mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 06:45:38 +00:00
Code Issues Releases Wiki Activity

apparmor.vim: add support for the 'all' rule

Browse Source 
... and update the bugreporting info in the header
This commit is contained in:
Christian Boltz
2023-09-10 18:38:48 +02:00
parent 4e758a838d
commit 583d116871
1 changed files with 17 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
utils/vim/apparmor.vim.in
View File

@@ -1,30 +1,25 @@
" ---------------------------------------------------------------------- " ----------------------------------------------------------------------
" Copyright (c) 2005 Novell, Inc. All Rights Reserved. " Copyright (c) 2005 Novell, Inc. All Rights Reserved.
" Copyright (c) 2006-2012 Christian Boltz. All Rights Reserved. " Copyright (c) 2006-2023 Christian Boltz. All Rights Reserved.
" "
" This program is free software; you can redistribute it and/or " This program is free software; you can redistribute it and/or
" modify it under the terms of version 2 of the GNU General Public " modify it under the terms of version 2 of the GNU General Public
" License as published by the Free Software Foundation. " License as published by the Free Software Foundation.
" "
" This program is distributed in the hope that it will be useful, " This program is distributed in the hope that it will be useful,
" but WITHOUT ANY WARRANTY; without even the implied warranty of " but WITHOUT ANY WARRANTY; without even the implied warranty of
" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the " MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
" GNU General Public License for more details. " GNU General Public License for more details.
" "
" You should have received a copy of the GNU General Public License " You should have received a copy of the GNU General Public License
" along with this program; if not, contact Novell, Inc. " along with this program; if not, contact Novell, Inc.
"
" To contact Novell about this file by physical or electronic mail,
" you may find current contact information at www.novell.com.
" "
" To contact Christian Boltz about this file by physical or electronic " If you want to report a bug for apparmor.vim, please do so at
" mail, you may find current contact information at www.cboltz.de/en/kontakt. " - https://gitlab.com/apparmor/apparmor/ or
" " - https://bugzilla.opensuse.org (assign it to suse-beta[AT]cboltz.de)
" If you want to report a bug via bugzilla.novell.com, please assign it
" to suse-beta[AT]cboltz.de (replace [AT] with @).
" ---------------------------------------------------------------------- " ----------------------------------------------------------------------
" "
" stick this file into ~/.vim/syntax/ and add these commands into your .vimrc " stick this file into ~/.vim/syntax/ and add these commands into your .vimrc
" to have vim automagically use this syntax file for these directories: " to have vim automagically use this syntax file for these directories:
" "
" autocmd BufNewFile,BufRead /etc/apparmor.d/* set syntax=apparmor " autocmd BufNewFile,BufRead /etc/apparmor.d/* set syntax=apparmor
@@ -49,6 +44,7 @@ syntax case match
" hi sdComment2 ctermfg=darkblue " hi sdComment2 ctermfg=darkblue
hi sdGlob ctermfg=darkmagenta hi sdGlob ctermfg=darkmagenta
hi sdAlias ctermfg=darkmagenta hi sdAlias ctermfg=darkmagenta
hi sdAll ctermfg=darkred ctermbg=yellow
hi sdEntryWriteExec ctermfg=black ctermbg=yellow hi sdEntryWriteExec ctermfg=black ctermbg=yellow
hi sdEntryUX ctermfg=darkred cterm=underline hi sdEntryUX ctermfg=darkred cterm=underline
hi sdEntryUXe ctermfg=darkred hi sdEntryUXe ctermfg=darkred
@@ -117,12 +113,19 @@ syn match sdAlias /\v^\s*alias\s+@@FILENAME@@\s+-\>\s+@@FILENAME@@@@EOL@@/ conta
" syn match sdComment /#.*/ " syn match sdComment /#.*/
syn cluster sdEntry contains=sdEntryWriteExec,sdEntryR,sdEntryW,sdEntryIX,sdEntryPX,sdEntryPXe,sdEntryUX,sdEntryUXe,sdEntryM,sdCap,sdSetCap,sdExtHat,sdRLimit,sdNetwork,sdNetworkDanger,sdEntryChangeProfile " List of all (supported) rules inside a profile.
" XXX When adding support for a new rule type, also add it here. XXX
" XXX Otherwise it will be highlighted as an error. XXX
syn cluster sdEntry contains=sdAll,sdEntryWriteExec,sdEntryR,sdEntryW,sdEntryIX,sdEntryPX,sdEntryPXe,sdEntryUX,sdEntryUXe,sdEntryM,sdCap,sdSetCap,sdExtHat,sdRLimit,sdNetwork,sdNetworkDanger,sdEntryChangeProfile
" TODO: support audit and deny keywords for all rules (not only for files) " TODO: support audit and deny keywords for all rules (not only for files)
" TODO: highlight audit and deny keywords everywhere " TODO: highlight audit and deny keywords everywhere
" 'all' rule
syn match sdAll /\v^\s*@@auditdeny@@all@@EOL@@/ contains=sdComment nextgroup=@sdEntry,sdComment,sdError,sdInclude
" Capability line " Capability line
" normal capabilities - really keep this list? syn match sdCap should be enough... (difference: sdCapKey words would loose underlining) " normal capabilities - really keep this list? syn match sdCap should be enough... (difference: sdCapKey words would loose underlining)