[apparmor] valid rule?

John Johansen john.johansen at canonical.com
Sun Aug 21 17:00:51 UTC 2011


On 08/21/2011 07:08 AM, Christian Boltz wrote:
> Hello,
> 
> I just stumbled over those rules in
> profiles/apparmor/profiles/extras/usr.lib.firefox.firefox
> which vim marked as invalid:
> 
>   deny /usr/bin/gconftool-2 x,
>   deny /usr/lib/firefox/firefox.sh x,
> 
> Are these valid rules? If yes, I'll have to update apparmor.vim once 
> more - maybe only for deny rules?
> 
yes, deny rules don't require a qualifier on the x permission.






More information about the AppArmor mailing list