4 commits

Author	SHA1	Message	Date
Christian Boltz	9fc8e43c67	abstractions: remove '#' from 'include if exists' ... This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'.	2020-05-30 19:53:49 +02:00
John Johansen	730db17607	policy: tag policy with the AppArmor 3.0 abi ... Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>	2020-05-29 00:23:17 -07:00
Matthew Garrett	d9ab83281b	Add support for local additions to abstractions ... Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com>	2019-01-24 03:06:03 -08:00
Vincas Dargis	94014c09f0	Add kde-icon-cache-write abstraction ... KIconLoader uses ~/.cache/icon-cache.kcache, and it is opened in read-write mode. Because access to it does not seem to be critical, and read-only mode is not used, rules for accessing this cache is added to it's own new "write" abstraction, instead of making kde abstraction more permissive by default. Signed-off-by: John Johansen <john.johansen@canonical.com>	2018-08-14 16:49:30 -07:00