Rework the HFA permission tracking to make it possible to add full state minimization. This fixes a major bug in the HFA where deny rules may not be completely applied to all states dependent on how the rules where written and compiled into the dfa. In general this has not been a problem but it is a possible failure case.
Adding full minimization also brings other niceties like smaller dfas and generally faster compiles (as there are fewer states for the compression engine to handle). -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
