[apparmor] How does ALIAS work?

John Johansen john.johansen at canonical.com
Sat Jan 11 11:32:19 UTC 2020


On 1/5/20 8:47 AM, J. R. Okajima wrote:
> John Johansen:
>> currently it works poorly. What it does it rule rewriting so that
>> the leading elements of a rule "should" be replaced.
> 	:::
>> It is possible to fix this, so that the compiler can do the rewrite
>> against the generated state machine. This has even been prototyped
>> but is currently buggy and needs a lot more work before we can land
>> it.
> 
> Thank you for the reply.
> But I still don't get it.  Do you mean that
>>> - add an alias rule "alias / -> /tmp/,"
> in my test script (attached to previous mail) doesn't work at all?  And
> it won't be fixed easily?
> Could you try reproducing the problem by my test script if you have not
> tried?
> 
> 
sorry for the delayed response. Yes I will try but it may take me a while
to get to it.



More information about the AppArmor mailing list