supported

Documentation

Index

• type ApparmorVerifier
  • func NewAppArmorVerifier() *ApparmorVerifier
  • func (a *ApparmorVerifier) FindAppArmorParserBinary() (string, error)
  • func (a *ApparmorVerifier) IsSupported() error

Types

type ApparmorVerifier

type ApparmorVerifier struct {
	// contains filtered or unexported fields
}

ApparmorVerifier is the global struct for verifying if AppAmor is available on the system.

func NewAppArmorVerifier

func NewAppArmorVerifier() *ApparmorVerifier

NewAppArmorVerifier can be used to retrieve a new ApparmorVerifier instance.

func (*ApparmorVerifier) FindAppArmorParserBinary

func (a *ApparmorVerifier) FindAppArmorParserBinary() (string, error)

FindAppArmorParserBinary returns the `apparmor_parser` binary either from `/sbin` or from `$PATH`. It returns an error if the binary could not be found.

func (*ApparmorVerifier) IsSupported

func (a *ApparmorVerifier) IsSupported() error

IsSupported returns nil if AppAmor is supported by the host system. The method will error if: - the process runs in rootless mode - AppArmor is disabled by the host system - the `apparmor_parser` binary is not discoverable