On 1/5/20 8:47 AM, J. R. Okajima wrote:
> John Johansen:
>> currently it works poorly. What it does it rule rewriting so that
>> the leading elements of a rule "should" be replaced.
> :::
>> It is possible to fix this, so that the compiler can do the rewrite
>> against the generated state
John Johansen:
> currently it works poorly. What it does it rule rewriting so that
> the leading elements of a rule "should" be replaced.
:::
> It is possible to fix this, so that the compiler can do the rewrite
> against the generated state machine. This has even been prototyped
> but is
On 12/27/19 4:15 AM, J. R. Okajima wrote:
> Hello,
>
> Would you kindly how to use ALIAS RULE?
>
currently it works poorly. What it does it rule rewriting so that
the leading elements of a rule "should" be replaced.
To quote from the man page
AppArmor also provides alias rules for remapping
Hello,
Would you kindly how to use ALIAS RULE?
Here is a shell script I am testing.
- prepare "/tmp/file"
- generate and enable a profile for cat(1), which allows opening
"/file".
- expecting a failure, run "cat /tmp/file"
- add an alias rule "alias / -> /tmp/,"
- expecting a success, run "cat
