[apparmor] DBus rule syntax for subject and peer components

Jamie Strandboge jamie at canonical.com
Fri Jun 21 17:32:09 UTC 2013


On 06/21/2013 09:44 AM, John Johansen wrote:

> 
> In generally I think we want acquire or any permission that only
> applies to a subject address to semantically be in a separate rule
> that does not specify a peer address. This helps keep the meaning
> of the rules clear. We can enforce this type of restriction with
> a semantic check in the parser
> 
+1

-- 
Jamie Strandboge                 http://www.ubuntu.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130621/78b09c02/attachment.pgp>


More information about the AppArmor mailing list