apparmor.d/pkg/prebuild/builder/userspace.go
2024-05-25 22:32:10 +01:00

44 lines
977 B
Go

// apparmor.d - Full set of apparmor profiles
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
// SPDX-License-Identifier: GPL-2.0-only
package builder
import (
"regexp"
"strings"
"github.com/roddhjav/apparmor.d/pkg/aa"
"github.com/roddhjav/apparmor.d/pkg/prebuild/cfg"
)
var (
regAttachments = regexp.MustCompile(`(profile .* @{exec_path})`)
)
type Userspace struct {
cfg.Base
}
func init() {
RegisterBuilder(&Userspace{
Base: cfg.Base{
Keyword: "userspace",
Msg: "Bypass userspace tools restriction",
},
})
}
func (b Userspace) Apply(opt *Option, profile string) (string, error) {
p := aa.DefaultTunables()
p.ParseVariables(profile)
p.ResolveAttachments()
att := p.NestAttachments()
matches := regAttachments.FindAllString(profile, -1)
if len(matches) > 0 {
strheader := strings.Replace(matches[0], "@{exec_path}", att, -1)
return regAttachments.ReplaceAllLiteralString(profile, strheader), nil
}
return profile, nil
}