181 Commits

Author	SHA1	Message	Date
Alexandre Pujol	83691bbb1f	feat(build): add new filter directives.	2024-03-21 20:51:42 +00:00
Alexandre Pujol	2ca62215bc	build: prepare new structure for directives.	2024-03-21 20:36:41 +00:00
Alexandre Pujol	e1d1d0be3d	refractor(build): move os logic to its own module.	2024-03-21 18:58:32 +00:00
Alexandre Pujol	662dd1c6dc	chore: move internal util function.	2024-03-21 18:54:52 +00:00
Alexandre Pujol	bf613f59a5	feat(profile): replace @{md5} by @{hex32}.	2024-03-19 21:26:12 +00:00
Alexandre Pujol	c9b87efebe	chore: cosmetic.	2024-03-16 19:27:45 +00:00
Alexandre Pujol	a66ff700a2	build: split systemd drop file in function of their purpose. ... default: ensure a service use a given profile early: ensure a service start after apparmor.	2024-03-15 16:17:19 +00:00
Alexandre Pujol	b0d52d68f4	build: refractor internal tools.	2024-03-10 19:07:55 +00:00
Alexandre Pujol	df21886965	fix(fsp): fix conflicting x modifiers in abstractions	2024-03-10 18:57:05 +00:00
Alexandre Pujol	e3545cc3bb	feat(aa-log): improve the regex helper type.	2024-03-10 15:53:25 +00:00
Alexandre Pujol	70b043cdae	build: improve build tests	2024-03-10 14:48:05 +00:00
Alexandre Pujol	be373dfb80	fix(build): rename boolean.	2024-03-10 14:47:13 +00:00
Alexandre Pujol	78a96eecd2	build: add a new "stack" directive.	2024-03-10 14:46:34 +00:00
Alexandre Pujol	f5aacbd029	build(debian): use hide instead of displace to overwrite upstream profiles.	2024-03-10 14:43:43 +00:00
Alexandre Pujol	b342df689a	build: improve error handling.	2024-03-10 14:24:59 +00:00
Alexandre Pujol	d40985099c	refractor: remove dependency on pkg/errors.	2024-03-07 17:25:13 +00:00
Alexandre Pujol	86898ec673	feat(aa-log): update order of impression.	2024-02-29 23:37:50 +00:00
Alexandre Pujol	65386321c2	feat(aa-log): update shell paths.	2024-02-29 23:14:01 +00:00
Alexandre Pujol	19b27a26c0	feat(aa-log): do not filter out addresses from the log.	2024-02-29 23:13:15 +00:00
Alexandre Pujol	3d4dd5c91a	feat(aa-log): correctly handle remount rule from mount log.	2024-02-29 23:12:19 +00:00
Alexandre Pujol	717496e7df	fix: cleanup go code.	2024-02-29 00:38:29 +00:00
Alexandre Pujol	e616b9b3fc	feat(aa-log): ensure unix rule are not confused with network unix rule. ... Both are technically the same, we simply prioritize `unix` to `network unix`.	2024-02-29 00:20:37 +00:00
Alexandre Pujol	e3daaf3d4c	feat(aa-log): ensure rule access is always present.	2024-02-29 00:19:26 +00:00
Alexandre Pujol	45a6e0bf21	fix(build): ensure the displace file get cleaned when not needed.	2024-02-29 00:03:39 +00:00
Alexandre Pujol	58f130fbb2	tests(aa-log): add missing tests for osrelease.	2024-02-28 23:27:57 +00:00
Alexandre Pujol	ae9f7e7442	build: add initial build support for ubuntu 24.04	2024-02-28 17:35:14 +00:00
Alexandre Pujol	fbf154b860	fix(build): ensure the build system has support for empty profile.	2024-02-24 17:02:43 +00:00
Alexandre Pujol	1bc63becaf	feat(aa-log): an empty profile now return empty string.	2024-02-24 17:01:03 +00:00
Alexandre Pujol	48b39fa816	test(aa-log): add more tests about the mount rules.	2024-02-24 17:00:07 +00:00
Alexandre Pujol	d6dc89b4f3	feat(aa-log): parse mount conditions from logs.	2024-02-24 16:58:38 +00:00
Alexandre Pujol	e02bf03cca	feat(tunable): add new system_user variable.	2024-02-14 23:58:18 +00:00
Alexandre Pujol	e28e452ba4	build(dbus): improve generated dbus rules.	2024-02-14 23:22:01 +00:00
Alexandre Pujol	2cd14aa6bb	chore: add missing and update copyright year.	2024-02-07 00:16:21 +01:00
Alexandre Pujol	46641e6cc6	chore: update links to the documentation website.	2024-01-30 15:45:03 +00:00
Alexandre Pujol	c8f37afe9a	feat(aa-log): improve profile rendering.	2024-01-21 11:58:44 +00:00
Alexandre Pujol	7cf7adc197	fix(aa-log): ensure aa-log -s return valid result. ... Fix #268	2023-12-29 18:28:14 +01:00
Alexandre Pujol	4091fca3f0	fix(build): cleanup go import.	2023-12-15 22:37:37 +00:00
Alexandre Pujol	66a4a17924	build: add inital support for dbus directive.	2023-12-15 22:11:25 +00:00
Alexandre Pujol	6fa2c8ec3a	build: improve build output.	2023-12-15 19:14:32 +00:00
Alexandre Pujol	1ead127675	feat(aa-log): add indentation option to the logging function.	2023-12-13 17:39:21 +00:00
Alexandre Pujol	5cf5b74f4b	fix(build): ensure full system policy build works.	2023-12-10 14:30:47 +00:00
Alexandre Pujol	735e3529fb	feat(aa-log): add support for mqueue.	2023-12-05 20:47:32 +00:00
Alexandre Pujol	07a6f35b4e	chore(aa-log): minor template improvement.	2023-11-29 22:08:37 +00:00
Alexandre Pujol	66efedfb01	fix(aa-log): fix go linter.	2023-11-28 15:31:43 +00:00
Alexandre Pujol	d4bc07895a	feat(aa-log): add support change_profile & pivot_rule	2023-11-27 19:21:43 +00:00
Alexandre Pujol	4b61abf7ce	build: simplify full system policy generation.	2023-11-26 21:19:16 +00:00
Alexandre Pujol	0d124065b9	build: enforce the use on the default profile on full mode.	2023-11-22 20:52:25 +00:00
Alexandre Pujol	9ab0745e2d	feat(full): add default fallback profile. ... See #252	2023-11-22 20:12:20 +00:00
Alexandre Pujol	7909bb1948	fix(build): tunable path.	2023-11-19 23:21:50 +00:00
Alexandre Pujol	9e04743156	build: do not use rsync to synchronise file anymore.	2023-11-19 14:47:55 +00:00
Alexandre Pujol	96ea9d17ae	feat(full): disable nnp flag on some services.	2023-11-19 14:32:57 +00:00
Alexandre Pujol	f564347580	refractor: move default systemd drop in files.	2023-11-19 14:20:14 +00:00
Alexandre Pujol	88555a12d0	feat(profiles): add initial userns rule. ... Require apparmor 4 to be enabled.	2023-11-19 11:19:24 +00:00
Alexandre Pujol	6dc990ac02	feat(full): set systemd profile name on build time.	2023-11-19 11:14:31 +00:00
Alexandre Pujol	3197f52a97	feat(aa-log): improve log to rule conversion.	2023-11-19 10:59:46 +00:00
Alexandre Pujol	3b42cc0ca7	build: update full system policy setup.	2023-11-11 20:25:27 +00:00
Alexandre Pujol	46d25ed922	feat(aa-log): improve error formating on rules.	2023-10-20 23:11:11 +01:00
Alexandre Pujol	11ca694af7	feat(aa-log): more log cleanup.	2023-10-10 23:47:31 +01:00
Alexandre Pujol	a4033f7950	fix(test): aa-log unit tests.	2023-10-01 19:12:27 +01:00
Alexandre Pujol	5b74cb665f	feat(aa-log): add dummy rule struct.	2023-10-01 19:06:27 +01:00
Alexandre Pujol	68be85b5c2	test(aa-log): add some unit tests.	2023-10-01 19:05:44 +01:00
Alexandre Pujol	4798b2d04a	chore(aa-log): cleanup test data.	2023-10-01 19:04:43 +01:00
Alexandre Pujol	fd46022d5b	test(aa-log): test aa-log against real profile.	2023-10-01 19:03:12 +01:00
Alexandre Pujol	b99bb8da46	feat(aa-log): format rule before print.	2023-10-01 19:00:39 +01:00
Alexandre Pujol	4d0ccebb21	test(integration): update aa-test.	2023-09-30 23:21:26 +01:00
Alexandre Pujol	2cc7627879	test(integration): update the test suite.	2023-09-30 18:15:55 +01:00
Alexandre Pujol	0068c1b9a3	test(aa-log): add some missing unit tests.	2023-09-30 15:36:01 +01:00
Alexandre Pujol	cd80a7d919	refractor(aa-log): merge identical function together.	2023-09-30 15:34:30 +01:00
Alexandre Pujol	95c322d62a	test: add more profile sorting test.	2023-09-30 13:55:56 +01:00
Alexandre Pujol	c0bc903101	feat(aa): use profile guideline to sort file rules.	2023-09-30 13:54:04 +01:00
Alexandre Pujol	4dfc1388e3	feat(aa): add support for audit log.	2023-09-30 13:28:41 +01:00
Alexandre Pujol	e93c1bf4d8	feat(aa): support multiple comments.	2023-09-30 13:22:46 +01:00
Alexandre Pujol	1da0073120	refractor: rename comment template.	2023-09-30 13:22:04 +01:00
Alexandre Pujol	26d05f1869	feat(aa): sort local include at the end of a profile.	2023-09-29 21:24:15 +01:00
Alexandre Pujol	c249005958	fix(aa): import missing lib & improve template indentation.	2023-09-29 20:37:15 +01:00
Alexandre Pujol	09a06db803	feat(aa): add sub templates.	2023-09-29 20:28:56 +01:00
Alexandre Pujol	cb441733c0	feat(aa): ensure the template does not append useless space.	2023-09-29 20:17:38 +01:00
Alexandre Pujol	eb98d2b49f	build: initial preparation for apparmor 4.	2023-09-29 20:12:00 +01:00
Alexandre Pujol	d810acd58f	chore: cleanup test data.	2023-09-29 20:10:38 +01:00
Alexandre Pujol	c7485326e8	feat(aa): improve rule creation from log.	2023-09-29 20:07:29 +01:00
Alexandre Pujol	13de4182c8	fix(aa-log): ensure unix logs generate unix rule. ... It may break some rule generation on old apparmor version (<3.1). But I don't have the time to support all apparmor version anyway... fix #225	2023-09-29 20:01:30 +01:00
Alexandre Pujol	5b180bfeb2	refractor: move profile template in its own directory.	2023-09-28 19:42:17 +01:00
Alexandre Pujol	6cbc076ba4	test(aa-log): add unit tests for profile printing.	2023-09-25 00:28:28 +01:00
Alexandre Pujol	a5b6373b02	test(aa-log): add unit tests for profile rules.	2023-09-25 00:22:41 +01:00
Alexandre Pujol	43981517b2	feat(aa-log): add profile sort & merge methods.	2023-09-25 00:17:41 +01:00
Alexandre Pujol	88f275ef43	feat(aa-log): rewrite the profile template.	2023-09-25 00:15:51 +01:00
Alexandre Pujol	422418e0e2	test(aa-log): add & update some variabe parsing test	2023-09-25 00:13:18 +01:00
Alexandre Pujol	73109bb09c	feat(aa-log): update addrule method to new structure.	2023-09-25 00:10:12 +01:00
Alexandre Pujol	e23e10d7b7	feat(aa-log): add less & equals rule methods.	2023-09-25 00:09:11 +01:00
Alexandre Pujol	923bb66eba	feat(aa-log): new structure for apparmor rules.	2023-09-25 00:06:07 +01:00
Alexandre Pujol	99d1a4e302	feat(aa-log): add --raw option.	2023-09-24 19:50:15 +01:00
Alexandre Pujol	edd0e6ff55	fix(build): fix unit test build.	2023-09-18 17:35:32 +01:00
Alexandre Pujol	dc2971da1b	fix(build): ensure int is resolved during prebuild. ... See: #222	2023-09-18 13:10:22 +01:00
Alexandre Pujol	e71fc00d8e	test: refractor integration tests.	2023-09-10 12:21:55 +01:00
Alexandre Pujol	cad27a3f78	build: add the ability to set enforce all profiles. ... Do not do that!!! It forces ALL profiles in enforce mode.	2023-09-05 19:44:36 +01:00
Alexandre Pujol	aea0034fcc	chore: various cosmetic changes.	2023-09-01 19:26:52 +01:00
Alexandre Pujol	256d4abde8	feat(aa-log): improve log cleaning.	2023-09-01 19:19:19 +01:00
Alexandre Pujol	393f7001dc	fix(aa-log): profile template. ... See #182	2023-08-26 11:32:56 +01:00
Alexandre Pujol	7273bde534	feat(aa-log): update default tunables according to guideline.	2023-08-22 23:09:34 +01:00
Alexandre Pujol	5516eef952	fix(aa-log): profile template.	2023-08-22 22:59:12 +01:00