bend-osdev-apparmor
Search uses release 0.1.0.0 · 1,104 definitions
Definitions (1,104)
- type AaQP
- def AaQ.parse.go
- def AaQ.parsethe leading qualifiers of a rule's terms, and the terms after them
- def AaQ.combinea block's qualifiers with a rule's (or an inner block's): allow and deny conflict
- def AaBQ.qual
- type AaCtx
- def AaCtx.env
- def AaCtx.aliases
- def AaParse.unsupported
- def AaParse.keywordthe keyword of a rule: 1 capability, 2 network, 3 signal, 4 ptrace, 5 mount, 6 remount, 7 umount, 8 dbus, 9 change_profile, 10 file, 11 a rule kind outside the model, 12 a statement that belongs in the preamble, 0 none (a file rule without the keyword)
- def AaParse.wrap.cap
- def AaParse.wrap.net
- def AaParse.wrap.signal
- def AaParse.wrap.ptrace
- def AaParse.wrap.mount
- def AaParse.wrap.dbus
- def AaParse.wrap.change
- def AaParse.alias.glob
- def AaParse.alias.onea file rule copied under an alias whose source starts its pattern
- def AaParse.alias.all
- def AaParse.wrap.file
- def AaParse.dispatch
- def AaParse.rulea rule's terms (after the qualifiers), with the qualifiers in force
- def AaParse.terms
- def AaParse.rule.qual
- def AaParse.stmta statement inside a profile: its rules
- type AaHead
- type AaFlBFlags: the mode seen (if any) and the audit flag
- def AaFl.mode_of
- def AaFl.misc
- def AaFl.mode_eq
- def AaFl.set_mode
- def AaFl.word.mode
- def AaFl.stepkill.signal=SIGNAL and attach_disconnected.path=PATH are accepted and not modelled
- def AaFl.run
- def AaFl.finish
- def AaFl.list
- def AaFl.termthe flags term: flags=(...) or (...)
- def AaFl.optoptional flags, and nothing after them
- def AaParse.alnum
- def AaParse.namea profile name: a quoted string, or a word starting with a letter, a digit or '/'
- def AaParse.attach.glob
- def AaParse.self_attacha name that is an absolute path is also the attachment
- def AaParse.head.make
- def AaParse.head.flags_only
- def AaParse.head.attached
- def AaParse.head.profile.restafter `profile NAME`: an attachment, then flags
- def AaParse.head.profile
- def AaParse.head.hat.name
- def AaParse.head.hathat NAME [FLAGS]
- def AaParse.head.qual
- def AaParse.head.patha path as the head: its name and its attachment
- def AaParse.head.word
- def AaParse.headthe head of a block, at the top level or inside a profile
- def AaParse.target_eq
- def AaParse.xconf
- def AaParse.xconf.any
- def AaParse.conflicts.go
- def AaParse.exec_literalthe allow rules with an exec mode on a literal pattern: the only ones that can conflict
- def AaParse.exec_rules
- def AaParse.conflicts
- def AaParse.cp_applieschange_profile rules with exec conditions must agree on safe and unsafe (apparmor_parser 4.0.1 refuses overlapping ones that differ; the package, which does not intersect patterns, refuses any allow rules that differ)
- def AaParse.cp_safe
- def AaParse.cp_clash
- def AaParse.cp_next
- def AaParse.safe_clash
- type AaFrame
- type AaBuild
- def AaBuild.fail
- def AaFrames.fullthe innermost profile frame's full name
- def AaFrames.qual
- def AaFrames.add_rulesthe rules added to the innermost profile
- def AaFrames.names.go
- def AaFrames.names
- def AaFrames.add_sub.go
- def AaFrames.add_sub.put
- def AaFrames.add_sub.cons
- def AaFrames.add_suba finished child or hat added to the innermost profile; None if the name is taken
- def AaFrames.has_profile
- def AaBuild.top_names
- def AaBuild.finish.suba finished profile: checked, and added to its parent or to the top level
- def AaBuild.finish.top
- def AaBuild.finish.place
- def AaBuild.finish
- def AaBuild.close
- def AaBuild.push.qual
- def AaBuild.push.kind
- def AaBuild.pusha block opens
- def AaBuild.frames
- def AaParse.head.of
- def AaBuild.open
- def AaBuild.rules
- def AaBuild.stmta statement: a rule inside a profile; at the top level the preamble pass has checked it
- def AaBuild.ok
- def AaBuild.step
- def AaBuild.run
- def AaBuild.result
- def AaParse.pre.result
- def AaParse.load.items
- def AaParse.load.file