mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-05 17:01:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/parser/tst/simple_tests
History
John Johansen 5e361a4a05 Fix dfa minimization to deal with exec conflicts 
Minimization was failing because it was too agressive.  It was minimizing
as if there was only 1 accept condition.  This allowed it to remove more
states but at the cost of loosing unique permission sets, they where
being combined into single commulative perms.  This means that audit,
deny, xtrans, ... info on one path would be applied to all other paths
that it was combined with during minimization.

This means that we need to retain the unique accept states, not allowing
them to be combined into a single state.  To do this we put each unique
permission set into its own partition at the start of minimization.

The states within a partition have the  same permissions and can be combined
within the other states in the partition as the loss of unique path
information is will not result in a conflict.

This is similar to what perm hashing used to do but deny information is
still being correctly applied and carried.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-By: Steve Beattie <sbeattie@ubuntu.com>
2012-03-09 04:20:19 -08:00
..
capability Remove setting of capabilities from the syntax 2012-02-16 08:04:04 -08:00
change_hat as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
change_profile Fix change_profile so that it works with regular expressions (lpn390810) 2009-07-23 21:18:37 +00:00
conditional Rearrange tests into subdirectories, so that it is easier to see what tests 2009-07-23 07:42:57 +00:00
file Allow the 'file' keyword to be optionally used on file rules. 2012-02-16 08:06:04 -08:00
include_tests include *.dpkg-bak in files to ignore 2010-02-16 12:56:04 -08:00
includes as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
includes-preamble Move preamble inclusions to a different directory since it was breaking 2008-11-25 19:05:40 +00:00
mount Add mount rules 2012-02-24 04:19:38 -08:00
network as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
profile Add missing files from my last 11 patches as I forgot to do bzr add before 2010-12-20 13:18:36 -08:00
rewrite Allow for a location to alias to multiple locations. Ie. 2010-02-12 13:51:27 -08:00
vars Bah, fix up screwed up testcase. 2011-03-29 02:46:09 -07:00
xtrans Fix dfa minimization to deal with exec conflicts 2012-03-09 04:20:19 -08:00
readme Add missing files from my last 11 patches as I forgot to do bzr add before 2010-12-20 13:18:36 -08:00

readme 

Directory for auto generated x-transition tests