mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
parser: allow character sets to be used as exact match permissions
character sets are just a way of enumerating to exact match rules more succinctly, so loosen the exact match check to allow them. Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
parent
9e9ca7e55d
commit
24f834b128
@ -100,7 +100,6 @@ bool aare_rules::add_rule_vec(int deny, uint32_t perms, uint32_t audit,
|
||||
if ((*i)->is_type(NODE_TYPE_STAR) ||
|
||||
(*i)->is_type(NODE_TYPE_PLUS) ||
|
||||
(*i)->is_type(NODE_TYPE_ANYCHAR) ||
|
||||
(*i)->is_type(NODE_TYPE_CHARSET) ||
|
||||
(*i)->is_type(NODE_TYPE_NOTCHARSET))
|
||||
exact_match = 0;
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user