refractor(build): move builder tasks to the builder sub package. Add tests.

This commit is contained in:
Alexandre Pujol 2024-03-25 23:16:00 +00:00
parent 08d4110c2a
commit 16f00ebfc7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 516 additions and 0 deletions

View file

@ -0,0 +1,33 @@
// apparmor.d - Full set of apparmor profiles
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
// SPDX-License-Identifier: GPL-2.0-only
package builder
import (
"github.com/roddhjav/apparmor.d/pkg/prebuild/cfg"
"github.com/roddhjav/apparmor.d/pkg/util"
)
var (
regFullSystemPolicy = util.ToRegexRepl([]string{
`r(PU|U)x,`, `rPx,`,
})
)
type FullSystemPolicy struct {
cfg.Base
}
func init() {
RegisterBuilder(&FullSystemPolicy{
Base: cfg.Base{
Keyword: "fsp",
Msg: "Prevent unconfined transitions in profile rules",
},
})
}
func (b FullSystemPolicy) Apply(profile string) string {
return regFullSystemPolicy.Replace(profile)
}