[apparmor] [PATCH 07/13] Make expressing all capabilities easier
Kees Cook
kees at ubuntu.com
Wed Feb 15 17:56:24 UTC 2012
On Wed, Feb 15, 2012 at 12:01:42PM +0100, Christian Boltz wrote:
> Am Dienstag, 14. Februar 2012 schrieb John Johansen:
> > Allow the capability rule to be bare to represent all capabilities
> > similar to how network, and other rule types work.
> >
> > capability,
>
> I hope not too many people use this ;-) but nevertheless here's the
> patch to update apparmor.vim to support it. Using just "capability" will
> be marked in the "dangerous capability" color.
>
> Additionally, the patch removes the (already commented out) code for
> "set capability".
Acked-by: Kees Cook <kees at ubuntu.com>
--
Kees Cook
More information about the AppArmor
mailing list