apparmor

mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 14:25:52 +00:00

Files

John Johansen d5c815783b Fix: refactor change_profile to deal with unexpected TOK_ID error

bison isn't properly handling the 3 options of

TOK_CHANGE_PROFILE opt_id TOK_END_OF_RULE
TOK_CHANGE_PROFILE opt_id TOK_ARROW TOK_ID TOK_END_OF_RULE
TOK_CHANGE_PROFILE opt_id TOK_ARROW TOK_COLON TOK_ID TOK_COLON TOK_END_OF_RULE

specifying
  change_profile /exec,

results in an unexpected TOK_ID error

refactor so that they share the 3 options share a common head which fixes
the problem.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <steve@nxnw.org>

2015-06-12 15:25:10 -07:00

libapparmor_re

parser: Honor USE_SYSTEM make variable in libapparmor_re

2015-03-25 17:09:25 -05:00

Merge from launchpad translations project. Changes include:

2015-05-16 10:05:48 -07:00

tst

split flags_bad.sd

2015-06-08 22:22:07 +02:00

af_rule.cc

parser: fix more gcc 5 compilation problems

2015-02-26 14:55:13 -08:00

af_rule.h

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

af_unix.cc

2015-02-12 10:19:16 -08:00

af_unix.h

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

apparmor_parser.pod

parser: Document the --features-file option in apparmor_parser(8)

2015-06-01 11:29:37 -05:00

apparmor.d.pod

This patch fixes several formatting issues with the apparmor.d man page:

2015-06-02 16:05:37 -07:00

apparmor.pod

can ?not fix apparmor.pod

2013-12-12 03:07:37 +01:00

common_optarg.c

Split dfa optimization and dump flag handling into a separate file so that it can be shared with DFA test programs

2014-04-23 11:10:41 -07:00

common_optarg.h

Split dfa optimization and dump flag handling into a separate file so that it can be shared with DFA test programs

2014-04-23 11:10:41 -07:00

COPYING.GPL

rpmlint complains about an outdated FSF address in parser/COPYING.GPL.

2011-11-27 13:52:06 +01:00

dbus.cc

parser/dbus.cc: fix "accesss" typo.

2015-05-01 10:25:57 +02:00

dbus.h

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

frob_slack_rc

as ACKed on IRC, drop the unused $Id$ tags everywhere

2010-12-20 12:29:10 -08:00

immunix.h

Rename AA_MAY_XXX permission bits that conflict with new layout

2015-06-06 01:25:49 -07:00

lib.c

parser: Remove atomic ops

2015-03-25 17:09:27 -05:00

lib.h

libapparmor: Protect _aa_autofree users from freeing bad pointers

2015-03-25 17:09:27 -05:00

Makefile

Respect $CPPFLAGS

2015-06-10 12:36:15 -07:00

mount.cc

2015-02-12 10:19:16 -08:00

mount.h

parser: Clean up the use of MS_REC in mount.h

2014-12-12 08:21:25 -06:00

network.c

Use the gcc cleanup extension attribute to handle closing temp files

2015-03-25 17:09:26 -05:00

network.h

Remove unused net_find_af_val function, and network_families array

2015-02-27 16:20:31 +00:00

parser_alias.c

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

parser_common.c

parser: Finalize the aa_kernel_interface API

2015-03-25 17:09:26 -05:00

parser_include.c

Use the gcc cleanup extension attribute to handle closing temp files

2015-03-25 17:09:26 -05:00

parser_include.h

allow directories to be passed to the parser

2013-10-26 00:15:13 -07:00

parser_interface.c

libapparmor: Move the aa_kernel_interface API

2015-03-25 17:09:27 -05:00

parser_lex.l

Update change_profile rules to allow specifying the onexec condition

2015-06-12 15:25:10 -07:00

parser_main.c

Set cache file tstamp to the mtime of most recent policy file tstamp

2015-06-06 01:22:53 -07:00

parser_merge.c

put the gettext define in one place

2014-08-23 23:50:43 -07:00

parser_misc.c

Rename AA_MAY_XXX permission bits that conflict with new layout

2015-06-06 01:25:49 -07:00

parser_policy.c

libapparmor: Move the aa_kernel_interface API

2015-03-25 17:09:27 -05:00

parser_regex.c

Fix screening of change_profile permission from file rule entries

2015-06-12 15:25:10 -07:00

parser_symtab.c

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

parser_variable.c

Fix: variable expansion for link target

2015-06-06 01:28:12 -07:00

parser_yacc.y

Fix: refactor change_profile to deal with unexpected TOK_ID error

2015-06-12 15:25:10 -07:00

parser.conf

parser: adjust parser.conf example Include statements

2015-03-09 10:43:13 -07:00

parser.h

Update change_profile rules to allow specifying the onexec condition

2015-06-12 15:25:10 -07:00

policy_cache.c

Set cache file tstamp to the mtime of most recent policy file tstamp

2015-06-06 01:22:53 -07:00

policy_cache.h

Set cache file tstamp to the mtime of most recent policy file tstamp

2015-06-06 01:22:53 -07:00

policydb.h

Add the ability to mediate signals.

2014-04-23 11:35:29 -07:00

profile.cc

parser: first step implementing fine grained mediation for unix domain sockets

2014-09-03 13:22:26 -07:00

profile.h

Add fns to handle profile removal to the kernel interface

2015-03-25 17:09:26 -05:00

ptrace.cc

2015-02-12 10:19:16 -08:00

ptrace.h

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

rc.apparmor.debian

as ACKed on IRC, drop the unused $Id$ tags everywhere

2010-12-20 12:29:10 -08:00

rc.apparmor.functions

Update the copyright dates for the apparmor_parser

2012-02-24 04:21:59 -08:00

rc.apparmor.redhat

as ACKed on IRC, drop the unused $Id$ tags everywhere

2010-12-20 12:29:10 -08:00

rc.apparmor.slackware

as ACKed on IRC, drop the unused $Id$ tags everywhere

2010-12-20 12:29:10 -08:00

rc.apparmor.suse

It looks like rc.apparmor.functions renamed "aa_log_action_begin()" to

2011-09-15 20:20:23 +02:00

README

parser - update README information

2013-10-11 22:14:28 -07:00

README.devel

parser: add some developer documentation

2013-12-10 14:15:02 -08:00

rule.cc

Move C++ files from .c suffix to .cc suffix

2014-05-09 15:34:34 -07:00

rule.h

Add missing rule.[hc] files that should have been part of commit 2449

2014-04-07 11:41:25 -07:00

signal.cc

2015-02-12 10:19:16 -08:00

signal.h

C tools: rename __unused macro to unused

2014-10-02 12:58:54 -07:00

subdomain.conf

Here's an update to rename another chunk of things that still used

2011-01-13 13:58:26 -08:00

subdomain.conf.pod

fix broken URLs in various utils/*.pod files.

2013-09-19 21:17:39 +02:00

techdoc.tex

various changes in building techdoc.tex:

2012-05-09 00:41:06 +02:00

unit_test.h

Convert codomain to a class

2013-09-27 16:16:37 -07:00

README

The apparmor_parser allows you to add, replace, and remove AppArmor
policy through the use of command line options. The default is to add.
`apparmor_parser --help` shows what the command line options are.

You can also find more information at http://wiki.apparmor.net

Please send all complaints, feature requests, rants about the software,
and questions to the apparmor@lists.ubuntu.com mailing list. Bug
reports can be filed against the AppArmor project on launchpad.net at
https://launchpad.net/apparmor or reported to the mailing list directly
for those who wish not to register for an account on launchpad.

Security issues can be filed as security bugs on launchpad
or directed to security@ubuntu.com. We will attempt to
conform to the RFP vulnerability disclosure protocol:
http://www.wiretrip.net/rfp/policy.html

Thanks.

-- The AppArmor development team