On 06/21/2013 09:44 AM, John Johansen wrote:

> 
> In generally I think we want acquire or any permission that only
> applies to a subject address to semantically be in a separate rule
> that does not specify a peer address. This helps keep the meaning
> of the rules clear. We can enforce this type of restriction with
> a semantic check in the parser
> 
+1

-- 
Jamie Strandboge                 http://www.ubuntu.com/

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to