[apparmor] [PATCH 3/8] add optional allow prefix to the language v3

Seth Arnold seth.arnold at canonical.com
Thu Sep 19 18:19:39 UTC 2013


On Wed, Sep 18, 2013 at 10:46:26PM -0700, Steve Beattie wrote:
> In this case, the behavior with capabilities is mimicking the already
> accepted behavior for file rules, which is that deny rules override
> allow rules (even ones without the 'allow' keyword).

Excellent, thanks for the description and examples. It might still be
confusing but at least it is consistently confusing. :)

> Here's v3 of the patch. I've added some behavioral tests around
> overlapping the allow and deny keywords to the capabilities.sh tests.

Zounds, generating that must have been a royal headache. :) But it looked
good, at least for as long as I could focus on it.

> Subject: add optional allow prefix to the language
> From: John Johansen <john.johansen at canonical.com>

Acked-by: Seth Arnold <seth.arnold at canonical.com>

Thanks!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130919/87019e7f/attachment.pgp>


More information about the AppArmor mailing list