Proposal to remove PCRE support

Steve Beattie sbeattie at
Wed Jun 16 16:36:10 BST 2010

On Wed, Jun 16, 2010 at 01:06:27AM -0700, John Johansen wrote:
> I would like to propose that we remove support for PCRE based policy
> from the parser/policy loader.
> The last version of AppArmor to use PCRE based policy was AppArmor 2.0.1,
> which was approximately 3 years ago.  The PCRE part of the code has not
> been actively maintain and I doubt that it has been tested in the last
> 1.5 years.  Dropping PCRE support will also help in the efforts to
> cleanup the parsers code base.

Agreed, at this point it seems to me to be just cruft. The only utility
that I could have seen in keeping is to have it available for upgrades,
where the parser gets upgraded (and policy re-applied) before the kernel
gets rebooted.

Thanks for raising the issue, John.

Steve Beattie
<sbeattie at>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
Url : 

More information about the AppArmor mailing list