feat(aa-log): new structure for apparmor rules.

This commit is contained in:
Alexandre Pujol 2023-09-25 00:06:07 +01:00
parent 99d1a4e302
commit 923bb66eba
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 428 additions and 192 deletions

34
pkg/aa/network.go Normal file
View file

@ -0,0 +1,34 @@
// apparmor.d - Full set of apparmor profiles
// Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
// SPDX-License-Identifier: GPL-2.0-only
package aa
type AddressExpr struct {
Source string
Destination string
Port string
}
type Network struct {
Qualifier
Domain string
Type string
Protocol string
AddressExpr
}
func NetworkFromLog(log map[string]string, noNewPrivs, fileInherit bool) ApparmorRule {
return &Network{
Qualifier: NewQualifier(false, noNewPrivs, fileInherit),
AddressExpr: AddressExpr{
Source: log["laddr"],
Destination: log["faddr"],
Port: log["lport"],
},
Domain: log["family"],
Type: log["sock_type"],
Protocol: log["protocol"],
}
}