[apparmor] [PATCH 24/32] apparmor: allow setting any profile into the unconfined state

Seth Arnold seth.arnold at canonical.com
Thu Jan 31 07:01:53 UTC 2013


On Wed, Jan 16, 2013 at 01:28:53PM -0800, John Johansen wrote:
> Allow emulating the default profile behavior from boot, by allowing
> loading of a profile in the unconfined state into a new NS.
> 
> Signed-off-by: John Johansen <john.johansen at canonical.com>

> @@ -198,7 +198,7 @@ struct aa_profile {
>  	struct aa_dfa *xmatch;
>  	int xmatch_len;
>  	enum audit_mode audit;
> -	enum profile_mode mode;
> +	long mode;

I didn't see anything that required this change in the patch -- is that
coming in the future, too?

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130130/956854c5/attachment.pgp>


More information about the AppArmor mailing list