2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-05 00:35:13 +00:00

parser: make auto vars @{exec_path} and @{attach_path} local vars

Make it so the @{exec_path} and @{attach_path} variables behavior
completely as local variables, overriding global variables of the
same name, instead of conflicting with them.

The exec var is only validate for the profile block after the attachment
is defined so the pattern

@{exec_path}=/path
profile test @{exec_path} {

   @{exec_path} rw,
}

is valid with the global var defining the attachent which then sets
the local auto @{exec_path} and @{attach_path} variables.

Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
John Johansen
2025-05-10 09:25:47 -07:00
parent ee3b5d746f
commit f3178d79b8
12 changed files with 143 additions and 64 deletions

View File

@@ -43,10 +43,6 @@ skip_startswith = (
'vars/vars_auto_attach_path_bad_3.sd',
'vars/vars_auto_exec_path_bad_5.sd',
'vars/vars_auto_attach_path_bad_5.sd',
# profiles that define an autovar that then gets defined causing a conflict
'vars/vars_auto_exec_path_bad_4.sd',
'vars/vars_auto_attach_path_bad_4.sd',
)
# testcases that should raise an exception, but don't