mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
232 lines
6.2 KiB
Django/Jinja
232 lines
6.2 KiB
Django/Jinja
{{- /* apparmor.d - Full set of apparmor profiles */ -}}
|
|
{{- /* Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io> */ -}}
|
|
{{- /* SPDX-License-Identifier: GPL-2.0-only */ -}}
|
|
|
|
{{- range .Abi -}}
|
|
{{- if .IsMagic -}}
|
|
{{ "abi <" }}{{ .Path }}{{ ">,\n" }}
|
|
{{- else -}}
|
|
{{ "abi \"" }}{{ .Path }}{{ "\",\n" }}
|
|
{{- end }}
|
|
{{ end -}}
|
|
|
|
{{- range .Aliases -}}
|
|
{{ "alias " }}{{ .Path }}{{ " -> " }}{{ .RewrittenPath }}{{ ",\n" }}
|
|
{{ end -}}
|
|
|
|
{{- range .Includes -}}
|
|
{{ template "include" . }}{{ "\n" }}
|
|
{{ end -}}
|
|
|
|
{{- range .Variables -}}
|
|
{{ "@{" }}{{ .Name }}{{ "} = " }}
|
|
{{- range .Values -}}
|
|
{{ . }}{{ " " }}
|
|
{{- end }}
|
|
{{ end -}}
|
|
|
|
{{- "profile" -}}
|
|
{{- with .Name -}}
|
|
{{ " " }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Attachments -}}
|
|
{{ " " }}{{ join . }}
|
|
{{- end -}}
|
|
{{- with .Attributes -}}
|
|
{{ " xattrs=(" }}{{ join . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Flags -}}
|
|
{{ " flags=(" }}{{ join . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{ " {\n" }}
|
|
|
|
{{- $oldtype := "" -}}
|
|
{{- range .Rules -}}
|
|
{{- $type := typeof . -}}
|
|
{{- if and (ne $type $oldtype) (ne $oldtype "") -}}
|
|
{{- "\n" -}}
|
|
{{- end -}}
|
|
{{- indent "" -}}
|
|
|
|
{{- if eq $type "Include" -}}
|
|
{{ template "include" . }}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Rlimit" -}}
|
|
{{ "set rlimit " }}{{ .Key }} {{ .Op }} {{ .Value }}{{ "," }}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Capability" -}}
|
|
{{ template "qualifier" . }}{{ "capability " }}{{ .Name }}{{ "," }}{{ template "comments" . }}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Network" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{ "network" }}
|
|
{{- with .Domain -}}
|
|
{{ " " }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Type -}}
|
|
{{ " " }}{{ . }}
|
|
{{- else -}}
|
|
{{- with .Protocol -}}
|
|
{{ " " }}{{ . }}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Mount" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "mount" -}}
|
|
{{- with .FsType -}}
|
|
{{ " fstype=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Options -}}
|
|
{{ " options=(" }}{{ join . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Source -}}
|
|
{{ " " }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .MountPoint -}}
|
|
{{ " -> " }}{{ . }}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Umount" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "umount" -}}
|
|
{{- with .FsType -}}
|
|
{{ " fstype=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Options -}}
|
|
{{ " options=(" }}{{ join . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .MountPoint -}}
|
|
{{ " " }}{{ . }}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Remount" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "remount" -}}
|
|
{{- with .FsType -}}
|
|
{{ " fstype=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Options -}}
|
|
{{ " options=(" }}{{ join . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Remount -}}
|
|
{{ " " }}{{ . }}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Unix" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "unix" -}}
|
|
{{- with .Access -}}
|
|
{{ " (" }}{{ . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Type -}}
|
|
{{ " type=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Address -}}
|
|
{{ " addr=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- if .Peer -}}
|
|
{{ " peer=(label=" }}{{ .Peer }}
|
|
{{- with .PeerAddr -}}
|
|
{{ ", addr="}}{{ . }}
|
|
{{- end -}}
|
|
{{- ")" -}}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Ptrace" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "ptrace" -}}
|
|
{{- with .Access -}}
|
|
{{ " (" }}{{ . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Peer -}}
|
|
{{ " peer=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Signal" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "signal" -}}
|
|
{{- with .Access -}}
|
|
{{ " (" }}{{ . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Set -}}
|
|
{{ " set=(" }}{{ . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Peer -}}
|
|
{{ " peer=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "Dbus" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{- "dbus" -}}
|
|
{{- if eq .Access "bind" -}}
|
|
{{ " bind bus=" }}{{ .Bus }}{{ " name=" }}{{ .Name }}
|
|
{{- else -}}
|
|
{{ " " }}{{ .Access }}
|
|
{{- with .Bus -}}
|
|
{{ " bus=" }}{{ . }}
|
|
{{- end -}}
|
|
{{- with .Path -}}
|
|
{{ " path=" }}{{ . }}
|
|
{{- end -}}
|
|
{{ "\n" }}
|
|
{{- with .Interface -}}
|
|
{{ overindent "interface=" }}{{ . }}{{ "\n" }}
|
|
{{- end -}}
|
|
{{- with .Member -}}
|
|
{{ overindent "member=" }}{{ . }}{{ " " }}{{ "\n" }}
|
|
{{- end -}}
|
|
{{- if and .Name .Label -}}
|
|
{{ overindent "peer=(name=" }}{{ .Name }}{{ ", label="}}{{ .Label }}{{ ")" }}
|
|
{{- else -}}
|
|
{{- with .Name -}}
|
|
{{ overindent "peer=(name=" }}{{ . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- with .Label -}}
|
|
{{ overindent "peer=(label=" }}{{ . }}{{ ")" }}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- if eq $type "File" -}}
|
|
{{- template "qualifier" . -}}
|
|
{{ .Path }}{{ " " }}{{ .Access }}
|
|
{{- with .Target -}}
|
|
{{ " -> " }}{{ . }}
|
|
{{- end -}}
|
|
{{- "," -}}
|
|
{{- template "comments" . -}}
|
|
{{- end -}}
|
|
|
|
{{- "\n" -}}
|
|
{{- $oldtype = $type -}}
|
|
{{- end -}}
|
|
|
|
{{- "}\n" -}} |