def AaEval.deny_applies

bend-osdev-apparmor@0.1.0.0 · eval.bend:191

import Base
import bend-osdev-apparmor@0.1.0.0/options.bend as O
import bend-osdev-apparmor@0.1.0.0/profile.bend as PR

191# whether a deny rule decides under these options and mode: every mode but
192# unconfined, and complain only with complain_deny
193def AaEval.deny_applies(opts: O.AaOptions, m: PR.AaMode) -> Bool:
194  match m:
195    case PR.AaModeUnconfined{}:
196      False{}
197    case PR.AaModeComplain{}:
198      O.AaOptions.complain_deny(opts)
199    case PR.AaModeEnforce{}:
200      True{}
201    case PR.AaModeKill{}:
202      True{}
203    case PR.AaModePrompt{}:
204      True{}
205    case PR.AaModeDefaultAllow{}:
206      True{}