// apparmor.d - Full set of apparmor profiles // Copyright (C) 2021-2023 Alexandre Pujol // SPDX-License-Identifier: GPL-2.0-only package aa type File struct { Qualifier Path string Access string Target string } func FileFromLog(log map[string]string, noNewPrivs, fileInherit bool) ApparmorRule { owner := false if log["fsuid"] == log["ouid"] && log["OUID"] != "root" { owner = true } return &File{ Qualifier: NewQualifier(owner, noNewPrivs, fileInherit), Path: log["name"], Access: maskToAccess[log["requested_mask"]], Target: log["target"], } } func (r *File) Less(other any) bool { o, _ := other.(*File) if r.Qualifier.Equals(o.Qualifier) { if r.Path == o.Path { if r.Access == o.Access { return r.Target < o.Target } return r.Access < o.Access } return r.Path < o.Path } return r.Qualifier.Less(o.Qualifier) } func (r *File) Equals(other any) bool { o, _ := other.(*File) return r.Path == o.Path && r.Access == o.Access && r.Target == o.Target && r.Qualifier.Equals(o.Qualifier) }