[apparmor] Skippable files

John Johansen john.johansen at canonical.com
Mon May 28 17:19:29 UTC 2012


On 05/28/2012 09:23 AM, Nicolas Valcárcel wrote:
> Hi, i'm working on rewriting to python3 some apparmor tools, but i'm not a perl expert, nor know apparmor in deep, so i got a stopper here that i hope you can help me with. 
> 
hey Nicolas

> In Immunix/AppArmor.pm there is a function isSkippableFile which has a regexp i don't understand:
> $path =~ /(^|\/)\.[^\/]*$/               <--- this one i don't understand
dot files, but looking at it, it has an issue
  '.' followed by anything that is not a path
or
  '/.' followed by anything that is not a path, note the leading '/' is not anchored

so

  .
  ..
  .foo
  /.
  /..
  /.foo
  bar/.foo
  /bar/.foo

  but not

  ./
  .foo/
  .foo/bar
  /.foo/
  /.foo/bar

now for where it has a problem, since the leading '/' is unanchored
  /.foo/.bar

will match


> $path =~ /\.rpm(save|new)$/       <--- this would be anything ending in .rpmsave or .rpmnew?
yes

> $path =~ /\.dpkg-(old|new)$/       <--- this would be anything ending in .dpkg-old or .dpkg-new?
yes

> $path =~ /\.swp$/                      <--- this would be anything ending in .swp?
yes

> $path =~ /\~$/);                         <--- this would be anything ending in ~?
> 
yes



More information about the AppArmor mailing list