Update AppArmorDelegation

John Johansen 2018-09-18 13:26:43 +00:00
parent 5480edd371
commit 617cdc591b

@ -284,6 +284,14 @@ First each component of the task confinement is evaluated for transitions, this
After the transition evaluation the delegated rules are checked for inheritance. After the transition evaluation the delegated rules are checked for inheritance.
# delegtion and stacking
confinement is always expressed in conjunctive normal form
delegating to a stack
(A//&B)//+C is transformed into (A//+C)//&(B//+C)
Application Directed Delegation Application Directed Delegation
=============================== ===============================