[apparmor] [patch] Add support for rlimit and signal rules to aa-mergeprof

Kshitij Gupta kgupta8592 at gmail.com
Wed Nov 18 22:27:29 UTC 2015


On Fri, Oct 23, 2015 at 9:04 PM, Christian Boltz <apparmor at cboltz.de> wrote:

> Hello,
>
> $subject ;-)
>
>
> [ 11-mergeprof-support-rlimit-and-signal.diff ]
>
> --- utils/aa-mergeprof  2015-06-25 21:32:37.420831338 +0200
> +++ utils/aa-mergeprof  2015-10-23 17:26:03.947428725 +0200
> @@ -631,7 +631,7 @@
>                              elif re.search('\d', ans):
>                                  default_option = ans
>
> -            for ruletype in ['capability', 'network', 'change_profile']:
> +            for ruletype in ['capability', 'change_profile', 'network',
> 'rlimit', 'signal']:
>
It might be a good idea to have the list of known rules stated right above
somewhere.


>                  if other.aa[profile][hat].get(ruletype, False): # needed
> until we have proper profile initialization
>                      for rule_obj in
> other.aa[profile][hat][ruletype].rules:
>
>
> Thanks for the patch.

Acked-by: Kshitij Gupta <kgupta8592 at gmail.com>

>
>
> Regards,
>
> Christian Boltz
> --
> Schlagen. Verklagen. Z.B. bei der c't verpfeifen, auf daß es fortan
> die Spatzen von den Dächern pfeifen, was für Pfeifen das bei $Firma
> sind. *scnr* [David Haller in suse-linux]
>
>
> --
> AppArmor mailing list
> AppArmor at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/apparmor
>



-- 
Regards,

Kshitij Gupta
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20151119/6b23e09c/attachment.html>


More information about the AppArmor mailing list