mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-12-28 16:06:54 +01:00
75 lines
1.7 KiB
Go
75 lines
1.7 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package main
|
|
|
|
import (
|
|
"slices"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild/builder"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild/cli"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild/prepare"
|
|
)
|
|
|
|
// Cli arguments have priority over the settings entered here
|
|
func init() {
|
|
// Define the default ABI
|
|
prebuild.ABI = 4
|
|
|
|
// Define the tasks applied by default
|
|
prepare.Register(
|
|
"synchronise",
|
|
"ignore",
|
|
"merge",
|
|
"configure",
|
|
"setflags",
|
|
"overwrite",
|
|
"systemd-default",
|
|
)
|
|
|
|
// Build tasks applied by default
|
|
builder.Register(
|
|
"userspace", // Resolve variable in the userspace profile
|
|
"dev", // Temporary fix for #74, #80 & #235
|
|
)
|
|
|
|
// Compatibility with AppArmor 3
|
|
switch prebuild.Distribution {
|
|
case "arch":
|
|
prebuild.ABI = 3
|
|
|
|
case "ubuntu":
|
|
if !slices.Contains([]string{"noble"}, prebuild.Release["VERSION_CODENAME"]) {
|
|
prebuild.ABI = 3
|
|
}
|
|
|
|
case "debian":
|
|
prebuild.ABI = 3
|
|
|
|
case "whonix":
|
|
prebuild.ABI = 3
|
|
|
|
// Hide rewrittem Whonix profiles
|
|
prebuild.Hide += `/etc/apparmor.d/abstractions/base.d/kicksecure
|
|
/etc/apparmor.d/home.tor-browser.firefox
|
|
/etc/apparmor.d/tunables/homsanitycheck
|
|
/etc/apparmor.d/usr.bin.url_e.d/anondist
|
|
/etc/apparmor.d/tunables/home.d/live-mode
|
|
/etc/apparmor.d/tunables/home.d/qubes-whonix-anondist
|
|
/etc/apparmor.d/usr.bin.hexchat
|
|
/etc/apparmor.d/usr.bin.sdwdate
|
|
/etc/apparmor.d/usr.bin.systemcheck
|
|
/etc/apparmor.d/usr.bin.timeto_unixtime
|
|
/etc/apparmor.d/whonix-firewall
|
|
`
|
|
}
|
|
if prebuild.ABI == 3 {
|
|
builder.Register("abi3")
|
|
}
|
|
}
|
|
|
|
func main() {
|
|
cli.Prebuild()
|
|
}
|