From 617cdc591b7ccee1337b5962443bcee1274d39ce Mon Sep 17 00:00:00 2001 From: John Johansen Date: Tue, 18 Sep 2018 13:26:43 +0000 Subject: [PATCH] Update AppArmorDelegation --- AppArmorDelegation.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/AppArmorDelegation.md b/AppArmorDelegation.md index 552eaeb..a548ed4 100644 --- a/AppArmorDelegation.md +++ b/AppArmorDelegation.md @@ -284,6 +284,14 @@ First each component of the task confinement is evaluated for transitions, this After the transition evaluation the delegated rules are checked for inheritance. +# delegtion and stacking + +confinement is always expressed in conjunctive normal form + +delegating to a stack +(A//&B)//+C is transformed into (A//+C)//&(B//+C) + + Application Directed Delegation ===============================