[apparmor] [PATCH 2/3] Extend the information dumped by -D rule-exprs to include permissions
John Johansen
john.johansen at canonical.com
Wed Feb 22 23:04:57 UTC 2012
Signed-off-by: John Johansen <john.johansen at canonical.com>
---
parser/libapparmor_re/aare_rules.cc | 7 ++++++-
1 files changed, 6 insertions(+), 1 deletions(-)
diff --git a/parser/libapparmor_re/aare_rules.cc b/parser/libapparmor_re/aare_rules.cc
index e78967a..d216a48 100644
--- a/parser/libapparmor_re/aare_rules.cc
+++ b/parser/libapparmor_re/aare_rules.cc
@@ -98,6 +98,7 @@ extern "C" int aare_add_rule_vec(aare_ruleset_t *rules, int deny,
{
Node *tree = NULL, *accept;
int exact_match;
+ uint32_t allow = perms;
assert(perms != 0);
@@ -220,7 +221,11 @@ extern "C" int aare_add_rule_vec(aare_ruleset_t *rules, int deny,
}
cerr << " -> ";
tree->dump(cerr);
- cerr << "\n\n";
+ if (deny)
+ cerr << " deny";
+ cerr << " (" << hex << allow <<"/" << audit << dec << ")";
+ accept->dump(cerr);
+ cerr << "\n\n";
}
if (rules->root)
--
1.7.9
More information about the AppArmor
mailing list