[apparmor] [patch] Add support for rlimit and signal rules to aa-mergeprof

Christian Boltz apparmor at cboltz.de
Fri Oct 23 15:34:41 UTC 2015


Hello,

$subject ;-)


[ 11-mergeprof-support-rlimit-and-signal.diff ]

--- utils/aa-mergeprof  2015-06-25 21:32:37.420831338 +0200
+++ utils/aa-mergeprof  2015-10-23 17:26:03.947428725 +0200
@@ -631,7 +631,7 @@
                             elif re.search('\d', ans):
                                 default_option = ans
 
-            for ruletype in ['capability', 'network', 'change_profile']:
+            for ruletype in ['capability', 'change_profile', 'network', 'rlimit', 'signal']:
                 if other.aa[profile][hat].get(ruletype, False): # needed until we have proper profile initialization
                     for rule_obj in other.aa[profile][hat][ruletype].rules:
 



Regards,

Christian Boltz
-- 
Schlagen. Verklagen. Z.B. bei der c't verpfeifen, auf daß es fortan
die Spatzen von den Dächern pfeifen, was für Pfeifen das bei $Firma
sind. *scnr* [David Haller in suse-linux]




More information about the AppArmor mailing list