apparmor/parser
Steve Beattie 05029cb9b7 parser - add support for variable expansion in dbus rules
Bug: https://bugs.launchpad.net/bugs/1218099

This patch adds support for expanding variables with dbus rules.
Specifically, they can expanded within the bus, name, path, member,
interface, and peer label fields.

Parser test cases and regression test cases are added as well.

Patch history:
  v1: initial version of patch
  v2: add equality.sh tests to verify that the results of using
      variable expansion is the same as what should be equivalent rules

Signed-off-by: Steve Beattie <sbeattie@ubuntu.com>
Acked-by: Tyler Hicks <tyhicks@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
2013-08-29 12:34:13 -07:00
..
libapparmor_re temp fix using the 2.8 patch until the 3.0 patch is ready to land 2012-12-10 17:08:19 -08:00
po Fix list email typo 2011-02-23 15:57:36 -08:00
tst parser - add support for variable expansion in dbus rules 2013-08-29 12:34:13 -07:00
apparmor-parser.spec.in Add an example parser.conf file 2011-10-07 14:43:54 -07:00
apparmor.d.pod parser: Update man page for DBus rules 2013-07-31 09:03:15 -07:00
apparmor.pod as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
apparmor_parser.pod apparmor: update apparmor_parser man page 2012-08-13 16:58:46 -07:00
COPYING.GPL rpmlint complains about an outdated FSF address in parser/COPYING.GPL. 2011-11-27 13:52:06 +01:00
dbus.c parser - add support for variable expansion in dbus rules 2013-08-29 12:34:13 -07:00
dbus.h parser - add support for variable expansion in dbus rules 2013-08-29 12:34:13 -07:00
frob_slack_rc as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
immunix.h parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
lib.c apparmor: abstract out the directory walking routine 2012-08-16 16:26:03 -07:00
lib.h apparmor: abstract out the directory walking routine 2012-08-16 16:26:03 -07:00
Makefile parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
mount.c Make mount operations aware of 'in' keyword so they can affect the flags build list 2012-03-26 06:19:21 -07:00
mount.h Fix mnt_flags passed for remount 2012-03-22 07:55:58 -07:00
parser.conf Commit the example parser.conf file that was supposed to be part of 2011-10-09 20:15:03 -07:00
parser.h parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
parser_alias.c as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
parser_common.c Update the copyright dates for the apparmor_parser 2012-02-24 04:21:59 -08:00
parser_include.c Update the copyright dates for the apparmor_parser 2012-02-24 04:21:59 -08:00
parser_include.h Update the copyright dates for the apparmor_parser 2012-02-24 04:21:59 -08:00
parser_interface.c Add Basic infrastructure support for the policydb 2012-02-16 08:14:46 -08:00
parser_lex.l parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
parser_main.c Subject: [patch] fix apparmor cache tempfile location to use passed arg v2 2013-07-26 10:55:52 -07:00
parser_merge.c Fix compilation errors that slipped in. Yes, I realize this breaks the 2011-02-23 14:40:07 -08:00
parser_misc.c parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
parser_policy.c parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
parser_regex.c parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
parser_symtab.c [v2: added clean-ups, backed off on some of the build silencing] 2011-05-13 02:12:49 -07:00
parser_variable.c parser - add support for variable expansion in dbus rules 2013-08-29 12:34:13 -07:00
parser_yacc.y parser: Add support for DBus rules 2013-07-31 09:05:51 -07:00
policydb.h Add Basic infrastructure support for the policydb 2012-02-16 08:14:46 -08:00
rc.aaeventd.redhat as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
rc.aaeventd.suse openSUSE patch to remove the "-f" parameter from startproc in rc.aaeventd.suse / 2011-08-13 14:22:35 +02:00
rc.apparmor.debian as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
rc.apparmor.functions Update the copyright dates for the apparmor_parser 2012-02-24 04:21:59 -08:00
rc.apparmor.redhat as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
rc.apparmor.slackware as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
rc.apparmor.suse It looks like rc.apparmor.functions renamed "aa_log_action_begin()" to 2011-09-15 20:20:23 +02:00
README Remove pcre and update tests where necessary 2010-07-31 16:00:52 -07:00
subdomain.conf Here's an update to rename another chunk of things that still used 2011-01-13 13:58:26 -08:00
subdomain.conf.pod Update the copyright dates for the apparmor_parser 2012-02-24 04:21:59 -08:00
techdoc.tex various changes in building techdoc.tex: 2012-05-09 00:41:06 +02:00

The apparmor_parser allows you to add, replace, and remove AppArmor
policy through the use of command line options. The default is to add.
`apparmor_parser --help` shows what the command line options are.

You can also find more information at
<http://forge.novell.com/modules/xfmod/project/?apparmor>.

Please send all complaints, bug reports, feature requests, rants about the
software, and questions to apparmor-general@forge.novell.com. Security
issues should be directed to security@suse.de or secure@novell.com,
where we will attempt to conform to the RFP vulnerability disclosure
protocol: http://www.wiretrip.net/rfp/policy.html

Thanks.

-- The AppArmor development team