mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
61 lines
1.5 KiB
Go
61 lines
1.5 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package aa
|
|
|
|
type File struct {
|
|
RuleBase
|
|
Qualifier
|
|
Owner bool
|
|
Path string
|
|
Access string
|
|
Target string
|
|
}
|
|
|
|
func newFileFromLog(log map[string]string) Rule {
|
|
owner := false
|
|
fsuid, hasFsUID := log["fsuid"]
|
|
ouid, hasOuUID := log["ouid"]
|
|
isDbus := strings.Contains(log["operation"], "dbus")
|
|
if hasFsUID && hasOuUID && fsuid == ouid && ouid != "0" && !isDbus {
|
|
owner = true
|
|
}
|
|
return &File{
|
|
RuleBase: newRuleFromLog(log),
|
|
Qualifier: newQualifierFromLog(log),
|
|
Owner: owner,
|
|
Path: log["name"],
|
|
Access: toAccess(log["requested_mask"]),
|
|
Target: log["target"],
|
|
}
|
|
}
|
|
|
|
func (r *File) Less(other any) bool {
|
|
o, _ := other.(*File)
|
|
letterR := getLetterIn(fileAlphabet, r.Path)
|
|
letterO := getLetterIn(fileAlphabet, o.Path)
|
|
if fileWeights[letterR] != fileWeights[letterO] && letterR != "" && letterO != "" {
|
|
return fileWeights[letterR] < fileWeights[letterO]
|
|
}
|
|
if r.Path != o.Path {
|
|
return r.Path < o.Path
|
|
}
|
|
if r.Access != o.Access {
|
|
return r.Access < o.Access
|
|
}
|
|
if r.Target != o.Target {
|
|
return r.Target < o.Target
|
|
}
|
|
if o.Owner != r.Owner {
|
|
return r.Owner
|
|
}
|
|
return r.Qualifier.Less(o.Qualifier)
|
|
}
|
|
|
|
func (r *File) Equals(other any) bool {
|
|
o, _ := other.(*File)
|
|
return r.Path == o.Path && r.Access == o.Access && r.Owner == o.Owner &&
|
|
r.Target == o.Target && r.Qualifier.Equals(o.Qualifier)
|
|
}
|