On Fri, Aug 12, 2016 at 11:06:08PM +0200, Christian Boltz wrote:
> adding a rule to *Ruleset means it simply gets added. This also means
> that then-superfluous rules will be kept.
> 
> This patch adds an optional cleanup flag to add(). If set, rules covered
> by the new rule will be deleted. The difference to delete_duplicates()
> is that cleanup only deletes rules that are covered by the new rule, but
> keeps other, unrelated superfluous rules.
> 
> Also return the number of deleted rules to give the UI a chance to
> report this number.
> 
> Finally, adjust the existing tests for FileRuleset to ensure default
> mode (without cleanup) doesn't delete any rules, and add a test using
> the cleanup flag.
> 
> [ 33-ruleset-cleanup-duplicates-on-add.diff ]

Acked-by: Steve Beattie <[email protected]>.

-- 
Steve Beattie
<[email protected]>
http://NxNW.org/~steve/

Attachment: signature.asc
Description: PGP signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to