mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 18:17:09 +00:00
68 lines
2.4 KiB
Python
68 lines
2.4 KiB
Python
|
#!/usr/bin/python
|
||
|
|
import sys
|
||
|
|
import os
|
||
|
|
import argparse
|
||
|
|
|
||
|
|
import apparmor.aa as apparmor
|
||
|
|
|
||
|
|
parser = argparse.ArgumentParser(description='Disable the profile for the given programs')
|
||
|
|
parser.add_argument('-d', type=str, help='path to profiles')
|
||
|
|
parser.add_argument('program', type=str, nargs='+', help='name of program to have profile disabled')
|
||
|
|
args = parser.parse_args()
|
||
|
|
|
||
|
|
profiledir = args.d
|
||
|
|
profiling = args.program
|
||
|
|
|
||
|
|
if profiledir:
|
||
|
|
apparmor.profile_dir = apparmor.get_full_path(profiledir)
|
||
|
|
if not os.path.isdir(apparmor.profile_dir):
|
||
|
|
raise apparmor.AppArmorException("Can't find AppArmor profiles in %s." %profiledir)
|
||
|
|
|
||
|
|
disabledir = apparmor.profile_dir+'/disable'
|
||
|
|
if not os.path.isdir(disabledir):
|
||
|
|
raise apparmor.AppArmorException("Can't find AppArmor disable directorys %s." %disabledir)
|
||
|
|
|
||
|
|
for p in profiling:
|
||
|
|
if not p:
|
||
|
|
continue
|
||
|
|
|
||
|
|
program = None
|
||
|
|
if os.path.exists(p):
|
||
|
|
program = apparmor.get_full_path(p).strip()
|
||
|
|
else:
|
||
|
|
which = apparmor.which(p)
|
||
|
|
if which:
|
||
|
|
program = apparmor.get_full_path(which)
|
||
|
|
|
||
|
|
if os.path.exists(program):
|
||
|
|
apparmor.read_profiles()
|
||
|
|
filename = apparmor.get_profile_filename(program)
|
||
|
|
|
||
|
|
if not os.path.isfile(filename) or apparmor.is_skippable_file(filename):
|
||
|
|
continue
|
||
|
|
|
||
|
|
bname = os.path.basename(filename)
|
||
|
|
if not bname:
|
||
|
|
apparmor.AppArmorException(_('Unable to find basename for %s.')%filename)
|
||
|
|
|
||
|
|
sys.stdout.write(_('Disabling %s.\n')%program)
|
||
|
|
|
||
|
|
link = '%s/%s'%(disabledir, bname)
|
||
|
|
if not os.path.exists(link):
|
||
|
|
try:
|
||
|
|
os.symlink(filename, link)
|
||
|
|
except:
|
||
|
|
raise apparmor.AppArmorException('Could not create %s symlink to %s.'%(link, filename))
|
||
|
|
|
||
|
|
cmd_info = apparmor.cmd(['cat', filename, '|', parser, '-I%s'%apparmor.profile_dir, '-R 2>&1', '1>/dev/null'])
|
||
|
|
if cmd_info[0] != 0:
|
||
|
|
raise apparmor.AppArmorException(cmd_info[1])
|
||
|
|
else:
|
||
|
|
if '/' not in p:
|
||
|
|
apparmor.UI_Info(_("Can't find %s in the system path list. If the name of the application is correct, please run 'which %s' as a user with correct PATH environment set up in order to find the fully-qualified path.")%(p, p))
|
||
|
|
else:
|
||
|
|
apparmor.UI_Info(_("%s does not exist, please double-check the path.")%p)
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
sys.exit(0)
|