af7
|
feat(aa-log): more log cleanup.
|
2023-10-10 23:47:31 +01:00 |
|
Alexandre Pujol
|
a4033f7950
|
fix(test): aa-log unit tests.
|
2023-10-01 19:12:27 +01:00 |
|
Alexandre Pujol
|
5b74cb665f
|
feat(aa-log): add dummy rule struct.
|
2023-10-01 19:06:27 +01:00 |
|
Alexandre Pujol
|
68be85b5c2
|
test(aa-log): add some unit tests.
|
2023-10-01 19:05:44 +01:00 |
|
Alexandre Pujol
|
4798b2d04a
|
chore(aa-log): cleanup test data.
|
2023-10-01 19:04:43 +01:00 |
|
Alexandre Pujol
|
fd46022d5b
|
test(aa-log): test aa-log against real profile.
|
2023-10-01 19:03:12 +01:00 |
|
Alexandre Pujol
|
b99bb8da46
|
feat(aa-log): format rule before print.
|
2023-10-01 19:00:39 +01:00 |
|
Alexandre Pujol
|
4d0ccebb21
|
test(integration): update aa-test.
|
2023-09-30 23:21:26 +01:00 |
|
Alexandre Pujol
|
2cc7627879
|
test(integration): update the test suite.
|
2023-09-30 18:15:55 +01:00 |
|
Alexandre Pujol
|
0068c1b9a3
|
test(aa-log): add some missing unit tests.
|
2023-09-30 15:36:01 +01:00 |
|
Alexandre Pujol
|
cd80a7d919
|
refractor(aa-log): merge identical function together.
|
2023-09-30 15:34:30 +01:00 |
|
Alexandre Pujol
|
95c322d62a
|
test: add more profile sorting test.
|
2023-09-30 13:55:56 +01:00 |
|
Alexandre Pujol
|
c0bc903101
|
feat(aa): use profile guideline to sort file rules.
|
2023-09-30 13:54:04 +01:00 |
|
Alexandre Pujol
|
4dfc1388e3
|
feat(aa): add support for audit log.
|
2023-09-30 13:28:41 +01:00 |
|
Alexandre Pujol
|
e93c1bf4d8
|
feat(aa): support multiple comments.
|
2023-09-30 13:22:46 +01:00 |
|
Alexandre Pujol
|
1da0073120
|
refractor: rename comment template.
|
2023-09-30 13:22:04 +01:00 |
|
Alexandre Pujol
|
26d05f1869
|
feat(aa): sort local include at the end of a profile.
|
2023-09-29 21:24:15 +01:00 |
|
Alexandre Pujol
|
c249005958
|
fix(aa): import missing lib & improve template indentation.
|
2023-09-29 20:37:15 +01:00 |
|
Alexandre Pujol
|
09a06db803
|
feat(aa): add sub templates.
|
2023-09-29 20:28:56 +01:00 |
|
Alexandre Pujol
|
cb441733c0
|
feat(aa): ensure the template does not append useless space.
|
2023-09-29 20:17:38 +01:00 |
|
Alexandre Pujol
|
eb98d2b49f
|
build: initial preparation for apparmor 4.
|
2023-09-29 20:12:00 +01:00 |
|
Alexandre Pujol
|
d810acd58f
|
chore: cleanup test data.
|
2023-09-29 20:10:38 +01:00 |
|
Alexandre Pujol
|
c7485326e8
|
feat(aa): improve rule creation from log.
|
2023-09-29 20:07:29 +01:00 |
|
Alexandre Pujol
|
13de4182c8
|
fix(aa-log): ensure unix logs generate unix rule.
It may break some rule generation on old apparmor version (<3.1). But I don't have the time to support all apparmor version anyway...
fix #225
|
2023-09-29 20:01:30 +01:00 |
|
Alexandre Pujol
|
5b180bfeb2
|
refractor: move profile template in its own directory.
|
2023-09-28 19:42:17 +01:00 |
|
Alexandre Pujol
|
6cbc076ba4
|
test(aa-log): add unit tests for profile printing.
|
2023-09-25 00:28:28 +01:00 |
|
Alexandre Pujol
|
a5b6373b02
|
test(aa-log): add unit tests for profile rules.
|
2023-09-25 00:22:41 +01:00 |
|
Alexandre Pujol
|
43981517b2
|
feat(aa-log): add profile sort & merge methods.
|
2023-09-25 00:17:41 +01:00 |
|
Alexandre Pujol
|
88f275ef43
|
feat(aa-log): rewrite the profile template.
|
2023-09-25 00:15:51 +01:00 |
|
Alexandre Pujol
|
422418e0e2
|
test(aa-log): add & update some variabe parsing test
|
2023-09-25 00:13:18 +01:00 |
|
Alexandre Pujol
|
73109bb09c
|
feat(aa-log): update addrule method to new structure.
|
2023-09-25 00:10:12 +01:00 |
|
Alexandre Pujol
|
e23e10d7b7
|
feat(aa-log): add less & equals rule methods.
|
2023-09-25 00:09:11 +01:00 |
|
Alexandre Pujol
|
923bb66eba
|
feat(aa-log): new structure for apparmor rules.
|
2023-09-25 00:06:07 +01:00 |
|
Alexandre Pujol
|
99d1a4e302
|
feat(aa-log): add --raw option.
|
2023-09-24 19:50:15 +01:00 |
|
Alexandre Pujol
|
edd0e6ff55
|
fix(build): fix unit test build.
|
2023-09-18 17:35:32 +01:00 |
|
Alexandre Pujol
|
dc2971da1b
|
fix(build): ensure int is resolved during prebuild.
See: #222
|
2023-09-18 13:10:22 +01:00 |
|
Alexandre Pujol
|
e71fc00d8e
|
test: refractor integration tests.
|
2023-09-10 12:21:55 +01:00 |
|
Alexandre Pujol
|
cad27a3f78
|
build: add the ability to set enforce all profiles.
Do not do that!!! It forces ALL profiles in enforce mode.
|
2023-09-05 19:44:36 +01:00 |
|
Alexandre Pujol
|
aea0034fcc
|
chore: various cosmetic changes.
|
2023-09-01 19:26:52 +01:00 |
|
Alexandre Pujol
|
256d4abde8
|
feat(aa-log): improve log cleaning.
|
2023-09-01 19:19:19 +01:00 |
|
Alexandre Pujol
|
393f7001dc
|
fix(aa-log): profile template.
See #182
|
2023-08-26 11:32:56 +01:00 |
|
Alexandre Pujol
|
7273bde534
|
feat(aa-log): update default tunables according to guideline.
|
2023-08-22 23:09:34 +01:00 |
|
Alexandre Pujol
|
5516eef952
|
fix(aa-log): profile template.
|
2023-08-22 22:59:12 +01:00 |
|
Alexandre Pujol
|
f4ba16861f
|
feat(aa-log): minor apparmor profile struct tweak.
|
2023-08-22 22:58:35 +01:00 |
|
Alexandre Pujol
|
a3f21425e5
|
fix: remove unused go import.
|
2023-08-17 23:36:46 +01:00 |
|
Alexandre Pujol
|
d06a474b0c
|
feat(aa-log): parse log file to AA object to allow easy print.
|
2023-08-17 23:12:46 +01:00 |
|
Alexandre Pujol
|
574891d445
|
feat(aa-log): add AppArmorProfile.String using a template.
|
2023-08-17 23:11:11 +01:00 |
|
Alexandre Pujol
|
4f40cb6d78
|
feat(aa-log): add a new constructors for aa rules.
|
2023-08-17 23:05:07 +01:00 |
|
Alexandre Pujol
|
a8470dfa38
|
feat(aa-log): add a new apparmor profile struct
Also rewrite variables resolution to this new struct.
|
2023-08-17 23:00:52 +01:00 |
|
Alexandre Pujol
|
e0f79b9c9a
|
feat(aa-log): resolve all main apparmor vars in log.
This also deprecate the anonymize option
|
2023-08-17 19:12:02 +01:00 |
|
Alexandre Pujol
|
fe0238250a
|
fix: ubuntu build.
|
2023-07-25 23:06:14 +01:00 |
|