mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
d37de1fd46
This patch moves the audit functionality to an audit specific command function. As an aside, the -r option is left in place here, because aa-audit is a bit orthogonal to aa-enforce, aa-complain, and aa-disable. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Seth Arnold <seth.arnold@canonical.com>
41 lines
1.4 KiB
Python
Executable file
41 lines
1.4 KiB
Python
Executable file
#! /usr/bin/env python
|
|
# ----------------------------------------------------------------------
|
|
# Copyright (C) 2013 Kshitij Gupta <kgupta8592@gmail.com>
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License as published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# ----------------------------------------------------------------------
|
|
import argparse
|
|
import traceback
|
|
|
|
import apparmor.tools
|
|
|
|
# setup module translations
|
|
from apparmor.translations import init_translation
|
|
_ = init_translation()
|
|
|
|
parser = argparse.ArgumentParser(description=_('Switch the given programs to audit mode'))
|
|
parser.add_argument('-d', '--dir', type=str, help=_('path to profiles'))
|
|
parser.add_argument('-r', '--remove', action='store_true', help=_('remove audit mode'))
|
|
parser.add_argument('program', type=str, nargs='+', help=_('name of program'))
|
|
parser.add_argument('--trace', action='store_true', help=_('Show full trace'))
|
|
args = parser.parse_args()
|
|
|
|
try:
|
|
tool = apparmor.tools.aa_tools('audit', args)
|
|
|
|
tool.cmd_audit()
|
|
|
|
except Exception as e:
|
|
if not args.trace:
|
|
print(e.value + "\n")
|
|
|
|
else:
|
|
traceback.print_exc()
|