[Apparmor-dev] [RFR] patches for profile tools to work with the latest kernel

[Seth Arnold]

On Fri, Jul 13, 2007 at 01:09:50PM -0600, Dominic Reynolds wrote:
>  change_hat_syntax.diff
>    * Read and write new change hat profile syntax. 
>      Hats are now defined as /PATH/TO/PROG//HATNAME and exist at the top level
>      scope in the file (no longer embedded within the parent profile). The
>      tools will read in old style hats but will only write out new style.

Is this actually what we want?

The // syntax is how we represent these things to the kernel, and how
the kernel reports them back, but I think we wanted to keep either our
existing syntax, or move to a "hat blah { ... }" syntax rather than the
"^blah { ... }" syntax we have now -- but no plans to remove the hat
contents from the profiles completely..

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://forge.novell.com/pipermail/apparmor-dev/attachments/20070718/94ba9f19/attachment.pgp