mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 18:17:09 +00:00
parser: allow character sets to be used as exact match permissions
character sets are just a way of enumerating to exact match rules more succinctly, so loosen the exact match check to allow them. Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
parent
9e9ca7e55d
commit
24f834b128
@ -100,7 +100,6 @@ bool aare_rules::add_rule_vec(int deny, uint32_t perms, uint32_t audit,
|
|||||||
if ((*i)->is_type(NODE_TYPE_STAR) ||
|
if ((*i)->is_type(NODE_TYPE_STAR) ||
|
||||||
(*i)->is_type(NODE_TYPE_PLUS) ||
|
(*i)->is_type(NODE_TYPE_PLUS) ||
|
||||||
(*i)->is_type(NODE_TYPE_ANYCHAR) ||
|
(*i)->is_type(NODE_TYPE_ANYCHAR) ||
|
||||||
(*i)->is_type(NODE_TYPE_CHARSET) ||
|
|
||||||
(*i)->is_type(NODE_TYPE_NOTCHARSET))
|
(*i)->is_type(NODE_TYPE_NOTCHARSET))
|
||||||
exact_match = 0;
|
exact_match = 0;
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user