// apparmor.d - Full set of apparmor profiles // Copyright (C) 2021-2024 Alexandre Pujol // SPDX-License-Identifier: GPL-2.0-only package aa import ( "slices" "strings" ) type MountConditions struct { FsType string Options []string } func MountConditionsFromLog(log map[string]string) MountConditions { if _, present := log["flags"]; present { return MountConditions{ FsType: log["fstype"], Options: strings.Split(log["flags"], ", "), } } return MountConditions{FsType: log["fstype"]} } func (m MountConditions) Less(other MountConditions) bool { if m.FsType == other.FsType { return len(m.Options) < len(other.Options) } return m.FsType < other.FsType } func (m MountConditions) Equals(other MountConditions) bool { return m.FsType == other.FsType && slices.Equal(m.Options, other.Options) } type Mount struct { Qualifier MountConditions Source string MountPoint string } func MountFromLog(log map[string]string) ApparmorRule { return &Mount{ Qualifier: NewQualifierFromLog(log), MountConditions: MountConditionsFromLog(log), Source: log["srcname"], MountPoint: log["name"], } } func (r *Mount) Less(other any) bool { o, _ := other.(*Mount) if r.Qualifier.Equals(o.Qualifier) { if r.Source == o.Source { if r.MountPoint == o.MountPoint { return r.MountConditions.Less(o.MountConditions) } return r.MountPoint < o.MountPoint } return r.Source < o.Source } return r.Qualifier.Less(o.Qualifier) } func (r *Mount) Equals(other any) bool { o, _ := other.(*Mount) return r.Source == o.Source && r.MountPoint == o.MountPoint && r.MountConditions.Equals(o.MountConditions) && r.Qualifier.Equals(o.Qualifier) } type Umount struct { Qualifier MountConditions MountPoint string } func UmountFromLog(log map[string]string) ApparmorRule { return &Umount{ Qualifier: NewQualifierFromLog(log), MountConditions: MountConditionsFromLog(log), MountPoint: log["name"], } } func (r *Umount) Less(other any) bool { o, _ := other.(*Umount) if r.Qualifier.Equals(o.Qualifier) { if r.MountPoint == o.MountPoint { return r.MountConditions.Less(o.MountConditions) } return r.MountPoint < o.MountPoint } return r.Qualifier.Less(o.Qualifier) } func (r *Umount) Equals(other any) bool { o, _ := other.(*Umount) return r.MountPoint == o.MountPoint && r.MountConditions.Equals(o.MountConditions) && r.Qualifier.Equals(o.Qualifier) } type Remount struct { Qualifier MountConditions MountPoint string } func RemountFromLog(log map[string]string) ApparmorRule { return &Remount{ Qualifier: NewQualifierFromLog(log), MountConditions: MountConditionsFromLog(log), MountPoint: log["name"], } } func (r *Remount) Less(other any) bool { o, _ := other.(*Remount) if r.Qualifier.Equals(o.Qualifier) { if r.MountPoint == o.MountPoint { return r.MountConditions.Less(o.MountConditions) } return r.MountPoint < o.MountPoint } return r.Qualifier.Less(o.Qualifier) } func (r *Remount) Equals(other any) bool { o, _ := other.(*Remount) return r.MountPoint == o.MountPoint && r.MountConditions.Equals(o.MountConditions) && r.Qualifier.Equals(o.Qualifier) }