[apparmor] [patch] Fix dfa minimization

John Johansen john.johansen at canonical.com
Wed Jan 8 23:28:54 UTC 2014


On 01/08/2014 02:50 PM, Steve Beattie wrote:
> On Sat, Jan 04, 2014 at 03:09:43AM -0800, John Johansen wrote:
>> And the patch (yes I died a little with this one, guess what code is now on
>> my hit list). And yes it is just removing casting from the one line and
>> changing it in the macro
>>
>> Signed-off-by: John Johansen <john.johansen at canonical.com>
>>
>> oh and nominated for the 2.8 series as well
> 
> Acked-by: Steve Beattie <steve at nxnw.org> (trunk and 2.8)
> 
> While this patch is fine, I think, applying it + the DFA minimization
> patch, while generating a subtly different binary blob, still results in
> a policy that the kernel rejects. So this might be part of the issue,
> but it's not the whole issue.
> 
do you have another example of where it is failing for me to look at?
This one fixed the issue for the specific example I had, thats not to say
there aren't others.




More information about the AppArmor mailing list