mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
127 lines
3.1 KiB
Django/Jinja
127 lines
3.1 KiB
Django/Jinja
{{- /* apparmor.d - Full set of apparmor profiles */ -}}
|
|
{{- /* Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io> */ -}}
|
|
{{- /* SPDX-License-Identifier: GPL-2.0-only */ -}}
|
|
|
|
{{- define "rules" -}}
|
|
|
|
{{- $oldkind := "" -}}
|
|
{{- range . -}}
|
|
{{- $kind := kindof . -}}
|
|
{{- if eq $kind "" -}}
|
|
{{- "\n" -}}
|
|
{{- continue -}}
|
|
{{- end -}}
|
|
{{- if eq $kind "comment" -}}
|
|
{{- indent "" -}}
|
|
{{- template "comment" . -}}
|
|
{{- "\n" -}}
|
|
{{- continue -}}
|
|
{{- end -}}
|
|
|
|
{{- if and (ne $kind $oldkind) (ne $oldkind "") -}}
|
|
{{- "\n" -}}
|
|
{{- end -}}
|
|
{{- indent "" -}}
|
|
|
|
{{- if eq $kind "abi" -}}
|
|
{{- template "abi" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "alias" -}}
|
|
{{- template "alias" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "include" -}}
|
|
{{- template "include" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "variable" -}}
|
|
{{- template "variable" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "all" -}}
|
|
{{- template "all" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "rlimit" -}}
|
|
{{- template "rlimit" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "userns" -}}
|
|
{{- template "userns" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "capability" -}}
|
|
{{- template "capability" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "network" -}}
|
|
{{- template "network" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "mount" -}}
|
|
{{- template "mount" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "remount" -}}
|
|
{{- template "remount" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "umount" -}}
|
|
{{- template "umount" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "pivot_root" -}}
|
|
{{- template "pivot_root" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "change_profile" -}}
|
|
{{- template "change_profile" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "mqueue" -}}
|
|
{{- template "mqueue" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "io_uring" -}}
|
|
{{- template "io_uring" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "unix" -}}
|
|
{{- template "unix" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "ptrace" -}}
|
|
{{- template "ptrace" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "signal" -}}
|
|
{{- template "signal" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "dbus" -}}
|
|
{{- template "dbus" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "file" -}}
|
|
{{- template "file" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "link" -}}
|
|
{{- template "link" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "profile" -}}
|
|
{{- template "profile" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $kind "hat" -}}
|
|
{{- template "hat" . -}}
|
|
{{- end -}}
|
|
|
|
{{- "\n" -}}
|
|
{{- $oldkind = $kind -}}
|
|
{{- end -}}
|
|
|
|
{{- end -}}
|