// apparmor.d - Full set of apparmor profiles // Copyright (C) 2021-2024 Alexandre Pujol // SPDX-License-Identifier: GPL-2.0-only package aa import ( "slices" ) const tokDBUS = "dbus" func init() { requirements[tokDBUS] = requirement{ "access": []string{ "send", "receive", "bind", "eavesdrop", "r", "read", "w", "write", "rw", }, "bus": []string{"system", "session", "accessibility"}, } } type Dbus struct { RuleBase Qualifier Access []string Bus string Name string Path string Interface string Member string PeerName string PeerLabel string } func newDbusFromLog(log map[string]string) Rule { name := "" peerName := "" if log["mask"] == "bind" { name = log["name"] } else { peerName = log["name"] } return &Dbus{ RuleBase: newRuleFromLog(log), Qualifier: newQualifierFromLog(log), Access: []string{log["mask"]}, Bus: log["bus"], Name: name, Path: log["path"], Interface: log["interface"], Member: log["member"], PeerName: peerName, PeerLabel: log["peer_label"], } } func (r *Dbus) Less(other any) bool { o, _ := other.(*Dbus) for i := 0; i < len(r.Access) && i < len(o.Access); i++ { if r.Access[i] != o.Access[i] { return r.Access[i] < o.Access[i] } } if r.Bus != o.Bus { return r.Bus < o.Bus } if r.Name != o.Name { return r.Name < o.Name } if r.Path != o.Path { return r.Path < o.Path } if r.Interface != o.Interface { return r.Interface < o.Interface } if r.Member != o.Member { return r.Member < o.Member } if r.PeerName != o.PeerName { return r.PeerName < o.PeerName } if r.PeerLabel != o.PeerLabel { return r.PeerLabel < o.PeerLabel } return r.Qualifier.Less(o.Qualifier) } func (r *Dbus) Equals(other any) bool { o, _ := other.(*Dbus) return slices.Equal(r.Access, o.Access) && r.Bus == o.Bus && r.Name == o.Name && r.Path == o.Path && r.Interface == o.Interface && r.Member == o.Member && r.PeerName == o.PeerName && r.PeerLabel == o.PeerLabel && r.Qualifier.Equals(o.Qualifier) } func (r *Dbus) String() string { return renderTemplate(r.Kind(), r) } func (r *Dbus) Constraint() constraint { return blockKind } func (r *Dbus) Kind() string { return tokDBUS }