mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update QuickProfileLanguage

Ryan Lee 2024-08-30 16:10:53 +00:00
parent 9770b7858b
commit 8d5e0bae9f
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
QuickProfileLanguage.md

@ -320,17 +320,17 @@ The following file permissions are supported:
- w - write
- a - append (implied by w)
- x - execute
- ux - Execute unconfined (preserve environment) -- WARNING: should only be used in very special cases
- Ux - Execute unconfined (scrub the environment)
- px - Execute under a specific profile (preserve the environment) -- WARNING: should only be used in special cases
- Px - Execute under a specific profile (scrub the environment)
- ux - Execute unconfined -- WARNING: should only be used in very special cases
- Ux - Execute unconfined (use ld.so(8) secure-execution mode)
- px - Execute under a specific profile -- WARNING: should only be used in special cases
- Px - Execute under a specific profile (use ld.so(8) secure-execution mode)
- pix - as px but fallback to inheriting the current profile if the target profile is not found
- Pix - as Px but fallback to inheriting the current profile if the target profile is not found
- pux - as px but fallback to executing unconfined if the target profile is not found
- Pux - as Px but fallback to executing unconfined if the target profile is not found
- ix - Execute and inherit the current profile
- cx - Execute and transition to a child profile (preserve the environment)
- Cx - Execute and transition to a child profile (scrub the environment)
- cx - Execute and transition to a child profile
- Cx - Execute and transition to a child profile (use ld.so(8) secure-execution mode)
- cix - as cx but fallback to inheriting the current profile if the target profile is not found
- Cix - as Cx but fallback to inheriting the current profile if the target profile is not found
- cux - as cx but fallback to executing unconfined if the target profile is not found