mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-12-25 14:36:33 +01:00
82 lines
2.3 KiB
Go
82 lines
2.3 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package main
|
|
|
|
import (
|
|
"flag"
|
|
"fmt"
|
|
"os"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/logging"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild"
|
|
)
|
|
|
|
const usage = `prebuild [-h] [--full] [--complain | --enforce]
|
|
|
|
Prebuild apparmor.d profiles for a given distribution.
|
|
|
|
Options:
|
|
-h, --help Show this help message and exit.
|
|
-f, --full Set AppArmor for full system policy.
|
|
-c, --complain Set complain flag on all profiles.
|
|
-e, --enforce Set enforce flag on all profiles.
|
|
--abi4 Convert the profiles to Apparmor abi/4.0.
|
|
`
|
|
|
|
var (
|
|
help bool
|
|
full bool
|
|
complain bool
|
|
enforce bool
|
|
abi4 bool
|
|
)
|
|
|
|
func init() {
|
|
flag.BoolVar(&help, "h", false, "Show this help message and exit.")
|
|
flag.BoolVar(&help, "help", false, "Show this help message and exit.")
|
|
flag.BoolVar(&full, "f", false, "Set AppArmor for full system policy.")
|
|
flag.BoolVar(&full, "full", false, "Set AppArmor for full system policy.")
|
|
flag.BoolVar(&complain, "c", false, "Set complain flag on all profiles.")
|
|
flag.BoolVar(&complain, "complain", false, "Set complain flag on all profiles.")
|
|
flag.BoolVar(&enforce, "e", false, "Set enforce flag on all profiles.")
|
|
flag.BoolVar(&enforce, "enforce", false, "Set enforce flag on all profiles.")
|
|
flag.BoolVar(&abi4, "abi4", false, "Convert the profiles to Apparmor abi/4.0.")
|
|
}
|
|
|
|
func aaPrebuild() error {
|
|
logging.Step("Building apparmor.d profiles for %s.", prebuild.Distribution)
|
|
|
|
if full {
|
|
prebuild.Prepares = append(prebuild.Prepares, prebuild.SetFullSystemPolicy)
|
|
prebuild.Builds = append(prebuild.Builds, prebuild.BuildFullSystemPolicy)
|
|
} else {
|
|
prebuild.Prepares = append(prebuild.Prepares, prebuild.SetDefaultSystemd)
|
|
}
|
|
if complain {
|
|
prebuild.Builds = append(prebuild.Builds, prebuild.BuildComplain)
|
|
} else if enforce {
|
|
prebuild.Builds = append(prebuild.Builds, prebuild.BuildEnforce)
|
|
}
|
|
if abi4 {
|
|
prebuild.Builds = append(prebuild.Builds, prebuild.BuildABI3)
|
|
}
|
|
|
|
if err := prebuild.Prepare(); err != nil {
|
|
return err
|
|
}
|
|
return prebuild.Build()
|
|
}
|
|
|
|
func main() {
|
|
flag.Usage = func() { fmt.Print(usage) }
|
|
flag.Parse()
|
|
if help {
|
|
flag.Usage()
|
|
os.Exit(0)
|
|
}
|
|
if err := aaPrebuild(); err != nil {
|
|
logging.Fatal(err.Error())
|
|
}
|
|
}
|