[apparmor] [patch 08/12] Refactor rule accumulation to use some helper functions
Steve Beattie
steve at nxnw.org
Tue Aug 19 08:35:40 UTC 2014
On Fri, Aug 15, 2014 at 12:20:43PM -0700, john.johansen at canonical.com wrote:
> Signed-off-by: John Johansen <john.johansen at canonical.com>
Acked-by: Steve Beattie <steve at nxnw.org> with one minor style nit...
> ---
> parser/libapparmor_re/aare_rules.cc | 28 ++++++++++++++++++----------
> parser/libapparmor_re/aare_rules.h | 1 +
> 2 files changed, 19 insertions(+), 10 deletions(-)
>
> --- 2.9-test.orig/parser/libapparmor_re/aare_rules.cc
> +++ 2.9-test/parser/libapparmor_re/aare_rules.cc
> @@ -76,6 +76,21 @@
> #undef RESET_FLAGS
> }
>
> +void aare_rules::add_to_rules(Node *tree, Node *perms)
> +{
> + if (reverse)
> + flip_tree(tree);
> + if (root)
> + root = new AltNode(root, new CatNode(tree, perms));
> + else
> + root = new CatNode(tree, perms);
> +}
> +
> +static Node *cat_with_null_seperator(Node *l, Node *r)
> +{
> + return new CatNode(new CatNode(l, new CharNode(0)), r);
> +}
> +
> bool aare_rules::add_rule_vec(int deny, uint32_t perms, uint32_t audit,
> int count, const char **rulev, dfaflags_t flags)
> {
> @@ -89,13 +104,9 @@
> return false;
> for (int i = 1; i < count; i++) {
> Node *subtree = NULL;
> - Node *node = new CharNode(0);
> - if (!node)
> - return false;
> - tree = new CatNode(tree, node);
> if (regex_parse(&subtree, rulev[i]))
> - return false;
> - tree = new CatNode(tree, subtree);
> + return 0;
Why the conversion from returning false to 0?
--
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140819/09f692d1/attachment.pgp>
More information about the AppArmor
mailing list