[apparmor] [patch] [17/38] Implement globbing in FileRule

Steve Beattie steve at nxnw.org
Thu Sep 22 19:37:22 UTC 2016


On Fri, Aug 12, 2016 at 10:57:08PM +0200, Christian Boltz wrote:
> this patch adds the glob() and glob_ext() functions to FileRule, and sets
> self.can_glob and self.can_glob_ext. Also add some tests (just enough to
> make sure the FileRule integration works - the globbing is handled
> inside AARE,and the AARE tests contain more testcases).

Can you add a comment to this effect in the FileGlobTest class, that
it's purpose is to ensure the FileRule integration works, and a pointer
to the more comprehensive regex tests in test-aare.py?

> Note that the implementation differs from the original plan (which was
> to have globbing in *Ruleset). Therefore add can_glob and can_glob_ext
> to BaseRule (both default to False), and add a comment to BaseRuleset
> that globbing needs to be removed from all *Ruleset classes.

Okay.

> [ 17-FileRule-implement-globbing.diff ]

Otherwise, looks fine. Acked-by: Steve Beattie <steve at nxnw.org>. Thanks!

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160922/5fa844fe/attachment.pgp>


More information about the AppArmor mailing list