mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 16:03:51 +01:00
59ac54e2fc
- ABI4 by default, fallback to abi 3. - aa-prebuild cli that can be used by other project shipping profiles. - --file option to cli to only build one dev profile. - add abi version filter to only & exclude directives.
63 lines
1.4 KiB
Go
63 lines
1.4 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package prebuild
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/paths"
|
|
"github.com/roddhjav/apparmor.d/pkg/util"
|
|
)
|
|
|
|
// Default content of debian/apparmor.d.hide. Whonix has special addition.
|
|
var Hide = `# This file is generated by "make", all edit will be lost.
|
|
|
|
/etc/apparmor.d/usr.bin.firefox
|
|
/etc/apparmor.d/usr.sbin.cups-browsed
|
|
/etc/apparmor.d/usr.sbin.cupsd
|
|
/etc/apparmor.d/usr.sbin.rsyslogd
|
|
`
|
|
|
|
type Flagger struct{}
|
|
|
|
func (f Flagger) Read(name string) map[string][]string {
|
|
res := map[string][]string{}
|
|
path := FlagDir.Join(name + ".flags")
|
|
if !path.Exist() {
|
|
return res
|
|
}
|
|
|
|
lines := util.MustReadFileAsLines(path)
|
|
for _, line := range lines {
|
|
manifest := strings.Split(line, " ")
|
|
profile := manifest[0]
|
|
flags := []string{}
|
|
if len(manifest) > 1 {
|
|
flags = strings.Split(manifest[1], ",")
|
|
}
|
|
res[profile] = flags
|
|
}
|
|
return res
|
|
}
|
|
|
|
type Ignorer struct{}
|
|
|
|
func (i Ignorer) Read(name string) []string {
|
|
path := IgnoreDir.Join(name + ".ignore")
|
|
if !path.Exist() {
|
|
return []string{}
|
|
}
|
|
return util.MustReadFileAsLines(path)
|
|
}
|
|
|
|
type DebianHider struct {
|
|
path *paths.Path
|
|
}
|
|
|
|
// Initialize the file with content from Hide
|
|
func (d DebianHider) Init() error {
|
|
return d.path.WriteFile([]byte(Hide))
|
|
}
|