[apparmor] Supporting network permissions and address expressions?

Jaehyun Nam namjh at 0x010.com
Mon Jan 18 11:55:48 UTC 2021


Hello all,

I’m trying to use network permissions and ip address expressions in AppArmor profiles.
Unfortunately, whenever I tried to apply such things, AppArmor showed 
“syntax error, unexpected TOK_ID, expecting TOK_END_OF_RULE”.

While those syntaxes are described in the apparmor core policy reference,
it seems that there is no corresponding syntax even in apparmor-3.0.0-0ubuntu1 (with Linux Kernel 5.8.0-38-generic, Ubuntu 20.10).

Could anyone help me solve this problem?

Thanks,
Jaehyun


More information about the AppArmor mailing list