From 24f834b128b528596bffc7bf94da3336a9929815 Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sun, 2 Jul 2023 13:33:17 -0700 Subject: [PATCH] parser: allow character sets to be used as exact match permissions character sets are just a way of enumerating to exact match rules more succinctly, so loosen the exact match check to allow them. Signed-off-by: John Johansen --- parser/libapparmor_re/aare_rules.cc | 1 - 1 file changed, 1 deletion(-) diff --git a/parser/libapparmor_re/aare_rules.cc b/parser/libapparmor_re/aare_rules.cc index b250e1013..8ecdf127b 100644 --- a/parser/libapparmor_re/aare_rules.cc +++ b/parser/libapparmor_re/aare_rules.cc @@ -100,7 +100,6 @@ bool aare_rules::add_rule_vec(int deny, uint32_t perms, uint32_t audit, if ((*i)->is_type(NODE_TYPE_STAR) || (*i)->is_type(NODE_TYPE_PLUS) || (*i)->is_type(NODE_TYPE_ANYCHAR) || - (*i)->is_type(NODE_TYPE_CHARSET) || (*i)->is_type(NODE_TYPE_NOTCHARSET)) exact_match = 0; }