mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 10:07:12 +00:00
c0fcd1698b
Add basic support for the priority rules prefix. This patch does not allow the utils to set or suggest priorities. It allows parsing and retaining of the priority prefix if it already exists on rules and checking if it's in the supported range. Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com>
58 lines
2.1 KiB
Python
58 lines
2.1 KiB
Python
# ----------------------------------------------------------------------
|
|
# Copyright (C) 2020 Christian Boltz <apparmor@cboltz.de>
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License as published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# ----------------------------------------------------------------------
|
|
|
|
from apparmor.common import AppArmorBug
|
|
from apparmor.regex import RE_ABI
|
|
from apparmor.rule.include import IncludeRule, IncludeRuleset
|
|
from apparmor.translations import init_translation
|
|
|
|
_ = init_translation()
|
|
|
|
|
|
# abi and include rules have a very similar syntax
|
|
# base AbiRule on IncludeRule to inherit most of its behaviour
|
|
class AbiRule(IncludeRule):
|
|
"""Class to handle and store a single abi rule"""
|
|
|
|
rule_name = 'abi'
|
|
_match_re = RE_ABI
|
|
|
|
def __init__(self, path, ifexists, ismagic, audit=False, deny=False, allow_keyword=False,
|
|
comment='', log_event=None, priority=None):
|
|
|
|
super().__init__(path, ifexists, ismagic,
|
|
audit=audit, deny=deny, allow_keyword=allow_keyword,
|
|
comment=comment, log_event=log_event, priority=priority)
|
|
|
|
# abi doesn't support 'if exists'
|
|
if ifexists:
|
|
raise AppArmorBug('Attempt to use %s rule with if exists flag' % self.__class__.__name__)
|
|
|
|
def get_clean(self, depth=0):
|
|
"""return rule (in clean/default formatting)"""
|
|
|
|
space = ' ' * depth
|
|
|
|
if self.ismagic:
|
|
return ('%s%s <%s>,%s' % (space, self.rule_name, self.path, self.comment))
|
|
else:
|
|
return ('%s%s "%s",%s' % (space, self.rule_name, self.path, self.comment))
|
|
|
|
def _logprof_header_localvars(self):
|
|
return _('Abi'), self.get_clean()
|
|
|
|
|
|
class AbiRuleset(IncludeRuleset):
|
|
"""Class to handle and store a collection of abi rules"""
|