[apparmor] [patch 1/1] parser: Add support for unix domain socket rules.

John Johansen john.johansen at canonical.com
Fri Aug 8 06:46:05 UTC 2014


On 08/07/2014 06:54 PM, Seth Arnold wrote:
> On Wed, Aug 06, 2014 at 07:17:25AM -0700, john.johansen at canonical.com wrote:
>> This patch implements parsing of fine grained mediation for unix domain
>> sockets, that have abstract and anonymous paths. Sockets with file
>> system paths are handled by regular file access rules.
> 
> Several bugs and several questions inline.
> 
> Thanks!
> 
thanks Seth, I have address all issues except the one below

>> +
>> +	unix_rule(unsigned int type_p, bool audit_p, bool denied);
>> +	unix_rule(int mode, struct cond_entry *conds,
>> +		  struct cond_entry *peer_conds);
> 
> These constructors don't appear to initialize anything...

they are just the prototypes, the actual constructors are in the
.cc file




More information about the AppArmor mailing list