2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 06:45:38 +00:00

change_hat_profile_access.patch

This commit is contained in:
John Johansen
2007-12-23 01:02:35 +00:00
parent 7cb38c90aa
commit 25c06ea4fb

View File

@@ -335,6 +335,7 @@ fi
local num_emitted imagename hat args arg names1 names2 local num_emitted imagename hat args arg names1 names2
#global complainflag escapeflag nodefaults profile profilenames #global complainflag escapeflag nodefaults profile profilenames
local hat_string="hat:"
complainflag="" complainflag=""
escapeflag="" escapeflag=""
@@ -392,7 +393,9 @@ fi
;; ;;
esac esac
num_args=0 #give every profile/hat access to change_hat
args[0]="/proc/*/attr/current:w"
num_args=1
while [ $# -gt 0 ] while [ $# -gt 0 ]
do do
arg="$1" arg="$1"
@@ -404,8 +407,15 @@ fi
eval emit_profile \"$imagename\" \"$imageperm\" \ eval emit_profile \"$imagename\" \"$imageperm\" \
$(for i in $(seq 0 $((${num_args} - 1))) ; do echo \"\${args[${i}]}\" ; done) $(for i in $(seq 0 $((${num_args} - 1))) ; do echo \"\${args[${i}]}\" ; done)
num_emitted=$((num_emitted + 1)) num_emitted=$((num_emitted + 1))
num_args=0 #give every profile/hat access to change_hat
args[0]="/proc/*/attr/current:w"
num_args=1
continue 2 continue 2
elif [ ${arg:0:4} == "hat:" ] ; then
args[${num_args}]=${arg}
num_args=$(($num_args + 1))
args[${num_args}]="/proc/*/attr/current:w"
num_args=$(($num_args + 1))
else else
args[${num_args}]=${arg} args[${num_args}]=${arg}
num_args=$(($num_args + 1)) num_args=$(($num_args + 1))