mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
59ac54e2fc
- ABI4 by default, fallback to abi 3. - aa-prebuild cli that can be used by other project shipping profiles. - --file option to cli to only build one dev profile. - add abi version filter to only & exclude directives.
64 lines
1.5 KiB
Go
64 lines
1.5 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package prepare
|
|
|
|
import (
|
|
"fmt"
|
|
"regexp"
|
|
"strings"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild"
|
|
"github.com/roddhjav/apparmor.d/pkg/util"
|
|
)
|
|
|
|
var (
|
|
regFlags = regexp.MustCompile(`flags=\(([^)]+)\)`)
|
|
regProfileHeader = regexp.MustCompile(` {\n`)
|
|
)
|
|
|
|
type SetFlags struct {
|
|
prebuild.Base
|
|
}
|
|
|
|
func init() {
|
|
RegisterTask(&SetFlags{
|
|
Base: prebuild.Base{
|
|
Keyword: "setflags",
|
|
Msg: "Set flags on some profiles",
|
|
},
|
|
})
|
|
}
|
|
|
|
func (p SetFlags) Apply() ([]string, error) {
|
|
res := []string{}
|
|
for _, name := range []string{"main", prebuild.Distribution} {
|
|
for profile, flags := range prebuild.Flags.Read(name) {
|
|
file := prebuild.RootApparmord.Join(profile)
|
|
if !file.Exist() {
|
|
res = append(res, fmt.Sprintf("Profile %s not found, ignoring", profile))
|
|
continue
|
|
}
|
|
|
|
// Overwrite profile flags
|
|
if len(flags) > 0 {
|
|
flagsStr := " flags=(" + strings.Join(flags, ",") + ") {\n"
|
|
out, err := util.ReadFile(file)
|
|
if err != nil {
|
|
return res, err
|
|
}
|
|
|
|
// Remove all flags definition, then set manifest' flags
|
|
out = regFlags.ReplaceAllLiteralString(out, "")
|
|
out = regProfileHeader.ReplaceAllLiteralString(out, flagsStr)
|
|
if err := file.WriteFile([]byte(out)); err != nil {
|
|
return res, err
|
|
}
|
|
}
|
|
}
|
|
res = append(res, prebuild.FlagDir.Join(name+".flags").String())
|
|
}
|
|
return res, nil
|
|
}
|