Commit graph

312 commits

Author SHA1 Message Date
Alexandre Pujol
c0bc903101
feat(aa): use profile guideline to sort file rules. 2023-09-30 13:54:04 +01:00
Alexandre Pujol
4dfc1388e3
feat(aa): add support for audit log. 2023-09-30 13:28:41 +01:00
Alexandre Pujol
e93c1bf4d8
feat(aa): support multiple comments. 2023-09-30 13:22:46 +01:00
Alexandre Pujol
1da0073120
refractor: rename comment template. 2023-09-30 13:22:04 +01:00
Alexandre Pujol
26d05f1869
feat(aa): sort local include at the end of a profile. 2023-09-29 21:24:15 +01:00
Alexandre Pujol
c249005958
fix(aa): import missing lib & improve template indentation. 2023-09-29 20:37:15 +01:00
Alexandre Pujol
09a06db803
feat(aa): add sub templates. 2023-09-29 20:28:56 +01:00
Alexandre Pujol
cb441733c0
feat(aa): ensure the template does not append useless space. 2023-09-29 20:17:38 +01:00
Alexandre Pujol
eb98d2b49f
build: initial preparation for apparmor 4. 2023-09-29 20:12:00 +01:00
Alexandre Pujol
d810acd58f
chore: cleanup test data. 2023-09-29 20:10:38 +01:00
Alexandre Pujol
c7485326e8
feat(aa): improve rule creation from log. 2023-09-29 20:07:29 +01:00
Alexandre Pujol
13de4182c8
fix(aa-log): ensure unix logs generate unix rule.
It may break some rule generation on old apparmor version (<3.1). But I don't have the time to support all apparmor version anyway...

fix #225
2023-09-29 20:01:30 +01:00
Alexandre Pujol
5b180bfeb2
refractor: move profile template in its own directory. 2023-09-28 19:42:17 +01:00
Alexandre Pujol
6cbc076ba4
test(aa-log): add unit tests for profile printing. 2023-09-25 00:28:28 +01:00
Alexandre Pujol
a5b6373b02
test(aa-log): add unit tests for profile rules. 2023-09-25 00:22:41 +01:00
Alexandre Pujol
43981517b2
feat(aa-log): add profile sort & merge methods. 2023-09-25 00:17:41 +01:00
Alexandre Pujol
88f275ef43
feat(aa-log): rewrite the profile template. 2023-09-25 00:15:51 +01:00
Alexandre Pujol
422418e0e2
test(aa-log): add & update some variabe parsing test 2023-09-25 00:13:18 +01:00
Alexandre Pujol
73109bb09c
feat(aa-log): update addrule method to new structure. 2023-09-25 00:10:12 +01:00
Alexandre Pujol
e23e10d7b7
feat(aa-log): add less & equals rule methods. 2023-09-25 00:09:11 +01:00
Alexandre Pujol
923bb66eba
feat(aa-log): new structure for apparmor rules. 2023-09-25 00:06:07 +01:00
Alexandre Pujol
99d1a4e302
feat(aa-log): add --raw option. 2023-09-24 19:50:15 +01:00
Alexandre Pujol
edd0e6ff55
fix(build): fix unit test build. 2023-09-18 17:35:32 +01:00
Alexandre Pujol
dc2971da1b
fix(build): ensure int is resolved during prebuild.
See: #222
2023-09-18 13:10:22 +01:00
Alexandre Pujol
e71fc00d8e
test: refractor integration tests. 2023-09-10 12:21:55 +01:00
Alexandre Pujol
cad27a3f78
build: add the ability to set enforce all profiles.
Do not do that!!! It forces ALL profiles in enforce mode.
2023-09-05 19:44:36 +01:00
Alexandre Pujol
aea0034fcc
chore: various cosmetic changes. 2023-09-01 19:26:52 +01:00
Alexandre Pujol
256d4abde8
feat(aa-log): improve log cleaning. 2023-09-01 19:19:19 +01:00
Alexandre Pujol
393f7001dc
fix(aa-log): profile template.
See #182
2023-08-26 11:32:56 +01:00
Alexandre Pujol
7273bde534
feat(aa-log): update default tunables according to guideline. 2023-08-22 23:09:34 +01:00
Alexandre Pujol
5516eef952
fix(aa-log): profile template. 2023-08-22 22:59:12 +01:00
Alexandre Pujol
f4ba16861f
feat(aa-log): minor apparmor profile struct tweak. 2023-08-22 22:58:35 +01:00
Alexandre Pujol
a3f21425e5
fix: remove unused go import. 2023-08-17 23:36:46 +01:00
Alexandre Pujol
d06a474b0c
feat(aa-log): parse log file to AA object to allow easy print. 2023-08-17 23:12:46 +01:00
Alexandre Pujol
574891d445
feat(aa-log): add AppArmorProfile.String using a template. 2023-08-17 23:11:11 +01:00
Alexandre Pujol
4f40cb6d78
feat(aa-log): add a new constructors for aa rules. 2023-08-17 23:05:07 +01:00
Alexandre Pujol
a8470dfa38
feat(aa-log): add a new apparmor profile struct
Also rewrite variables resolution to this new struct.
2023-08-17 23:00:52 +01:00
Alexandre Pujol
e0f79b9c9a
feat(aa-log): resolve all main apparmor vars in log.
This also deprecate the anonymize option
2023-08-17 19:12:02 +01:00
Alexandre Pujol
fe0238250a
fix: ubuntu build. 2023-07-25 23:06:14 +01:00
Alexandre Pujol
c36801700c
chore: fix go linter. 2023-07-25 22:07:38 +01:00
Alexandre Pujol
f2e755b77b
build: allow a larger set of distribution.
See #180
2023-07-25 22:02:18 +01:00
Alexandre Pujol
6ea2df19eb
build: simplify profile struct. 2023-07-25 22:01:07 +01:00
Alexandre Pujol
c6a048c9ca
build: add FlagDir variable in prebuild code. 2023-07-23 20:36:48 +01:00
Alexandre Pujol
6325314825
feat(aa-log): minor structure improvments. 2023-07-23 17:00:52 +01:00
Alexandre Pujol
98c701f33d
feat(aa-log): show target in log, show access as owner too. 2023-07-20 23:45:14 +01:00
Alexandre Pujol
1eda41dbc6
build: fix tests. 2023-07-09 15:32:39 +01:00
Alexandre Pujol
1f75dc9956
build: update build for new bin & lib variables 2023-07-09 15:09:32 +01:00
Alexandre Pujol
dec5a29e19
fix: go linter 2023-06-18 12:07:45 +01:00
Alexandre Pujol
a1946aa171
feat: support for debian 12, drop support for debian 11. 2023-06-18 11:44:56 +01:00
Alexandre Pujol
b83569f393
chore: fix go linter 2023-05-06 13:29:55 +01:00
Alexandre Pujol
298360fff1
test(integration): initial version of integration tests manager 2023-05-06 13:23:16 +01:00
Alexandre Pujol
913ac3131c
feat(prebuild): make prebuild available as an external package.
Usefull for downstream repo.
2023-05-06 13:01:07 +01:00
Alexandre Pujol
538da05696
feat(aa-log): add -a option to anonymize the logs. 2023-05-06 12:18:20 +01:00
Alexandre Pujol
26bd9350f2
chore(aa-log): make some resource internal only. 2023-05-01 22:21:30 +01:00
Alexandre Pujol
c53049293b
feat(aa-log): use os.ReadFile instead of ioutil.ReadFile 2023-04-25 23:23:09 +01:00
Alexandre Pujol
7a70252e26
build: improve attachments resolution. 2023-04-24 12:51:16 +01:00
Alexandre Pujol
d2c1aa72ff
fix(build): ensure attachment nesting return value even on non valid string. 2023-04-19 21:48:53 +01:00
Alexandre Pujol
fdbf58abfb
feat(aa-log): move useless global variables. 2023-04-19 19:03:47 +01:00
Alexandre Pujol
458db2601a
build(prebuild): add new prebuild command.
Fix #146, #136
2023-04-19 17:40:40 +01:00
Alexandre Pujol
22b12fade0
fix: remove unused import, add missing InSlice. 2023-04-16 23:42:15 +01:00
Alexandre Pujol
400ecc52f5
refractor: add logs internal pkg module. 2023-04-16 23:31:05 +01:00
Alexandre Pujol
049b939349
refractor: add initial go internall pkg module. 2023-04-16 23:26:46 +01:00