[apparmor] [patch] Carry over all autodep-generated rules in handle_children()

Christian Boltz apparmor at cboltz.de
Sun Jul 30 20:49:01 UTC 2017


Hello,

Am Sonntag, 16. Juli 2017, 21:47:50 CEST schrieb Christian Boltz:
> when creating a new child profile, handle_children() did only copy
> over include and path rules. While this was correct in the past, path
> rules got changed to FileRule in the meantime and were therefore
> lost. (In practise, this means the "$binary mr," rule wasn't added to
> the new child profile, causing a "superfluous" question in
> aa-logprof.)
> 
> This patch changes handle_children() to carry over the complete new
> child profile instead of only cherry-picking include and path rules.
> 
> 
> I propose this patch for trunk and 2.11.
> Older versions (with path as hasher) are not affected.
> 
> 
> [ 01-handle_children-use-new-profile.diff ]

Any comments or reviews on this patch?

If nobody objects, I'll commit it on Wednesday as Acked-by <timeout>.


Regards,

Christian Boltz
-- 
> > That's the part where we create a flame war and then try to
> > collect some useful ideas afterwards. ;-)
> Let's collect ideas directly ;-)
Humm.. interesting.. never thought about that approach. :-)
[> Andreas Jaeger and (>>) Gustavo Niemeyer in opensuse-packaging]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20170730/2007850f/attachment.pgp>


More information about the AppArmor mailing list