mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-29 05:17:59 +00:00
Code Issues Releases Wiki Activity
apparmor/parser
History
John Johansen 1279f85e4a Merge parser: Improve rule merging/dedup 
Currently File rules are the only rules that have rule dedup/merging performed. Extend support for rule merging to all other rule types.

This can result in a small performance regression when rules can not be merged/deduped but can result in a large performance increase when lots of rules can be eliminated.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1065
Approved-by: Georgia Garcia <georgia.garcia@canonical.com>
Merged-by: John Johansen <john@jjmx.net>
2023-07-10 19:13:25 +00:00
..
libapparmor_re
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
po
translations: update generated pot files
2020-10-14 03:56:38 -07:00
tst
parser: add support for exposing a debug flag to policy
2023-07-02 03:02:02 -07:00
aa-teardown
aa-teardown: Replace /bin/bash with /bin/sh
2018-05-05 17:46:19 -07:00
aa-teardown.pod
docs: update documentation to point bug reporting to gitlab
2020-05-05 00:10:53 -07:00
af_rule.cc
parser: consolidate rule class handling into aa_class
2023-03-31 02:21:19 -07:00
af_rule.h
parser: add rule mergeing for af_rules
2023-07-07 17:46:19 -07:00
af_unix.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
af_unix.h
parser: add rule merging for af_unix rules
2023-07-07 17:46:54 -07:00
apparmor_parser.pod
parser: fix --jobs so job scaling is applied correctly
2021-02-10 19:06:26 -08:00
apparmor_xattrs.pod
apparmor_xattrs.7: fix whatis entry
2020-10-25 11:54:47 +00:00
apparmor.d.pod
parser: add support for exposing a debug flag to policy
2023-07-02 03:02:02 -07:00
apparmor.pod
man: apparmor.7 add info about complain mode and kernel parameters
2021-03-15 15:24:43 -07:00
apparmor.service
Adjust cache paths in apparmor.service
2018-06-16 23:14:19 +02:00
apparmor.systemd
Make the systemd unit a no-op in containers with no internal policy
2022-02-12 10:23:39 +00:00
base_af_names.h
Add 'mctp' network domain keyword
2022-02-08 19:09:24 +01:00
base_cap_names.h
parser: Add support for CAP_CHECKPOINT_RESTORE
2020-10-13 21:30:19 -07:00
capability.h
parser/capability.h: add missing <cstdint> include
2022-05-23 23:13:14 +01:00
common_flags.h
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
common_optarg.c
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
common_optarg.h
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
COPYING.GPL
rpmlint complains about an outdated FSF address in parser/COPYING.GPL.
2011-11-27 13:52:06 +01:00
dbus.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
dbus.h
parser: add rule merging for dbus rules
2023-07-07 17:47:36 -07:00
default_features.c
parser: Move to a pre-generated cap_names.h
2020-07-07 09:43:48 -07:00
file_cache.h
Fix comment wording in file_cache.h
2021-05-02 11:29:41 +02:00
frob_slack_rc
as ACKed on IRC, drop the unused $Id$ tags everywhere
2010-12-20 12:29:10 -08:00
immunix.h
parser: int mode to perms
2023-03-29 10:45:44 -07:00
io_uring.cc
parser: add flags to control rule merging
2023-07-08 01:06:50 -07:00
io_uring.h
parser: add io_uring rule merging
2023-07-07 17:45:38 -07:00
lib.c
Fix comment typo in parser/lib.c
2021-12-05 18:16:53 +01:00
lib.h
libapparmor: Use directory file descriptor in _aa_dirat_for_each()
2015-06-15 15:11:51 -05:00
Makefile
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
mount.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
mount.h
parser: add rule dedup of mount rules
2023-07-07 17:38:47 -07:00
mqueue.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
mqueue.h
parser: add rule merging for mqueue rules
2023-07-07 17:41:10 -07:00
network.c
parser: int mode to perms
2023-03-29 10:45:44 -07:00
network.h
parser: int mode to perms
2023-03-29 10:45:44 -07:00
parser_alias.c
parser: make alias_ignore a bool
2023-03-31 02:17:28 -07:00
parser_common.c
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
parser_include.c
parser: fix definitely and possibly lost memory leaks
2023-03-16 18:03:57 -03:00
parser_include.h
parser: add include dedup cache to handle include loops
2021-04-27 20:26:57 -07:00
parser_interface.c
parser: Remove check for root to run parser
2023-06-29 14:42:02 -07:00
parser_lex.l
Merge add userspace support for io_uring mediation
2023-06-29 21:38:02 +00:00
parser_main.c
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
parser_merge.c
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
parser_misc.c
parser: finish basic infrastructure for rule merging
2023-07-07 17:35:37 -07:00
parser_policy.c
parser: rename post_process() method and move code around
2023-03-31 02:17:28 -07:00
parser_regex.c
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
parser_symtab.c
treewide: spelling/typo fixes in code strings
2020-12-01 12:47:18 -08:00
parser_variable.c
parser: finish basic infrastructure for rule merging
2023-07-07 17:35:37 -07:00
parser_yacc.y
parser: add support for exposing a debug flag to policy
2023-07-02 03:02:02 -07:00
parser.conf
policy: pin policy to 4.0 abi for dev
2023-06-30 23:43:40 -07:00
parser.h
parser: Cleanup parser control flags, so they display as expected to user
2023-07-08 19:58:59 -07:00
policy_cache.c
Fix wording of some warnings
2020-10-11 12:22:23 +02:00
policy_cache.h
drop unused extern int debug_cache
2021-02-07 16:02:20 +01:00
policydb.h
parser: consolidate rule class handling into aa_class
2023-03-31 02:21:19 -07:00
profile-load
profile-load: use less ambiguous if/then construct
2022-02-15 07:34:17 +00:00
profile.cc
parser: finish basic infrastructure for rule merging
2023-07-07 17:35:37 -07:00
profile.h
parser: finish basic infrastructure for rule merging
2023-07-07 17:35:37 -07:00
ptrace.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
ptrace.h
parser: add rule merging for ptrace rules
2023-07-07 17:40:20 -07:00
rc.apparmor.functions
rc.apparmor.functions: only use systemd-detect-virt if it's present
2022-07-06 06:41:35 +00:00
rc.apparmor.slackware
added missing functions to slackware init script
2019-11-08 13:49:48 +01:00
README
README: Move project contact info into the main README
2018-09-13 16:54:09 +00:00
README.devel
parser: add some developer documentation
2013-12-10 14:15:02 -08:00
rule.cc
parser: consolidate rule class handling into aa_class
2023-03-31 02:21:19 -07:00
rule.h
parser: finish basic infrastructure for rule merging
2023-07-07 17:35:37 -07:00
signal.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
signal.h
parser: add rule merging for signals
2023-07-07 17:39:33 -07:00
techdoc.tex
treewide: spelling/typo fixes in comments and docs
2020-12-01 12:47:11 -08:00
unit_test.h
Convert codomain to a class
2013-09-27 16:16:37 -07:00
userns.cc
parser: cleanup and rework optimization and dump flag handling
2023-07-07 17:47:41 -07:00
userns.h
parser: add rule merging for userns rules
2023-07-07 17:39:50 -07:00

README 

The apparmor_parser allows you to add, replace, and remove AppArmor
policy through the use of command line options. The default is to add.
`apparmor_parser --help` shows what the command line options are.

You can also find more information at https://wiki.apparmor.net

-- The AppArmor development team