feat(aa): add rule constructors from internal parser.
This commit is contained in:
parent
ac9d6d859f
commit
163c5be61c
19 changed files with 456 additions and 75 deletions
|
|
@ -25,6 +25,19 @@ type Ptrace struct {
|
|||
Peer string
|
||||
}
|
||||
|
||||
func newPtrace(q Qualifier, rule rule) (Rule, error) {
|
||||
accesses, err := toAccess(PTRACE, rule.GetString())
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &Ptrace{
|
||||
RuleBase: newBase(rule),
|
||||
Qualifier: q,
|
||||
Access: accesses,
|
||||
Peer: rule.GetValuesAsString("peer"),
|
||||
}, nil
|
||||
}
|
||||
|
||||
func newPtraceFromLog(log map[string]string) Rule {
|
||||
return &Ptrace{
|
||||
RuleBase: newBaseFromLog(log),
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue