apparmor/parser/tst/simple_tests/capability/ok_allow10.sd

#
#=DESCRIPTION validate audit allow with bare capability in hat.
#=EXRESULT PASS
# vim:syntax=apparmor
# Last Modified: Sun Apr 17 19:44:44 2005
#
/does/not/exist {
  ^capability {
     audit allow capability,
  }
}
add optional allow prefix to the language From: John Johansen <john.johansen@canonical.com> let allow be used as a prefix in place of deny. Allow is the default and is implicit so it is not needed but some user keep tripping over it, and it makes the language more symmetric eg. /foo rw, allow /foo rw, deny /foo rw, Patch history: v1: - initial revision v2: - rename yacc target rule from opt_deny to opt_perm_mode to reflect that it can be either an allow or deny modifier - break apart tests into more digestible chunks and to clarify their purpose - fix some tests to exercise 'audit allow' - add negative tests for 'allow' and 'deny' in the same rule - add support for 'allow' keyword to apparmor.vim - fix a bug in apparmor.vim to let it recognize multiple capability entries in a single line. v3: - add support for optional keywords on capability rules in regression tests, as well as the bare capability keyword (via 'cap:ALL') - add allow, deny, and conflicting capability behavioral regression tests - fix vim syntax modeline to refer to apparmor in parser tests - adjust FILE regex in vim syntax file creator script Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Seth Arnold <seth.arnold@canonical.com> 2013-09-20 06:48:56 -07:00			`#`
			`#=DESCRIPTION validate audit allow with bare capability in hat.`
			`#=EXRESULT PASS`
			`# vim:syntax=apparmor`
			`# Last Modified: Sun Apr 17 19:44:44 2005`
			`#`
			`/does/not/exist {`
			`^capability {`
			`audit allow capability,`
			`}`
			`}`