mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 13:58:22 +00:00
Code Issues Releases Wiki Activity
apparmor/parser
History
John Johansen 444b8e3836 parser: change xattr encoding and allow append_rule to embedd permissions 
The current encoding makes every xattr optional and uses this to
propogate the permission from the tail to the individual rule match
points.

This however is wrong. Instead change the encoding so that an xattr
(unless optional) is required to be matched before allowing moving
onto the next xattr match.

The permission is carried on the end on each rule portion file match,
xattr 1, xattr 2, ...

Signed-off-by: John Johansen <john.johansen@canonical.com>
2019-11-26 21:32:08 -08:00
..
libapparmor_re
parser: change xattr encoding and allow append_rule to embedd permissions
2019-11-26 21:32:08 -08:00
po
Launchpad automatic translations update.
2019-06-13 14:39:52 -07:00
tst
parser: support matching xattr keys but not values
2019-11-26 21:32:08 -08:00
aa-teardown
aa-teardown: Replace /bin/bash with /bin/sh
2018-05-05 17:46:19 -07:00
aa-teardown.pod
all: Use HTTPS links for apparmor.net
2018-09-13 16:41:32 +00:00
af_rule.cc
parser: fix more gcc 5 compilation problems
2015-02-26 14:55:13 -08:00
af_rule.h
C tools: rename __unused macro to unused
2014-10-02 12:58:54 -07:00
af_unix.cc
with unix rules we output a downgraded rule compatible with network rules
2017-09-07 02:26:15 -07:00
af_unix.h
C tools: rename __unused macro to unused
2014-10-02 12:58:54 -07:00
apparmor_parser.pod
remove subdomainfs support
2018-11-08 18:23:21 -08:00
apparmor_xattrs.pod
parser: add a man page for xattrs
2019-03-14 10:47:54 -07:00
apparmor.d.pod
docs: update apparmor.d language description
2019-11-09 14:05:22 -08:00
apparmor.pod
remove subdomainfs support
2018-11-08 18:23:21 -08:00
apparmor.service
Adjust cache paths in apparmor.service
2018-06-16 23:14:19 +02:00
apparmor.systemd
parser/apparmor.systemd: fix minor issues detected by shellcheck
2018-12-21 19:50:10 +01:00
common_optarg.c
Split dfa optimization and dump flag handling into a separate file so that it can be shared with DFA test programs
2014-04-23 11:10:41 -07:00
common_optarg.h
Split dfa optimization and dump flag handling into a separate file so that it can be shared with DFA test programs
2014-04-23 11:10:41 -07:00
COPYING.GPL
rpmlint complains about an outdated FSF address in parser/COPYING.GPL.
2011-11-27 13:52:06 +01:00
dbus.cc
add ability to use out of band transitions
2019-11-26 21:32:08 -08:00
dbus.h
C tools: rename __unused macro to unused
2014-10-02 12:58:54 -07:00
frob_slack_rc
as ACKed on IRC, drop the unused $Id$ tags everywhere
2010-12-20 12:29:10 -08:00
immunix.h
Rename AA_MAY_XXX permission bits that conflict with new layout
2015-06-06 01:25:49 -07:00
lib.c
libapparmor: Use directory file descriptor in _aa_dirat_for_each()
2015-06-15 15:11:51 -05:00
lib.h
libapparmor: Use directory file descriptor in _aa_dirat_for_each()
2015-06-15 15:11:51 -05:00
Makefile
parser: add a man page for xattrs
2019-03-14 10:47:54 -07:00
mount.cc
add ability to use out of band transitions
2019-11-26 21:32:08 -08:00
mount.h
Fix remount with bind
2015-09-21 12:20:19 -07:00
network.c
Use the gcc cleanup extension attribute to handle closing temp files
2015-03-25 17:09:26 -05:00
network.h
Remove unused net_find_af_val function, and network_families array
2015-02-27 16:20:31 +00:00
parser_alias.c
parser: provide typedefs for comparison_fn_t and __free_fn_t
2018-05-09 13:15:42 -07:00
parser_common.c
parser: Make xattr attachment generation conditional on kernel support
2019-11-26 21:32:08 -08:00
parser_include.c
parser: fix warnings about unused functions
2019-01-24 02:36:42 -08:00
parser_include.h
allow directories to be passed to the parser
2013-10-26 00:15:13 -07:00
parser_interface.c
parser: add support for matching based on extended file attributes
2019-03-14 10:47:54 -07:00
parser_lex.l
parser: support matching xattr keys but not values
2019-11-26 21:32:08 -08:00
parser_main.c
parser: Make xattr attachment generation conditional on kernel support
2019-11-26 21:32:08 -08:00
parser_merge.c
parser: Stop splitting the namespace from the named transition targets
2016-03-18 17:28:51 -05:00
parser_misc.c
parser: make sure xattr cond_entry_list is not leaked
2019-11-26 21:32:08 -08:00
parser_policy.c
parser: Stop splitting the namespace from the named transition targets
2016-03-18 17:28:51 -05:00
parser_regex.c
parser: change xattr encoding and allow append_rule to embedd permissions
2019-11-26 21:32:08 -08:00
parser_symtab.c
parser: provide typedefs for comparison_fn_t and __free_fn_t
2018-05-09 13:15:42 -07:00
parser_variable.c
parser: fix memory leaks in unit tests
2016-01-25 12:05:50 -08:00
parser_yacc.y
parser: support matching xattr keys but not values
2019-11-26 21:32:08 -08:00
parser.conf
parser: adjust parser.conf example Include statements
2015-03-09 10:43:13 -07:00
parser.h
parser: Make xattr attachment generation conditional on kernel support
2019-11-26 21:32:08 -08:00
policy_cache.c
libapparmor: Add support for overlaycache directories
2018-04-14 15:51:23 -07:00
policy_cache.h
libapparmor: Add support for overlaycache directories
2018-04-14 15:51:23 -07:00
policydb.h
Add the ability to mediate signals.
2014-04-23 11:35:29 -07:00
profile.cc
parser: make sure xattr cond_entry_list is not leaked
2019-11-26 21:32:08 -08:00
profile.h
parser: make sure xattr cond_entry_list is not leaked
2019-11-26 21:32:08 -08:00
ptrace.cc
And the related patch to fix globbing for af_unix abstract names
2015-02-12 10:19:16 -08:00
ptrace.h
C tools: rename __unused macro to unused
2014-10-02 12:58:54 -07:00
rc.apparmor.debian
as ACKed on IRC, drop the unused $Id$ tags everywhere
2010-12-20 12:29:10 -08:00
rc.apparmor.functions
Fix and simplify setting SFS_MOUNTPOINT
2019-06-21 19:22:15 +02:00
rc.apparmor.redhat
as ACKed on IRC, drop the unused $Id$ tags everywhere
2010-12-20 12:29:10 -08:00
rc.apparmor.slackware
added missing functions to slackware init script
2019-11-08 13:49:48 +01:00
README
README: Move project contact info into the main README
2018-09-13 16:54:09 +00:00
README.devel
parser: add some developer documentation
2013-12-10 14:15:02 -08:00
rule.cc
Move C++ files from .c suffix to .cc suffix
2014-05-09 15:34:34 -07:00
rule.h
Add missing rule.[hc] files that should have been part of commit 2449
2014-04-07 11:41:25 -07:00
signal.cc
And the related patch to fix globbing for af_unix abstract names
2015-02-12 10:19:16 -08:00
signal.h
C tools: rename __unused macro to unused
2014-10-02 12:58:54 -07:00
techdoc.tex
various changes in building techdoc.tex:
2012-05-09 00:41:06 +02:00
unit_test.h
Convert codomain to a class
2013-09-27 16:16:37 -07:00

README 

The apparmor_parser allows you to add, replace, and remove AppArmor
policy through the use of command line options. The default is to add.
`apparmor_parser --help` shows what the command line options are.

You can also find more information at https://wiki.apparmor.net

-- The AppArmor development team