On Wed, May 01, 2013 at 02:31:12PM -0700, John Johansen wrote: > next baby step to labels. Update most code to walk labels as if there > is multiple entries in a label, even though atm there can only be > one. > > This does not update the domain transitions, exec, change_hat, change_profile > (separate patch). > > Also it bails on first error, where for learning purposes it might be > desireable to check permission, and log against all profiles before failing.
Or, if not for learning, also auditing purpoess. I was going to complain about that, but since you addressed it in a header, I'm not sure what to do. The patch, as described, looked right to me, but my quibble is with the intention of too-early exits. :) So, uh, add Acked-by: Seth Arnold <seth.arn...@canonical.com>, but with the hope that a future patch changes a lot of the logging logic. :) Thanks
signature.asc
Description: Digital signature
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
