mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-30 05:47:59 +00:00
Revert commit: -r 1955 Default profiles to be chroot relative
This commit causes policy problems because we do not have chroot rules and policy extension to support it. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com>
This commit is contained in:
parent
59c0bb0f46
commit
fc5f4dc86f
@ -435,10 +435,6 @@ flagvals: flagvals flagval
|
||||
(PATH_CHROOT_REL | PATH_NS_REL))
|
||||
yyerror(_("Profile flag chroot_relative conflicts with namespace_relative"));
|
||||
|
||||
if (!($1.path & PATH_NS_REL))
|
||||
/* default to chroot relative profiles */
|
||||
$1.path |= PATH_CHROOT_REL;
|
||||
|
||||
if (($1.path & (PATH_MEDIATE_DELETED | PATH_DELEGATE_DELETED)) ==
|
||||
(PATH_MEDIATE_DELETED | PATH_DELEGATE_DELETED))
|
||||
yyerror(_("Profile flag mediate_deleted conflicts with delegate_deleted"));
|
||||
|
Loading…
x
Reference in New Issue
Block a user