On Wed, 2012-04-11 at 07:50 -0700, Steve Beattie wrote:
> On Tue, Apr 10, 2012 at 05:06:59PM -0500, Jamie Strandboge wrote:

> > +=item B<mount options=ro, mount options=atime /dev/foo,>
> 
> Doesn't the first part need to be 'mount options=ro /dev/foo,' in order
> for it to allow the mount of only /dev/foo anywhere?

I'd like for John to comment here, but based on the wiki[1], no. Eg:

"When both = and in conditional operators are used the options within
each condition type can be combined and split interchangeably.

mount options=(ro, acl) options in (nodev, user)"


> Otherwise, this looks okay, along with the afore-mentioned missing over
> statement (feel free to include my patch with yours).
> 
Thanks applied excepting the bit mentioned above. I applied your other
patch separately.

[1]http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Mount_rules_.28AppArmor_2.8_and_later.29

-- 
Jamie Strandboge             | http://www.canonical.com

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to