[apparmor] [PATCH 07/13] Make expressing all capabilities easier

Kees Cook kees at ubuntu.com
Wed Feb 15 17:56:24 UTC 2012


On Wed, Feb 15, 2012 at 12:01:42PM +0100, Christian Boltz wrote:
> Am Dienstag, 14. Februar 2012 schrieb John Johansen:
> > Allow the capability rule to be bare to represent all capabilities
> > similar to how network, and other rule types work.
> > 
> >   capability,
> 
> I hope not too many people use this ;-) but nevertheless here's the 
> patch to update apparmor.vim to support it. Using just "capability" will 
> be marked in the "dangerous capability" color.
> 
> Additionally, the patch removes the (already commented out) code for 
> "set capability".

Acked-by: Kees Cook <kees at ubuntu.com>

-- 
Kees Cook



More information about the AppArmor mailing list