mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 14:25:52 +00:00
Update change_profile rules to allow specifying the onexec condition
Note: this patch currently overlays onexec with link_name to take advantage of code already being used on link_name. Ideally what needs to happen is entry needs to be split into file, link and change_profile entry classes. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <steve@nxnw.org>
This commit is contained in:
@@ -100,7 +100,10 @@ struct cond_entry_list {
|
||||
struct cod_entry {
|
||||
char *ns;
|
||||
char *name;
|
||||
char *link_name;
|
||||
union {
|
||||
char *link_name;
|
||||
char *onexec;
|
||||
};
|
||||
char *nt_name;
|
||||
Profile *prof; /* Special profile defined
|
||||
* just for this executable */
|
||||
|
Reference in New Issue
Block a user