• John Johansen's avatar
    parser: ignore feature abi rules · 5df25d90
    John Johansen authored
    AppArmor 3.0 requires policy to use a feature abi rule for access to
    new features. However some policy may start using abi rules even if
    they don't have rules that require new features.  This is especially
    true for out of tree policy being shipped in other packages.
    
    Add enough support to older releases that the parser will ignore the
    abi rule and warn that it is falling back to the apparmor 2.x
    technique of using the system abi.
    
    If the profile contains rules that the older parser does not
    understand it will fail policy compilation at the unknown rule instead
    of the abi rule.
    
    PR: !196
    (backported form commit 83df7c47)
    Signed-off-by: 's avatarJohn Johansen <john.johansen@canonical.com>
    Acked-by: 's avatarSeth Arnold <seth.arnold@canonical.com>
    5df25d90
Name
Last commit
Last update
..
libapparmor_re Loading commit data...
po Loading commit data...
tst Loading commit data...
COPYING.GPL Loading commit data...
Makefile Loading commit data...
README Loading commit data...
README.devel Loading commit data...
aa-teardown Loading commit data...
aa-teardown.pod Loading commit data...
af_rule.cc Loading commit data...
af_rule.h Loading commit data...
af_unix.cc Loading commit data...
af_unix.h Loading commit data...
apparmor.d.pod Loading commit data...
apparmor.pod Loading commit data...
apparmor.service Loading commit data...
apparmor.systemd Loading commit data...
apparmor_parser.pod Loading commit data...
common_optarg.c Loading commit data...
common_optarg.h Loading commit data...
dbus.cc Loading commit data...
dbus.h Loading commit data...
frob_slack_rc Loading commit data...
immunix.h Loading commit data...
lib.c Loading commit data...
lib.h Loading commit data...
mount.cc Loading commit data...
mount.h Loading commit data...
network.c Loading commit data...
network.h Loading commit data...
parser.conf Loading commit data...
parser.h Loading commit data...
parser_alias.c Loading commit data...
parser_common.c Loading commit data...
parser_include.c Loading commit data...
parser_include.h Loading commit data...
parser_interface.c Loading commit data...
parser_lex.l Loading commit data...
parser_main.c Loading commit data...
parser_merge.c Loading commit data...
parser_misc.c Loading commit data...
parser_policy.c Loading commit data...
parser_regex.c Loading commit data...
parser_symtab.c Loading commit data...
parser_variable.c Loading commit data...
parser_yacc.y Loading commit data...
policy_cache.c Loading commit data...
policy_cache.h Loading commit data...
policydb.h Loading commit data...
profile.cc Loading commit data...
profile.h Loading commit data...
ptrace.cc Loading commit data...
ptrace.h Loading commit data...
rc.apparmor.debian Loading commit data...
rc.apparmor.functions Loading commit data...
rc.apparmor.redhat Loading commit data...
rc.apparmor.slackware Loading commit data...
rule.cc Loading commit data...
rule.h Loading commit data...
signal.cc Loading commit data...
signal.h Loading commit data...
subdomain.conf Loading commit data...
subdomain.conf.pod Loading commit data...
techdoc.tex Loading commit data...
unit_test.h Loading commit data...