mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 22:05:27 +00:00
Code Issues Releases Wiki Activity

Allow empty source and any word only in mount source

Browse Source
This commit is contained in:
Christian Boltz
2025-03-11 21:51:42 +01:00
parent 537fec8b36
commit ae20b62c31
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
utils/apparmor/rule/mount.py
View File

@@ -71,13 +71,13 @@ glob_pattern = (
+ RE_PROFILE_PATH_OR_VAR % 'IGNOREDEV' # path or variable + RE_PROFILE_PATH_OR_VAR % 'IGNOREDEV' # path or variable
+ r'|\{\S*|"\{[^"]*"' # alternation, optionally quoted (note: no leading "/" needed/enforced) + r'|\{\S*|"\{[^"]*"' # alternation, optionally quoted (note: no leading "/" needed/enforced)
+ r'|\*\*\S*|\*\*[^"]*"' # starting with "**" + r'|\*\*\S*|\*\*[^"]*"' # starting with "**"
+ r'|""' # empty source
+ r'|[\w-]+' # any word including "-"
# Note: the closing ')))' needs to be added in the final regex # Note: the closing ')))' needs to be added in the final regex
) )
source_fileglob_pattern = ( source_fileglob_pattern = (
glob_pattern % 'source_file' glob_pattern % 'source_file'
+ r'|""' # empty source
+ r'|[\w-]+' # any word including "-"
+ ')))' + ')))'
) )