[apparmor] [patch] Add a missing check in rule class is_covered()

[Steve Beattie]

On Sat, Apr 11, 2015 at 10:34:54PM +0200, Christian Boltz wrote:
> "capability foo".is_covered("deny capability foo") should return False
> even if check_allow_deny is False.
> 
> Also add some tests with check_allow_deny=False.
>
> [ 40-ruleclass-is_covered-check-deny.diff ]

Acked-by: Steve Beattie <steve at nxnw.org>. Thanks.


-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150413/d58c3e3f/attachment.pgp>