[apparmor] Skippable files

Seth Arnold seth.arnold at gmail.com
Mon May 28 17:53:53 UTC 2012


I'd love to see the tools and parser using the exact same code to figure out which files to skip. Is there an exported library call that could be used in the tools to replace this function?

-----Original Message-----
From: John Johansen <john.johansen at canonical.com>
Sender: apparmor-bounces at lists.ubuntu.com
Date: Mon, 28 May 2012 10:19:29 
To: Nicolas Valcárcel<nvalcarcel at corpb2c.com>
Cc: <apparmor at lists.ubuntu.com>
Subject: Re: [apparmor] Skippable files

On 05/28/2012 09:23 AM, Nicolas Valcárcel wrote:
> Hi, i'm working on rewriting to python3 some apparmor tools, but i'm not a perl expert, nor know apparmor in deep, so i got a stopper here that i hope you can help me with. 
> 
hey Nicolas

> In Immunix/AppArmor.pm there is a function isSkippableFile which has a regexp i don't understand:
> $path =~ /(^|\/)\.[^\/]*$/               <--- this one i don't understand
dot files, but looking at it, it has an issue
  '.' followed by anything that is not a path
or
  '/.' followed by anything that is not a path, note the leading '/' is not anchored

so

  .
  ..
  .foo
  /.
  /..
  /.foo
  bar/.foo
  /bar/.foo

  but not

  ./
  .foo/
  .foo/bar
  /.foo/
  /.foo/bar

now for where it has a problem, since the leading '/' is unanchored
  /.foo/.bar

will match


> $path =~ /\.rpm(save|new)$/       <--- this would be anything ending in .rpmsave or .rpmnew?
yes

> $path =~ /\.dpkg-(old|new)$/       <--- this would be anything ending in .dpkg-old or .dpkg-new?
yes

> $path =~ /\.swp$/                      <--- this would be anything ending in .swp?
yes

> $path =~ /\~$/);                         <--- this would be anything ending in ~?
> 
yes

-- 
AppArmor mailing list
AppArmor at lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor


More information about the AppArmor mailing list