[apparmor] [Build #3957261] i386 build of apparmor 2.7.103+2077+7~precise1 in ubuntu precise RELEASE (apparmor-dev-apparmor-daily-trunk PPA)

2012-11-07 Thread Launchpad Buildd System
* Source Package: apparmor * Version: 2.7.103+2077+7~precise1 * Architecture: i386 * Archive: apparmor-dev-apparmor-daily-trunk PPA * Component: main * State: Failed to build * Duration: 20 minutes * Build Log:

[apparmor] [Build #3957246] i386 build of apparmor 2.7.103+2077+7~raring1 in ubuntu raring RELEASE (apparmor-dev-apparmor-daily-trunk PPA)

2012-11-07 Thread Launchpad Buildd System
* Source Package: apparmor * Version: 2.7.103+2077+7~raring1 * Architecture: i386 * Archive: apparmor-dev-apparmor-daily-trunk PPA * Component: main * State: Failed to build * Duration: 13 minutes * Build Log:

[apparmor] [Build #3957254] i386 build of apparmor 2.7.103+2077+7~quantal1 in ubuntu quantal RELEASE (apparmor-dev-apparmor-daily-trunk PPA)

2012-11-07 Thread Launchpad Buildd System
* Source Package: apparmor * Version: 2.7.103+2077+7~quantal1 * Architecture: i386 * Archive: apparmor-dev-apparmor-daily-trunk PPA * Component: main * State: Failed to build * Duration: 16 minutes * Build Log:

Re: [apparmor] [Merge] lp:~chkpnt/apparmor/patch-ruby into lp:apparmor

2012-11-07 Thread Gregor Dschung
I've just updated the abstraction file. Now it is smaller. Unfortunately, AppArmor doesn't understand extglobs. If so, it would be possible to use 1.[89]?(.[0-9]) instead of {[89],[89].[0-9]}. -- https://code.launchpad.net/~chkpnt/apparmor/patch-ruby/+merge/132723 Your team AppArmor Developers

[apparmor] [Patch 0/9] start of parser front end cleanup

2012-11-07 Thread John Johansen
This is the start of cleaning up the parser front end. It does some misc cleanups, converts the parser to use C++ compile and then starts actual conversion by converting the policy_list from glibc twalk to an stl container and codomain to a parser class. This doesn't cleanup all the warnings yet

[apparmor] [PATCH 1/9] clean up the lexer

2012-11-07 Thread John Johansen
- Make indenting consistent - Move common match + fn patterns into a single shared entry with mulitstate headers - add names table to convert lexer state #s to state names used in the code - Create/use macros for common patterns of DUMP, DEBUG, return ... this fixes a few places where

[apparmor] [PATCH 2/9] refactor parser prefix parsing to remove execess code

2012-11-07 Thread John Johansen
Signed-off-by: John Johansen john.johan...@canonical.com --- parser/parser.h |6 ++ parser/parser_yacc.y | 191 +- 2 files changed, 84 insertions(+), 113 deletions(-) diff --git a/parser/parser.h b/parser/parser.h index 8199f43..ab57db9

[apparmor] [PATCH 3/9] add optional allow prefix to the language

2012-11-07 Thread John Johansen
let allow be used as a prefix in place of deny. Allow is the default and is implicit so it is not needed but some user keep tripping over it, and it makes the language more symmetric eg. /foo rw, allow /foo rw, deny /foo rw, Signed-off-by: John Johansen

[apparmor] [PATCH 4/9] Refactor policydb entry processing

2012-11-07 Thread John Johansen
Refactor policydb entry processing so that post_process_policydb_ents is just a driver for rule specific routines. Signed-off-by: John Johansen john.johan...@canonical.com --- parser/parser_regex.c | 13 +++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git

[apparmor] [PATCH 5/9] Remove testing for AARE as it is the only matching engine

2012-11-07 Thread John Johansen
Remove use of AARE_DFA as the alternate pcre matching engine was removed years ago. Signed-off-by: John Johansen john.johan...@canonical.com --- parser/parser.h |4 parser/parser_common.c|1 - parser/parser_interface.c | 33 +

[apparmor] [PATCH 7/9] Remove dead code around pattern matching in rules

2012-11-07 Thread John Johansen
remove old dead code that used to fail compilation if regular expressions where detected in the rules and the apparmor kernel module did not support regular expression matching. Signed-off-by: John Johansen john.johan...@canonical.com --- parser/parser.h|2 +- parser/parser_policy.c

[apparmor] [PATCH 8/9] remove support for change_hat 1.4

2012-11-07 Thread John Johansen
change_hat 1.4 was an experiement is more directly controlling change_hat by adding hat rulles to the profile. It has not been used since the original experiment (4 years). So remove it Signed-off-by: John Johansen john.johan...@canonical.com --- parser/parser_policy.c | 68

Re: [apparmor] [PATCH 3/9] add optional allow prefix to the language

2012-11-07 Thread Christian Boltz
Hello, Am Mittwoch, 7. November 2012 schrieb John Johansen: let allow be used as a prefix in place of deny. Allow is the default and is implicit so it is not needed but some user keep tripping over it, and it makes the language more symmetric In other words: the allow keyword is purely

Re: [apparmor] [PATCH 3/9] add optional allow prefix to the language

2012-11-07 Thread John Johansen
On 11/07/2012 02:44 PM, Christian Boltz wrote: Hello, Am Mittwoch, 7. November 2012 schrieb John Johansen: let allow be used as a prefix in place of deny. Allow is the default and is implicit so it is not needed but some user keep tripping over it, and it makes the language more symmetric