[apparmor] How does ALIAS work?

J. R. Okajima hooanon05g at gmail.com
Sun Jan 5 16:47:47 UTC 2020


John Johansen:
> currently it works poorly. What it does it rule rewriting so that
> the leading elements of a rule "should" be replaced.
	:::
> It is possible to fix this, so that the compiler can do the rewrite
> against the generated state machine. This has even been prototyped
> but is currently buggy and needs a lot more work before we can land
> it.

Thank you for the reply.
But I still don't get it.  Do you mean that
> > - add an alias rule "alias / -> /tmp/,"
in my test script (attached to previous mail) doesn't work at all?  And
it won't be fixed easily?
Could you try reproducing the problem by my test script if you have not
tried?


J. R. Okajima



More information about the AppArmor mailing list