[apparmor] [PATCH 07/13] Make expressing all capabilities easier

John Johansen john.johansen at canonical.com
Fri Feb 24 17:01:12 UTC 2012


On 02/24/2012 08:46 AM, Christian Boltz wrote:
> Hello,
> 
> Am Freitag, 24. Februar 2012 schrieb John Johansen:
>> On 02/15/2012 03:01 AM, Christian Boltz wrote:
>>> Am Dienstag, 14. Februar 2012 schrieb John Johansen:
>>>> Allow the capability rule to be bare to represent all
>>>> capabilities
>>>> similar to how network, and other rule types work.
>>>>
>>>>   capability,
>>>
>>> I hope not too many people use this ;-) but nevertheless here's
>>> the
>>> patch to update apparmor.vim to support it. Using just
>>> "capability" will be marked in the "dangerous capability" color.
>>>
>>> Additionally, the patch removes the (already commented out) code
>>> for "set capability".
>>
>> can you commit this, I have tried a couple of times with the attached
>> patch and patch just fails complaining of a malformed patch
> 
> I'm not surprised about the complaints ;-) because I already commited it 
> to trunk (r1937). (Did you run "make" to generate an up-to-date 
> apparmor.vim from the *.in?)
> 
>
hrmm no that wasn't the type of complaints I was getting otherwise I might
have notice.  Oh well at least its in thanks


 The 2.7 branch doesn't need the patch because 2.7 doesn't support 
>     capability,
> ("capability $whatever" is already supported in 2.7's apparmor.vim)
> 
> 
> Regards,
> 
> Christian Boltz




More information about the AppArmor mailing list