bend-osdev-apparmor
Releases (1)
-
0.1.0.0 indexed
Definitions (1,104)
rule_capability.bend
- def AaCap.lowerno upper-case letter
- def AaCap.of_namethe number of the capability named w (lower case, no CAP_ prefix)
- def AaCap.name.go
- def AaCap.name
- def AaCap.parse.one
- def AaCap.parse.names
- def AaCap.parse.go
- def AaCap.parse.q
- def AaCap.parsethe terms after `capability`; the owner qualifier is not allowed
- def AaCap.member
- def AaCapRule.matches
- def AaCapRule.matching.go
- def AaCapRule.matching
- def AaCapRule.grants.of
- def AaCapRule.grants
- def AaCapRule.append
- def AaCapQuery.reqthe request's permission: use
rule_change_profile.bend
- type AaChangeRuleexec: None for any (or no) exec; target: None for every profile
- type AaChangeQuerya change to the profile named target, now (exec None) or when the program exec is executed
- type AaChBthe builder: mode word seen (0 none, 1 safe, 2 unsafe), exec condition, arrow seen, target
- def AaChange.is_path
- def AaChB.set_target
- def AaChB.set_exec
- def AaChB.globa pattern: the target after the arrow, else the exec condition
- def AaChB.arrow
- def AaChB.modesafe or unsafe, before anything else
- def AaChB.term.glob
- def AaChB.step
- def AaChB.run
- def AaChange.is_some
- def AaChB.finishan exec mode needs an exec condition; an arrow needs a target
- def AaChange.parse.q
- def AaChange.parsethe terms after `change_profile`
- def AaChange.exec_ok
- def AaChangeRule.matches
- def AaChangeRule.matching.go
- def AaChangeRule.matching
- def AaChangeRule.grants.of
- def AaChangeRule.grants
- def AaChangeRule.append
- def AaChangeQuery.req
rule_dbus.bend
- type AaDbusRule
- type AaDbusQuerya dbus operation: req (send, receive, bind, eavesdrop), the bus (system, session, ...), the object path, interface and member, the name bound (for bind), and the peer's bus name and profile name
- def AaDbus.send
- def AaDbus.receive
- def AaDbus.bind
- def AaDbus.eavesdrop
- def AaDbus.access
- type AaDbBThe builder: one slot per condition, each set at most once
- def AaDbB.empty
- def AaDbus.slotthe slot of a condition key: bus 0, path 1, interface 2, member 3, name 4
- def AaDbus.peer_slota peer condition's key: name 5, label 6
- def AaDbus.set.cons
- def AaDbus.setslot i of the list set to g; None if it is set already
- def AaDbB.put.go
- def AaDbB.put
- def AaDbB.perms
- def AaDbB.access_list
- def AaDbB.cond.one
- def AaDbB.peerthe conditions inside peer=( ...
- def AaDbB.cond.peer
- def AaDbB.cond
- def AaDbB.step
- def AaDbB.run
- def AaDbus.is_some
- def AaDbus.nth
- def AaDbus.permsthe permissions given, checked against the kind of rule, or the implied ones
- def AaDbB.finish
- def AaDbus.parse.q
- def AaDbus.parsethe terms after `dbus`
- def AaDbusRule.matches
- def AaDbusRule.matching.go
- def AaDbusRule.matching
- def AaDbusRule.grants.of
- def AaDbusRule.grants
- def AaDbusRule.append
- def AaDbusQuery.req
rule_file.bend
- type AaXFallback
- type AaXModean exec transition: inherit, unconfined, a profile, a child profile; scrub: the upper-case forms, which scrub the environment
- type AaFileRuletext: the pattern as written (after variable expansion), for aliases and for comparing literal paths
- type AaFileQuerya request: the path, whether the task owns the file (fsuid matches), the permissions asked for
- def AaFile.r
- def AaFile.w
- def AaFile.a
- def AaFile.l
- def AaFile.k
- def AaFile.m
- def AaFile.x
- def AaFile.letters
- def AaXFallback.eq
- def AaXMode.eq
- def AaXMode.show.fb
- def AaXMode.show
- type AaFpStthe letters read so far of an exec mode
- type AaFp
- def AaFp.fail
- def AaFp.go
- def AaFp.exec.go
- def AaFp.exec
- def AaFp.bitone of the access letters r w a l k m (n: its bit), or a bare x (n = 6)