From ea4cbd68e7e9e57b933cae685b3f6181f4f18b50 Mon Sep 17 00:00:00 2001 From: Tyler Hicks Date: Mon, 5 May 2014 11:36:00 -0500 Subject: [PATCH] parser: Document that pivot_root arguments must end in '/' Mention, in the apparmor.d man page, that pivot_root arguments must end with a '/' character since they are directories. The parser currently allows pivot_root arguments that do not end in '/', but those rules will always fail to match. Signed-off-by: Tyler Hicks Acked-by: Seth Arnold --- parser/apparmor.d.pod | 3 +++ 1 file changed, 3 insertions(+) diff --git a/parser/apparmor.d.pod b/parser/apparmor.d.pod index dd1e6ff0f..141db3658 100644 --- a/parser/apparmor.d.pod +++ b/parser/apparmor.d.pod @@ -668,6 +668,9 @@ AppArmor 'pivot_root' rules can specify a profile transition to occur during the pivot_root(2) system call. Note that AppArmor will only transition the process calling pivot_root(2) to the new profile. +The paths specified in 'pivot_root' rules must end with '/' since they are +directories. + Here are some example 'pivot_root' rules: # Allow any pivot