[apparmor] [PATCH] update man page for recent mount rule additions

Jamie Strandboge jamie at canonical.com
Wed Apr 11 16:22:20 UTC 2012


On Wed, 2012-04-11 at 07:50 -0700, Steve Beattie wrote:
> On Tue, Apr 10, 2012 at 05:06:59PM -0500, Jamie Strandboge wrote:

> > +=item B<mount options=ro, mount options=atime /dev/foo,>
> 
> Doesn't the first part need to be 'mount options=ro /dev/foo,' in order
> for it to allow the mount of only /dev/foo anywhere?

I'd like for John to comment here, but based on the wiki[1], no. Eg:

"When both = and in conditional operators are used the options within
each condition type can be combined and split interchangeably.

mount options=(ro, acl) options in (nodev, user)"


> Otherwise, this looks okay, along with the afore-mentioned missing over
> statement (feel free to include my patch with yours).
> 
Thanks applied excepting the bit mentioned above. I applied your other
patch separately.

[1]http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Mount_rules_.28AppArmor_2.8_and_later.29

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120411/c185382c/attachment.pgp>


More information about the AppArmor mailing list