[apparmor] [PATCH] update man page for recent mount rule additions
Jamie Strandboge
jamie at canonical.com
Wed Apr 11 16:22:20 UTC 2012
On Wed, 2012-04-11 at 07:50 -0700, Steve Beattie wrote:
> On Tue, Apr 10, 2012 at 05:06:59PM -0500, Jamie Strandboge wrote:
> > +=item B<mount options=ro, mount options=atime /dev/foo,>
>
> Doesn't the first part need to be 'mount options=ro /dev/foo,' in order
> for it to allow the mount of only /dev/foo anywhere?
I'd like for John to comment here, but based on the wiki[1], no. Eg:
"When both = and in conditional operators are used the options within
each condition type can be combined and split interchangeably.
mount options=(ro, acl) options in (nodev, user)"
> Otherwise, this looks okay, along with the afore-mentioned missing over
> statement (feel free to include my patch with yours).
>
Thanks applied excepting the bit mentioned above. I applied your other
patch separately.
[1]http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Mount_rules_.28AppArmor_2.8_and_later.29
--
Jamie Strandboge | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120411/c185382c/attachment.pgp>
More information about the AppArmor
mailing list