mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 16:03:51 +01:00
59ac54e2fc
- ABI4 by default, fallback to abi 3. - aa-prebuild cli that can be used by other project shipping profiles. - --file option to cli to only build one dev profile. - add abi version filter to only & exclude directives.
66 lines
1.3 KiB
Go
66 lines
1.3 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package builder
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/paths"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild"
|
|
)
|
|
|
|
var (
|
|
// Build the profiles with the following directive applied
|
|
Builds = []Builder{}
|
|
|
|
// Available builders
|
|
Builders = map[string]Builder{}
|
|
)
|
|
|
|
// Main directive interface
|
|
type Builder interface {
|
|
prebuild.BaseInterface
|
|
Apply(opt *Option, profile string) (string, error)
|
|
}
|
|
|
|
// Builder options
|
|
type Option struct {
|
|
Name string
|
|
File *paths.Path
|
|
}
|
|
|
|
func NewOption(file *paths.Path) *Option {
|
|
return &Option{
|
|
Name: file.Base(),
|
|
File: file,
|
|
}
|
|
}
|
|
|
|
func Register(names ...string) {
|
|
for _, name := range names {
|
|
if b, present := Builders[name]; present {
|
|
Builds = append(Builds, b)
|
|
} else {
|
|
panic(fmt.Sprintf("Unknown builder: %s", name))
|
|
}
|
|
}
|
|
}
|
|
|
|
func RegisterBuilder(d Builder) {
|
|
Builders[d.Name()] = d
|
|
}
|
|
|
|
func Run(file *paths.Path, profile string) (string, error) {
|
|
var err error
|
|
opt := NewOption(file)
|
|
for _, b := range Builds {
|
|
profile, err = b.Apply(opt, profile)
|
|
if err != nil {
|
|
return "", fmt.Errorf("%s %s: %w", b.Name(), opt.File, err)
|
|
}
|
|
}
|
|
return profile, nil
|
|
}
|