John Johansen
36ad7de2c5
Add the ability to specify link subset test on a link pair, and
...
fix a bug where link pairs could get improperly merged.
2008-03-13 16:49:10 +00:00
John Johansen
814773b2e1
Update the parse to emit a 0 to seperate pairs in the dfa.
...
This was always the intended behavior and fixes a bug where
the dfa will match change profile rules using // seperator.
2008-03-13 16:46:19 +00:00
John Johansen
97dbaa02cb
change from U:G:O syntax to owner syntax and remove group permission
2007-11-29 18:06:53 +00:00
John Johansen
4ce25448af
allow specifying link permissions as a pair
2007-11-16 09:37:31 +00:00
John Johansen
398102afa8
old style link compatability
2007-11-16 09:36:42 +00:00
John Johansen
0e5484ce77
fix change profile
2007-11-16 09:36:19 +00:00
John Johansen
638535d650
exec modes per U:G:O
2007-11-16 09:35:57 +00:00
John Johansen
ec639bc82c
user:group:any permissions
2007-11-16 09:35:31 +00:00
John Johansen
230b04231c
add pix transition mode
2007-11-16 09:27:34 +00:00
John Johansen
a4721bd02d
add basic handling of profile namespaces
2007-11-16 09:18:48 +00:00
John Johansen
cd79c1ac77
update copyright dates
2007-04-11 08:12:51 +00:00
Steve Beattie
5fe5803aa7
Fix a couple of warnings in the recent trailing slash commit.
2007-03-14 22:35:55 +00:00
John Johansen
51b25bd3e5
Handle differentation of directories and files via / for the dfa engine.
...
This causes the dfa engine to not strip trailing /
and to handle /*/ /**/ and /* and /** cases specially so that directories
don't get matched unintentionally
aare pcre
/foo/* -> /foo/[^/][^/]* so the dir /foo/ will not match the rule
/foo/** -> /foo/[^/].*
/*/foo -> /[^/][^/]*/foo so the rule won't match //foo
/**/foo -> /[^/].*/foo
rules that contain more than a * or ** between dir / elements do not
get converted, ie.
/foo*
/foo**
/foo*/
/foo**/
/*foo
/**foo
/*foo/
/**foo/
there is a known case where this patch is incomplete. When there
exists an alternation that can be empty and * or ** ie.
/{foo,}*
/{foo,*}
2007-03-14 22:00:39 +00:00
John Johansen
f3ba454d8c
Add dfa support to the parser
2007-02-27 02:29:16 +00:00
John Johansen
20dbc4d8cb
fix miss break #240986 . Back out partial commit of dfa matcher support (that was mistakenly submitted)
2007-02-01 21:45:39 +00:00
John Johansen
d1f8df2fa5
dfa patches for the parser
2007-02-01 20:18:50 +00:00
Steve Beattie
6b0de8f6bc
Update keywords attribute, svn:ignore attribute, update Makefile to
...
point to the new location of the common/ dir.
2006-04-12 03:09:10 +00:00
Steve Beattie
6d3e74907d
Import the rest of the core functionality of the internal apparmor
...
development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
