mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
89abbae6bd
Improve go apparmor lib. * aa: (62 commits) feat(aa): handle appending value to defined variables. chore(aa): cosmetic. fix: userspace prebuild test. chore: cleanup unit test. feat(aa): improve log conversion. feat(aa): move conversion function to its own file & add unit tests. fix: go linter issue & not defined variables. tests(aa): improve aa unit tests. tests(aa): improve rules unit tests. feat(aa): ensure the prebuild jobs are working. feat(aa): add more unit tests. chore(aa): cleanup. feat(aa): Move sort, merge and format methods to the rules interface. feat(aa): add the hat template. feat(aa): add the Kind struct to manage aa rules. feat(aa): cleanup rules methods. feat(aa): add function to resolve include preamble. feat(aa): updaqte mount flags order. feat(aa): update default tunable selection. feat(aa): parse apparmor preamble files. ...
66 lines
1.3 KiB
Go
66 lines
1.3 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package builder
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/paths"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild/cfg"
|
|
)
|
|
|
|
var (
|
|
// Build the profiles with the following directive applied
|
|
Builds = []Builder{}
|
|
|
|
// Available builders
|
|
Builders = map[string]Builder{}
|
|
)
|
|
|
|
// Main directive interface
|
|
type Builder interface {
|
|
cfg.BaseInterface
|
|
Apply(opt *Option, profile string) (string, error)
|
|
}
|
|
|
|
// Builder options
|
|
type Option struct {
|
|
Name string
|
|
File *paths.Path
|
|
}
|
|
|
|
func NewOption(file *paths.Path) *Option {
|
|
return &Option{
|
|
Name: file.Base(),
|
|
File: file,
|
|
}
|
|
}
|
|
|
|
func Register(names ...string) {
|
|
for _, name := range names {
|
|
if b, present := Builders[name]; present {
|
|
Builds = append(Builds, b)
|
|
} else {
|
|
panic(fmt.Sprintf("Unknown builder: %s", name))
|
|
}
|
|
}
|
|
}
|
|
|
|
func RegisterBuilder(d Builder) {
|
|
Builders[d.Name()] = d
|
|
}
|
|
|
|
func Run(file *paths.Path, profile string) (string, error) {
|
|
var err error
|
|
opt := NewOption(file)
|
|
for _, b := range Builds {
|
|
profile, err = b.Apply(opt, profile)
|
|
if err != nil {
|
|
return "", fmt.Errorf("%s %s: %w", b.Name(), opt.File, err)
|
|
}
|
|
}
|
|
return profile, nil
|
|
}
|