[apparmor] [PATCH] use -QTK instead of -p in easyprof's verify_policy()

2014-06-09 Thread Jamie Strandboge
Use '-QTK' instead of '-p' in verify_policy(). '-p' only runs the preprocessor and is not as thorough as '-QTK' (--skip-kernel-load, --skip-read-cache, --skip-cache) since '-QTK' does a full compile. Like with '-p', '-QTK' can be run without privilege but it will catch things like conflicting 'x'

Re: [apparmor] [PATCH] use -QTK instead of -p in easyprof's verify_policy()

2014-06-09 Thread Seth Arnold
On Mon, Jun 09, 2014 at 01:30:01PM -0500, Jamie Strandboge wrote: Use '-QTK' instead of '-p' in verify_policy(). '-p' only runs the preprocessor and is not as thorough as '-QTK' (--skip-kernel-load, --skip-read-cache, --skip-cache) since '-QTK' does a full compile. Like with '-p', '-QTK' can