Re: [apparmor] [patch] [29/38] let _is_covered_aare() check against the AARE instead of the (str) regex

2016-09-26 Thread Steve Beattie
On Fri, Aug 12, 2016 at 11:03:33PM +0200, Christian Boltz wrote: > This is the correct way of doing AARE matches. However, this check is > more strict when matching against an AARE containing wildcards etc. > (which can "by luck" match when doing str matching) > > To avoid breaking DbusRule,

[apparmor] [patch] [29/38] let _is_covered_aare() check against the AARE instead of the (str) regex

2016-08-12 Thread Christian Boltz
Hello, $subject. This is the correct way of doing AARE matches. However, this check is more strict when matching against an AARE containing wildcards etc. (which can "by luck" match when doing str matching) To avoid breaking DbusRule, PtraceRule and SignalRule (especially their tests),