| # Copyright 2016 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| # dont_exclude() adds a given msgtype into the list of allowed messages. |
| dont_exclude() { |
| local msgtype=$1 |
| |
| ALLOWED_MSGTYPE+=("${msgtype}") |
| } |
| |
| # apply_exclude() adds a rule into "exclude" list that prohibits all |
| # msgtypes except those that has previously been marked as allowed |
| # with dont_exclude() function. |
| apply_exclude() { |
| if [ ${#ALLOWED_MSGTYPE[@]} -eq 0 ]; then |
| local filters=() |
| else |
| # Remove duplicates and format all filters. |
| readarray -t filters < <(printf -- "-Fmsgtype!=%s\n" "${ALLOWED_MSGTYPE[@]}" | sort -u) |
| fi |
| |
| auditctl -a never,exclude "${filters[@]}" |
| } |
