felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(aa): add requirements map.

Browse source
This commit is contained in:
Alexandre Pujol 2024-05-25 22:01:29 +01:00
parent e38f5b4637
commit 744c745394
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 163 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

15
pkg/aa/capability.go
View file

@ -10,6 +10,21 @@ import (
const tokCAPABILITY = "capability"
func init() {
requirements[tokCAPABILITY] = requirement{
"name": {
"audit_control", "audit_read", "audit_write", "block_suspend", "bpf",
"checkpoint_restore", "chown", "dac_override", "dac_read_search",
"fowner", "fsetid", "ipc_lock", "ipc_owner", "kill", "lease",
"linux_immutable", "mac_admin", "mac_override", "mknod", "net_admin",
"net_bind_service", "net_broadcast", "net_raw", "perfmon", "setfcap",
"setgid", "setpcap", "setuid", "sys_admin", "sys_boot", "sys_chroot",
"sys_module", "sys_nice", "sys_pacct", "sys_ptrace", "sys_rawio",
"sys_resource", "sys_time", "sys_tty_config", "syslog", "wake_alarm",
},
}
}
type Capability struct {
RuleBase
Qualifier