From c3bcdc32fbcb07dff4cb191e12140dfb60a5e81a Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Wed, 1 Jun 2016 22:55:14 +0200 Subject: [PATCH] Document aliases for dbus send and receive in apparmor.d Acked-by: Tyler Hicks --- parser/apparmor.d.pod | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/parser/apparmor.d.pod b/parser/apparmor.d.pod index fff471b8c..fd1bf9afc 100644 --- a/parser/apparmor.d.pod +++ b/parser/apparmor.d.pod @@ -195,7 +195,7 @@ B = 'label' '=' '(' '"' I '"' | I ')' B = Comma separated list of I -B = ( 'send' | 'receive' | 'bind' | 'eavesdrop' ) +B = ( 'send' | 'receive' | 'bind' | 'eavesdrop' | 'r' | 'read' | 'w' | 'write' | 'rw' ) Some accesses are incompatible with some rules; see below. B = B @@ -1009,6 +1009,9 @@ The 'bind' permission cannot be used in message rules. The 'send' and 'receive' permissions cannot be used in service rules. The 'eavesdrop' permission cannot be used in rules containing any conditionals outside of the 'bus' conditional. +'r' and 'read' are synonyms for 'receive'. 'w' and 'write' are synonyms for +'send'. 'rw' is a synonym for both 'send' and 'receive'. + AppArmor DBus permissions are implied when a rule does not explicitly state an access list. By default, all DBus permissions are implied. Only message permissions are implied for message rules and only service permissions are