mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
aa06528790
Move @{sys} into tunables/kernelvars to make it readily available for
all profiles by default. In order to avoid duplicate variable
declaration, other tunable includes where modified accordingly.
Additionally, apparmor_api/is_enable has updated comment with regards to
@{sys} availability. tunables/sys is now marked as deprecated and should
not be used as it is noop, left only for backwards compatibility.
This is preparation for fixing bug:
https://bugs.launchpad.net/apparmor/+bug/1728551
Thanks to Christian Boltz for original idea to implement this in
non-breaking manner.
33 lines
1.4 KiB
Text
33 lines
1.4 KiB
Text
# Copyright (C) 2012 Canonical Ltd.
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License published by the Free Software Foundation.
|
|
#
|
|
# ------------------------------------------------------------------
|
|
|
|
# This file should contain declarations to kernel vars or variables
|
|
# that will become kernel vars at some point
|
|
|
|
# until kernel vars are implemented
|
|
# and until the parser supports nested groupings like
|
|
# @{pid}=[1-9]{[0-9]{[0-9]{[0-9]{[0-9]{[0-9],},},},},}
|
|
# use
|
|
@{pid}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9]}
|
|
|
|
#same pattern as @{pid} for now
|
|
@{tid}=@{pid}
|
|
|
|
#A pattern for pids that can appear
|
|
@{pids}=@{pid}
|
|
|
|
# Placeholder for user id until kernel var is implemented to match
|
|
# current user of the confined application.
|
|
# Values are 0...4,294,967,295 (32-bit unsigned, 10 digits).
|
|
@{uid}={[0-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]}
|
|
|
|
#same pattern as @{uid} for now
|
|
@{uids}=@{uid}
|
|
|
|
# until kernel var is implemented
|
|
@{sys}=/sys/
|