From ae595aea03b9a7640918cf02cb786a0c05c410b7 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Wed, 16 Nov 2016 20:42:08 +0100 Subject: [PATCH] Fix 'alias' rule description in apparmor.d manpage The apparmor.d description about alias rules was broken in multiple ways. The manpage - didn't include the alias keyword - listed alias rules in the "COMMA RULES" section - while that's correct for the comma requirement, it's also wrong because COMMA RULES is meant to be inside a profile - didn't list alias rules in the PREAMBLE section This patch fixes this. It also moves the definition of VARIABLE, VARIABLE ASSIGNMENT (both unchanged) and ALIAS RULE next to PREAMBLE. Acked-by: Seth Arnold for trunk and 2.10 --- parser/apparmor.d.pod | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/parser/apparmor.d.pod b/parser/apparmor.d.pod index 6b828aef4..e8f62d948 100644 --- a/parser/apparmor.d.pod +++ b/parser/apparmor.d.pod @@ -46,7 +46,13 @@ to the policy; this behaviour is modelled after cpp(1). B = ( [ I ] [ I ] )* -B = ( I | I | I )* (variable assignment must come before the profile) +B = ( I | I | I | I )* (variable assignment and alias rules must come before the profile) + +B = I ('=' | '+=') (space separated values) + +B = '@{' I [ ( I | '_' ) ... ] '}' + +B = 'alias' I '-E' I ',' B = '#include' ( I | I ) @@ -78,7 +84,7 @@ B = [ ( I | I ',' | I ) B = ( I | I ) [ '\r' ] '\n' -B = ( I | I | I | I | I | I | I | I | I | I | I ) +B = ( I | I | I | I | I | I | I | I | I | I ) B = ( I | I | I ) @@ -257,12 +263,6 @@ B = name (requires I specified) B = I [ 'owner' ] 'link' [ 'subset' ] I ( 'to' | '-E' ) I -B = '@{' I [ ( I | '_' ) ... ] '}' - -B = I ('=' | '+=') (space separated values) - -B = I '-E' I - B = ('a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z') B = ('0', '1', '2', ... '9', 'a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z')