bend-osdev-apparmor
Releases (1)
-
0.1.0.0 indexed
Definitions (1,104)
apparmor.bend
- type AaSourcea file of the policy: its name as includes name it (abstractions/base for <abstractions/base>), and its text
- def Aa.files
- def Aa.loadthe policy the file main defines, with its includes taken from sources
- def Aa.load_default
- def Aa.profile
- def Aa.on.file
- def Aa.filemay the profile access path with the permissions req (owner: the task owns the file)?
- def Aa.on.capability
- def Aa.capabilitymay the profile use capability number cap?
- def Aa.on.network
- def Aa.networkmay the profile use a socket of this domain, type and protocol (names: inet, stream, tcp)?
- def Aa.on.signal
- def Aa.signalmay the profile send (receive) the signal named sig to (from) the peer profile?
- def Aa.on.ptrace
- def Aa.ptrace
- def Aa.on.mount
- def Aa.mount
- def Aa.on.dbus
- def Aa.dbus
- def Aa.on.change
- def Aa.opt_list
- def Aa.change_profilemay the profile change_profile to target (now: exec None; at the exec of a program: Some)?
- def Aa.execwhere an exec of path by a task confined by profile goes
- def Aa.exec_unconfinedwhere an exec of path by an unconfined task goes
check.bend
PROOF.bend
- def pm.assoc
- def pm.idem
- def pm.none_r
- def dec.ok
- def dw.modea deny rule meets the request (hit), so the grants cannot cover it
- def dw.acc
- def ud.modeno grant, a nonempty request, an enforcing mode: denied
- def cd.modecomplain mode: allowed unless an applicable deny rule meets the request
- def cd.acc
- def gnd.acc
- def ud.law
- def cnd.law
- def fdw.law
- def fud.law
- def acc.join_empty_l
- def acc.join_empty_r
- def acc.join_assoc
- def acc.join_idem
- def from_join
- def from_idem
- def from_app
- def inc.acc
- def inc.decide
- def file.mgo
- def file.match_app
- def file.gof_app
- def file.gapp
- def file.inc
- def file.law
- def cap.mgo
- def cap.match_app
- def cap.gof_app
- def cap.gapp
- def cap.inc
- def cap.law
- def net.mgo
- def net.match_app
- def net.gof_app
- def net.gapp
- def net.inc
- def net.law
- def sig.mgo
- def sig.match_app
- def sig.gof_app
- def sig.gapp
- def sig.inc
- def sig.law
- def ptr.mgo
- def ptr.match_app
- def ptr.gof_app
- def ptr.gapp
- def ptr.inc
- def ptr.law
- def mnt.mgo
- def mnt.match_app
- def mnt.gof_app
- def mnt.gapp
- def mnt.inc
- def mnt.law
- def dbs.mgo
- def dbs.match_app
- def dbs.gof_app
- def dbs.gapp
- def dbs.inc
- def dbs.law
- def chg.mgo
- def chg.match_app
- def chg.gof_app
- def chg.gapp
- def chg.inc
- def chg.law
- def ex.law