add fine grained network mediation support
2 unresolved threads
2 unresolved threads
Similar to !1095, but this time simplified. This version removes support for ip and port ranges and subnets. This can be added later.
It also contains an updated version of the network layout required by the kernel side of AppArmor.
Merge request reports
Activity
added 7 commits
- 9e57281f - parser: add fine grained conditionals to network rule
- 6bac9ba8 - parser: change network conditionals to allow unquoted ids
- 2037bdf7 - parser: add network conditional parser tests
- 0f0cc515 - parser: add parser tests for local conditional
- 4d18937e - parser: add parser tests for specified perms
- eda41fe3 - tests: add multi string support in requires_parser_support
- dc1ebe45 - tests: add fine grained network regression tests
Toggle commit listadded 7 commits
- ddefe11a - parser: add fine grained conditionals to network rule
- 7e25be7b - parser: change network conditionals to allow unquoted ids
- 052dd987 - parser: add network conditional parser tests
- 79ee3eb1 - parser: add parser tests for local conditional
- 8a5e7227 - parser: add parser tests for specified perms
- f6ad1cbe - tests: add multi string support in requires_parser_support
- 497b9c2e - tests: add fine grained network regression tests
Toggle commit listadded 1 commit
- dd0d145a - tests: add fine grained network regression tests
added 1 commit
- dcfe63cf - parser: maintain compatibility for fine grained network mediation
added 1 commit
- 119e3f38 - parser: maintain compatibility for fine grained inet network mediation
mentioned in commit 35287c8e
- tests/regression/apparmor/net_finegrained.sh 0 → 100644
1 #! /bin/bash 2 #Copyright (C) 2022 Canonical, Ltd. 3 # 4 #This program is free software; you can redistribute it and/or 5 #modify it under the terms of the GNU General Public License as 6 #published by the Free Software Foundation, version 2 of the 7 #License. 8 9 #=NAME posix_mq 10 #=DESCRIPTION 11 # This test verifies if mediation of posix message queues is working
Please register or sign in to reply