• Steve Beattie's avatar
    add optional allow prefix to the language · 17f0565a
    Steve Beattie authored
    From: John Johansen <john.johansen@canonical.com>
    
    let allow be used as a prefix in place of deny.  Allow is the default
    and is implicit so it is not needed but some user keep tripping over
    it, and it makes the language more symmetric
    
       eg.
          /foo rw,
          allow /foo rw,
          deny /foo rw,
    
    Patch history:
      v1: - initial revision
    
      v2: - rename yacc target rule from opt_deny to opt_perm_mode to
    reflect
            that it can be either an allow or deny modifier
          - break apart tests into more digestible chunks and to clarify
            their purpose
          - fix some tests to exercise 'audit allow'
          - add negative tests for 'allow' and 'deny' in the same rule
          - add support for 'allow' keyword to apparmor.vim
          - fix a bug in apparmor.vim to let it recognize multiple
            capability entries in a single line.
    
      v3: - add support for optional keywords on capability rules in
            regression tests, as well as the bare capability keyword (via
            'cap:ALL')
          - add allow, deny, and conflicting capability behavioral
            regression tests
          - fix vim syntax modeline to refer to apparmor in parser tests
          - adjust FILE regex in vim syntax file creator script
    Signed-off-by: default avatarJohn Johansen <john.johansen@canonical.com>
    Signed-off-by: Steve Beattie's avatarSteve Beattie <steve@nxnw.org>
    Acked-by: default avatarSeth Arnold <seth.arnold@canonical.com>
    17f0565a
Name
Last commit
Last update
..
Immunix Loading commit data...
apparmor Loading commit data...
easyprof Loading commit data...
po Loading commit data...
test Loading commit data...
vim Loading commit data...
Makefile Loading commit data...
aa-audit Loading commit data...
aa-audit.pod Loading commit data...
aa-autodep Loading commit data...
aa-autodep.pod Loading commit data...
aa-complain Loading commit data...
aa-complain.pod Loading commit data...
aa-decode Loading commit data...
aa-decode.pod Loading commit data...
aa-disable Loading commit data...
aa-disable.pod Loading commit data...
aa-easyprof Loading commit data...
aa-easyprof.pod Loading commit data...
aa-enforce Loading commit data...
aa-enforce.pod Loading commit data...
aa-eventd Loading commit data...
aa-exec Loading commit data...
aa-exec.pod Loading commit data...
aa-genprof Loading commit data...
aa-genprof.pod Loading commit data...
aa-logprof Loading commit data...
aa-logprof.pod Loading commit data...
aa-notify Loading commit data...
aa-notify.pod Loading commit data...
aa-repo.pl Loading commit data...
aa-sandbox Loading commit data...
aa-sandbox.pod Loading commit data...
aa-status Loading commit data...
aa-status.pod Loading commit data...
aa-unconfined Loading commit data...
aa-unconfined.pod Loading commit data...
apparmor-utils.spec.in Loading commit data...
check_po.pl Loading commit data...
convert-profile.pl Loading commit data...
logprof.conf Loading commit data...
logprof.conf.pod Loading commit data...
notify.conf Loading commit data...
python-tools-setup.py Loading commit data...
repair_obsolete_profiles Loading commit data...
severity.db Loading commit data...