mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 16:03:51 +01:00
59ac54e2fc
- ABI4 by default, fallback to abi 3. - aa-prebuild cli that can be used by other project shipping profiles. - --file option to cli to only build one dev profile. - add abi version filter to only & exclude directives.
48 lines
1.0 KiB
Go
48 lines
1.0 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package builder
|
|
|
|
import (
|
|
"slices"
|
|
"strings"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild"
|
|
)
|
|
|
|
type Enforce struct {
|
|
prebuild.Base
|
|
}
|
|
|
|
func init() {
|
|
RegisterBuilder(&Enforce{
|
|
Base: prebuild.Base{
|
|
Keyword: "enforce",
|
|
Msg: "All profiles have been enforced",
|
|
},
|
|
})
|
|
}
|
|
|
|
func (b Enforce) Apply(opt *Option, profile string) (string, error) {
|
|
matches := regFlags.FindStringSubmatch(profile)
|
|
if len(matches) == 0 {
|
|
return profile, nil
|
|
}
|
|
|
|
flags := strings.Split(matches[1], ",")
|
|
idx := slices.Index(flags, "complain")
|
|
if idx == -1 {
|
|
return profile, nil
|
|
}
|
|
flags = slices.Delete(flags, idx, idx+1)
|
|
strFlags := "{\n"
|
|
if len(flags) >= 1 {
|
|
strFlags = " flags=(" + strings.Join(flags, ",") + ") {\n"
|
|
}
|
|
|
|
// Remove all flags definition, then set new flags
|
|
profile = regFlags.ReplaceAllLiteralString(profile, "")
|
|
return regProfileHeader.ReplaceAllLiteralString(profile, strFlags), nil
|
|
}
|