mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 16:35:02 +01:00
832bb8f417
Add support for a default_allow mode that facillitates writing profiles in that allow everything by default. This is not normally recomended but fascilitates creating basic profiles while working to transition policy away from unconfined. This mode is being added specifically to replace the use of the unconfined flag in these transitional profiles as the use of unconfined in policy is confusing and does not reflect the semantics of what is being done. Generally the goal for policy should be to remove all default_allow profiles once the policy is fully developed. Note: this patch only adds parsing of default_allow mode. Currently it sets the unconfined flag to achieve default allow but this prevents deny rules from being applied. Once dominance is fixed a subsequent patch will transition default_allow away from using the unconfined flag. Signed-off-by: John Johansen <john.johansen@canonical.com> |
||
|---|---|---|
| .. | ||
| abi | ||
| all | ||
| bare_include_tests | ||
| capability | ||
| change_hat | ||
| change_profile | ||
| conditional | ||
| dbus | ||
| file | ||
| include_tests | ||
| includes | ||
| includes-preamble | ||
| io_uring | ||
| mount | ||
| mqueue | ||
| namespaces | ||
| network | ||
| profile | ||
| ptrace | ||
| rewrite | ||
| rlimits | ||
| signal | ||
| unix | ||
| vars | ||
| xattrs | ||
| xtrans | ||
| readme | ||
Directory for auto generated x-transition tests