mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 14:25:52 +00:00
Code Issues Releases Wiki Activity

Merge add fine grained network mediation support

Browse Source 
Similar to https://gitlab.com/apparmor/apparmor/-/merge_requests/1095, but this time simplified.
This version removes support for ip and port ranges and subnets. This can be added later.

It also contains an updated version of the network layout required by the kernel side of AppArmor.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1160
Approved-by: John Johansen <john@jjmx.net>
Merged-by: John Johansen <john@jjmx.net>
This commit is contained in:
John Johansen
2024-02-29 21:58:24 +00:00
parent b83cf90b82 119e3f38f9
commit 35287c8e1c
195 changed files with 2626 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

88
utils/test/test-parser-simple-tests.py
View File

@@ -461,6 +461,94 @@ syntax_failure = (
'vars/vars_dbus_8.sd', # Path doesn't start with / or variable: {/@{TLDS}/foo,/com/@{DOMAINS}}
'vars/vars_simple_assignment_12.sd', # Redefining existing variable @{BAR} ('\' not handled)
'bare_include_tests/ok_2.sd', # two #include<...> in one line
# fine grained net
'network/network_ok_8.sd',
'network/network_ok_9.sd',
'network/network_ok_10.sd',
'network/network_ok_11.sd',
'network/network_ok_12.sd',
'network/network_ok_13.sd',
'network/network_ok_14.sd',
'network/network_ok_15.sd',
'network/network_ok_16.sd',
'network/network_ok_17.sd',
'network/network_ok_18.sd',
'network/network_ok_19.sd',
'network/network_ok_20.sd',
'network/network_ok_21.sd',
'network/network_ok_22.sd',
'network/network_ok_23.sd',
'network/network_ok_24.sd',
'network/network_ok_25.sd',
'network/network_ok_26.sd',
'network/network_ok_27.sd',
'network/network_ok_28.sd',
'network/network_ok_29.sd',
'network/network_ok_30.sd',
'network/network_ok_31.sd',
'network/network_ok_32.sd',
'network/network_ok_33.sd',
'network/network_ok_34.sd',
'network/network_ok_35.sd',
'network/network_ok_36.sd',
'network/network_ok_37.sd',
'network/network_ok_38.sd',
'network/network_ok_39.sd',
'network/network_ok_40.sd',
'network/network_ok_41.sd',
'network/network_ok_42.sd',
'network/network_ok_43.sd',
'network/perms/ok_accept_1.sd',
'network/perms/ok_accept_2.sd',
'network/perms/ok_attr_1.sd',
'network/perms/ok_attr_2.sd',
'network/perms/ok_attr_3.sd',
'network/perms/ok_attr_4.sd',
'network/perms/ok_attr_5.sd',
'network/perms/ok_attr_6.sd',
'network/perms/ok_attr_7.sd',
'network/perms/ok_attr_8.sd',
'network/perms/ok_bind_1.sd',
'network/perms/ok_bind_2.sd',
'network/perms/ok_connect_1.sd',
'network/perms/ok_connect_2.sd',
'network/perms/ok_create_1.sd',
'network/perms/ok_create_2.sd',
'network/perms/ok_create_3.sd',
'network/perms/ok_create_4.sd',
'network/perms/ok_listen_1.sd',
'network/perms/ok_listen_2.sd',
'network/perms/ok_listen_3.sd',
'network/perms/ok_msg_1.sd',
'network/perms/ok_msg_2.sd',
'network/perms/ok_msg_3.sd',
'network/perms/ok_msg_4.sd',
'network/perms/ok_msg_5.sd',
'network/perms/ok_msg_6.sd',
'network/perms/ok_msg_7.sd',
'network/perms/ok_msg_8.sd',
'network/perms/ok_msg_9.sd',
'network/perms/ok_msg_10.sd',
'network/perms/ok_msg_12.sd',
'network/perms/ok_msg_13.sd',
'network/perms/ok_msg_14.sd',
'network/perms/ok_msg_15.sd',
'network/perms/ok_msg_16.sd',
'network/perms/ok_msg_17.sd',
'network/perms/ok_msg_18.sd',
'network/perms/ok_msg_19.sd',
'network/perms/ok_msg_20.sd',
'network/perms/ok_opt_1.sd',
'network/perms/ok_opt_2.sd',
'network/perms/ok_opt_3.sd',
'network/perms/ok_opt_4.sd',
'network/perms/ok_opt_5.sd',
'network/perms/ok_opt_6.sd',
'network/perms/ok_opt_7.sd',
'network/perms/ok_shutdown_1.sd',
'network/perms/ok_shutdown_2.sd',
'network/perms/ok_shutdown_3.sd',
)