Re: [apparmor] deny and selectively allow in AppArmor?

2020-08-07 Thread John Johansen
On 8/7/20 1:12 PM, Christian Boltz wrote: > Hello, > > Am Freitag, 7. August 2020, 19:07:41 CEST schrieb Jonas Große Sundrup: >> I have one question left, when we're at it: If I do have conflicting >> directives, such as >> >> /my/directory r, >> /my/directory rw, >> >> which one takes

Re: [apparmor] [PATCH] security: apparmor: delete repeated words in comments

2020-08-07 Thread Seth Arnold
On Fri, Aug 07, 2020 at 09:50:55AM -0700, Randy Dunlap wrote: > Drop repeated words in comments. > {a, then, to} > > Signed-off-by: Randy Dunlap > Cc: John Johansen > Cc: apparmor@lists.ubuntu.com > Cc: James Morris > Cc: "Serge E. Hallyn" > Cc: linux-security-mod...@vger.kernel.org

Re: [apparmor] deny and selectively allow in AppArmor?

2020-08-07 Thread Christian Boltz
Hello, Am Freitag, 7. August 2020, 19:07:41 CEST schrieb Jonas Große Sundrup: > I have one question left, when we're at it: If I do have conflicting > directives, such as > > /my/directory r, > /my/directory rw, > > which one takes precedence? the first, the last, the stricter or the >

Re: [apparmor] deny and selectively allow in AppArmor?

2020-08-07 Thread Jonas Große Sundrup
Hi, On 2020-08-06, John Johansen wrote: > apparmor is default deny I wasn't aware of that part, probably didn't read that part of the documentation well enough to remember in that moment and during my testing this likely didn't work because down the tree of included abstractions On 2020-08-06,

[apparmor] [PATCH] security: apparmor: delete repeated words in comments

2020-08-07 Thread Randy Dunlap
Drop repeated words in comments. {a, then, to} Signed-off-by: Randy Dunlap Cc: John Johansen Cc: apparmor@lists.ubuntu.com Cc: James Morris Cc: "Serge E. Hallyn" Cc: linux-security-mod...@vger.kernel.org --- security/apparmor/include/file.h |2 +- security/apparmor/path.c |