[apparmor] [patch] Add RlimitRule and RlimitRuleset classes

Steve Beattie steve at nxnw.org
Thu Jun 4 18:38:23 UTC 2015


On Mon, May 25, 2015 at 11:59:35PM +0200, Christian Boltz wrote:
> Hello,
> 
> this patch adds the RlimitRule and RlimitRuleset classes.
> 
> The class comes with the usual set of features, so I'll only mention a
> special feature: the is_covered() and is_equal() functions can even
> compare limits with different units (for example they recognize that
> 2minutes == 120seconds).
> 
> Also make RE_PROFILE_RLIMIT a bit more strict (the old one accepted any
> chars, including spaces, for rlimit and value) and convert it to named
> matches.
> 
> [ 41-add-rlimit-rule-class.diff ]

Acked-by: Steve Beattie <steve at nxnw.org>

> BTW: The regex contains '=>' as optional part - is this really correct?

No, not correct, the parser requires the '<='.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150604/12ffdd6d/attachment-0001.pgp>


More information about the AppArmor mailing list