Re: [apparmor] Hat declarations

2015-06-07 Thread Christian Boltz
Hello, Am Samstag, 6. Juni 2015 schrieb John Johansen: > On 06/06/2015 05:17 PM, Christian Boltz wrote: > > are hat declarations like > > > > /foo { > > ^hat, > > } > > > > still allowed/valid? The tools accept them, but the 2.9.2 parser > > errors out with unexpected TOK_END_OF_RULE, expect

Re: [apparmor] Hat declarations

2015-06-06 Thread John Johansen
On 06/06/2015 05:17 PM, Christian Boltz wrote: > Hello, > > are hat declarations like > > /foo { > ^hat, > } > > still allowed/valid? The tools accept them, but the 2.9.2 parser errors > out with unexpected TOK_END_OF_RULE, expecting TOK_OPEN > Interesting question. How about maybe? In ac

[apparmor] Hat declarations

2015-06-06 Thread Christian Boltz
Hello, are hat declarations like /foo { ^hat, } still allowed/valid? The tools accept them, but the 2.9.2 parser errors out with unexpected TOK_END_OF_RULE, expecting TOK_OPEN I'm asking because I found an interesting bug: If you have this profile /foo { ^hat, ^hat { network,