refractor(build): move builder tasks to the builder sub package. Add tests.
This commit is contained in:
parent
08d4110c2a
commit
16f00ebfc7
7 changed files with 516 additions and 0 deletions
33
pkg/prebuild/builder/fsp.go
Normal file
33
pkg/prebuild/builder/fsp.go
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
// apparmor.d - Full set of apparmor profiles
|
||||
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
||||
// SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
package builder
|
||||
|
||||
import (
|
||||
"github.com/roddhjav/apparmor.d/pkg/prebuild/cfg"
|
||||
"github.com/roddhjav/apparmor.d/pkg/util"
|
||||
)
|
||||
|
||||
var (
|
||||
regFullSystemPolicy = util.ToRegexRepl([]string{
|
||||
`r(PU|U)x,`, `rPx,`,
|
||||
})
|
||||
)
|
||||
|
||||
type FullSystemPolicy struct {
|
||||
cfg.Base
|
||||
}
|
||||
|
||||
func init() {
|
||||
RegisterBuilder(&FullSystemPolicy{
|
||||
Base: cfg.Base{
|
||||
Keyword: "fsp",
|
||||
Msg: "Prevent unconfined transitions in profile rules",
|
||||
},
|
||||
})
|
||||
}
|
||||
|
||||
func (b FullSystemPolicy) Apply(profile string) string {
|
||||
return regFullSystemPolicy.Replace(profile)
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue