mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 16:03:51 +01:00
49 lines
1.0 KiB
Go
49 lines
1.0 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package directive
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/aa"
|
|
)
|
|
|
|
type Exec struct {
|
|
DirectiveBase
|
|
}
|
|
|
|
func init() {
|
|
Directives["exec"] = &Exec{
|
|
DirectiveBase: DirectiveBase{
|
|
message: "Exec directive applied",
|
|
usage: `#aa:exec [P|U|p|u|i|] profiles_name...`,
|
|
},
|
|
}
|
|
}
|
|
|
|
func (d Exec) Apply(opt *Option, profile string) string {
|
|
res := ""
|
|
transition := "Px"
|
|
for name := range opt.Args {
|
|
tmp, err := rootApparmord.Join(name).ReadFile()
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
profiletoTransition := string(tmp)
|
|
|
|
p := aa.DefaultTunables()
|
|
p.ParseVariables(profiletoTransition)
|
|
for _, variable := range p.Variables {
|
|
if variable.Name == "exec_path" {
|
|
for _, value := range variable.Values {
|
|
res += " " + value + " " + transition + ",\n"
|
|
}
|
|
}
|
|
}
|
|
profile = strings.Replace(profile, opt.Raw, res, -1)
|
|
}
|
|
return profile
|
|
}
|