1. 31 May, 2018 1 commit
    • John Johansen's avatar
      aa-exec: in verbose mode output the pid of the process · d5284f5b
      John Johansen authored
      Add the pid of the process to the verbose mode output. This is useful
      for debugging.
      
      Eg.
          $ aa-exec -v -p '&:ns1:unconfined' -- bash
          aa_change_onexec("&:ns1:unconfined")
          exec bash
          pid: 11579
      
      making introspection of the task from another shell easier
          $ ps -Z 11579
          LABEL                             PID TTY      STAT   TIME COMMAND
          unconfined//&:ns1:unconfined    11579 pts/8    S+     0:00 bash
      Signed-off-by: default avatarJohn Johansen <[email protected]>
      d5284f5b
  2. 25 May, 2018 2 commits
  3. 22 May, 2018 4 commits
  4. 13 May, 2018 2 commits
  5. 12 May, 2018 1 commit
  6. 10 May, 2018 1 commit
    • Christian Boltz's avatar
      test-libapparmor-test_multi: initialize parent profiles · 79d9ee5c
      Christian Boltz authored
      If a log line contains a denial for a child profile, log_dict will
      (obviously) only contain the child profile. However, serialize_profile()
      expects that the parent profile is also initialized as ProfileStorage.
      
      This patch makes sure the parent profile gets initialized.
      
      It also removes 26 of the 37 reasons in the TODO note in aa.py :-)
      79d9ee5c
  7. 09 May, 2018 10 commits
  8. 08 May, 2018 3 commits
  9. 07 May, 2018 3 commits
  10. 06 May, 2018 8 commits
  11. 05 May, 2018 2 commits
    • Christian Boltz's avatar
      simplify write_piece · 2b7920ff
      Christian Boltz authored
      write_piece() has some funny code that converts the result of
      write_header() and write_rules() (which is a list) to... a list.
      
      Needless to say that this is superfluous ;-)
      2b7920ff
    • Christian Boltz's avatar
      Drop some safety nets in aa.py · 62e429bc
      Christian Boltz authored
      match_includes() and is_known_rule() have safety nets to avoid troube if
      include[incname][incname] is not a valid ProfileStorage object.
      However, this situation shouldn't happen in practise anymore, so let's
      drop these now superfluous safety nets.
      
      I use this patch locally since months without problems.
      62e429bc
  12. 03 May, 2018 1 commit
  13. 30 Apr, 2018 2 commits