Re: [apparmor] [PATCH] apparmor: enable raw text policy

2021-07-27 Thread John Johansen
On 7/27/21 4:45 PM, Seth Arnold wrote: > On Tue, Jul 27, 2021 at 06:51:34PM -0300, Georgia Garcia wrote: >> +if (aa_g_raw_text) { >> +dent = aafs_create_file("raw_text", S_IFREG | 0444, dir, >> +rawdata, _fops); > > Cool :) The only thing that

Re: [apparmor] [PATCH] apparmor: enable raw text policy

2021-07-27 Thread Seth Arnold
On Tue, Jul 27, 2021 at 06:51:34PM -0300, Georgia Garcia wrote: > + if (aa_g_raw_text) { > + dent = aafs_create_file("raw_text", S_IFREG | 0444, dir, > + rawdata, _fops); Cool :) The only thing that stood out to me is the permission: some people

[apparmor] [PATCH] apparmor: enable raw text policy

2021-07-27 Thread Georgia Garcia
Currently there's no way to introspect the current text policy for a given profile. This adds the functionality of having the raw text profile in the rawdata fs when enabled by a config. It reuses the raw_data data structure by storing the offset to the text policy and its size. That means that