mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-09-02 15:25:27 +00:00
parser: add support for exposing a debug flag to policy
Allowing access to a debug flag can greatly improve policy debugging. This is different than the debug mode of old, that was removed. It only will trigger additional messages to the kernel ring buffer, not the audit log, and it does not change mediation. Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
@@ -126,7 +126,6 @@ exception_not_raised = (
|
||||
'profile/flags/flags_bad15.sd',
|
||||
'profile/flags/flags_bad18.sd',
|
||||
'profile/flags/flags_bad19.sd',
|
||||
'profile/flags/flags_bad20.sd',
|
||||
'profile/flags/flags_bad2.sd',
|
||||
'profile/flags/flags_bad3.sd',
|
||||
'profile/flags/flags_bad4.sd',
|
||||
@@ -137,7 +136,6 @@ exception_not_raised = (
|
||||
'profile/flags/flags_bad_debug_1.sd',
|
||||
'profile/flags/flags_bad_debug_2.sd',
|
||||
'profile/flags/flags_bad_debug_3.sd',
|
||||
'profile/flags/flags_bad_debug_4.sd',
|
||||
# detection of conflicting flags not supported
|
||||
'profile/flags/flags_bad30.sd',
|
||||
'profile/flags/flags_bad31.sd',
|
||||
|
Reference in New Issue
Block a user