2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 22:35:35 +00:00

parser: Improve the rule skip test.

Rules can be marked as being deleted/merged, and should be skipped on
further processing.

Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
John Johansen
2023-07-03 01:41:43 -07:00
parent 7393aaac21
commit dbca8ebb89
4 changed files with 9 additions and 3 deletions

View File

@@ -848,7 +848,7 @@ int clear_and_convert_entry(std::string& buffer, char *entry)
int post_process_policydb_ents(Profile *prof)
{
for (RuleList::iterator i = prof->rule_ents.begin(); i != prof->rule_ents.end(); i++) {
if ((*i)->flags & RULE_FLAG_DELETED)
if ((*i)->skip_processing())
continue;
if ((*i)->gen_policy_re(*prof) == RULE_ERROR)
return FALSE;