diff --git a/docs/apparmor.d.pod b/docs/apparmor.d.pod index caf1ae95c..ec92e5336 100644 --- a/docs/apparmor.d.pod +++ b/docs/apparmor.d.pod @@ -54,13 +54,13 @@ B = '#' I B = any characters -B = [ I ... ] I [ I ]'{' [ ( I | I | I ) ... ] '}' [ I ... ] +B = [ I ... ] I [ I ]'{' [ ( I | I | I | I ) ... ] '}' B = [ I ... ] I '{' [ ( I | I | I ) ... ] '}' B = (non-whitespace characters except for B<^>, must start with '/') -B = I '^' (non-whitespace characters; see change_hat(2) for a description of how this "hat" is used.) +B = '^' (non-whitespace characters; see change_hat(2) for a description of how this "hat" is used.) B = ( I | I ) ',' @@ -76,8 +76,8 @@ B = ( 'r' | 'w' | 'l' | 'ix' | 'ux' | 'px' ) I (not all combina All resources and programs need a full path. There may be any number of subprofiles ("hats") in a profile, limited only by kernel memory. -Subprofile names are limited to 974 characters. Subprofiles must be in the -same file as the parent profile. Not all profiles benefit from subprofiles +Subprofile names are limited to 974 characters. +Not all profiles benefit from subprofiles --- applications must either be written or modified to use change_hat(2) to take advantage of subprofiles. (An Apache module, mod_apparmor(5) has been provided to use change_hat(2).)