bend-osdev-apparmor
Search uses release 0.1.0.0 · 1,104 definitions
Definitions (1,104)
- def AaFp.base
- def AaFp.xthe letter after a prefix: x ends the mode, i or u/U (when allowed) extend it
- def AaFp.ext
- def AaFp.step.st
- def AaFp.step
- def AaFp.run
- type AaFPermswhat a permission string reads as: the bits and the exec mode
- def AaFp.is_some
- def AaFp.base_st
- def AaFp.resultvalid: whole letters, not w with a, an exec mode only without deny, a bare x only with deny, something granted
- def AaFile.parse_permsthe permission string xs, in a rule that is (or is not) a deny rule
- def AaFile.lettera set of file permissions from letters (r w a l k m x), for queries: None if a letter is not one of them
- def AaFile.perms.add
- def AaFile.perms.go
- def AaFile.perms
- def AaFile.is_patha term that is a pattern: a quoted string, or a word starting with '/' or '{' (after variable expansion)
- def AaFile.word
- def AaFile.path_text
- def AaFile.rooted.goevery alternative of a rule's pattern starts with '/'
- def AaFile.rooted
- def AaFile.check_rooted
- def AaFile.target.checka target needs an exec mode; with the permissions leading, l and a target make a link rule, outside the model (apparmor_parser: "link and exec perms conflict on a file rule using ->")
- def AaFile.build.go
- def AaFile.build
- def AaFile.pair.go
- def AaFile.pairthe two terms in either order: pattern and permissions
- def AaFile.all`file,` alone: every path, every permission (an allow rule grants r w a l k m and ix; a deny rule denies all of them and x)
- def AaFile.target
- def AaFile.parse.arrow
- def AaFile.parsethe terms after the qualifiers (and after `file`, if present)
- def AaFileRule.qual
- def AaFileRule.matches
- def AaFileRule.matching.go
- def AaFileRule.matchingthe rules that match a request
- def AaFileRule.grant
- def AaFileRule.grants.of
- def AaFileRule.grantswhat the matching rules grant and deny
- def AaFileRule.append
- def AaFileQuery.req
- def AaFileQuery.path
- type AaMountOp
- type AaMountOptsoptions = (exact) or options in (not exact)
- type AaMountRule
- type AaMountQuerya mount, remount or umount: the filesystem type, the options (names as mount(8) -o takes them; rw for a read-write mount), the source device and the mountpoint (empty source for remount and umount)
- def AaMount.flags
- def AaMountOp.eq
- def AaMountOp.is_mount
- type AaMtB
- def AaMtB.fstypes
- def AaMount.opts_append
- def AaMtB.options
- def AaMtB.pend
- def AaMtB.pending
- def AaMtB.arrow
- def AaMtB.path.after
- def AaMtB.path.before
- def AaMtB.path
- def AaMtB.cond.fstype
- def AaMount.opposedthe pairs of options that cannot both hold, so cannot both be in an exact set (what apparmor_parser 4.0.1 refuses as "conflicting flags")
- def AaMount.clash.go
- def AaMount.check
- def AaMtB.cond.options
- def AaMtB.cond
- def AaMtB.free.path
- def AaMtB.freea term with nothing pending
- def AaMtB.step
- def AaMtB.run
- def AaMtB.finish.go
- def AaMtB.finishmount: source and mountpoint; remount, umount: one path, the mountpoint, and no arrow
- def AaMount.parse.q
- def AaMount.parsethe terms after mount, remount or umount
- def AaMountOpts.allowsevery option of q is one of the flags; and, for an exact condition, the other way round too
- def AaMount.opts_ok
- def AaMount.options_ok
- def AaMountRule.matches
- def AaMountRule.matching.go
- def AaMountRule.matching
- def AaMountRule.grants.of
- def AaMountRule.grants
- def AaMountRule.append
- def AaMountQuery.req
- type AaNetRule
- type AaNetQuerya socket: its domain (inet, unix, ...), type (stream, dgram, ...) and protocol (tcp, udp, icmp, or empty)
- def AaNet.domains
- def AaNet.types
- def AaNet.protos
- def AaNet.accessesthe access permissions of fine-grained rules (not modelled)
- def AaNet.kindwhat a word of a network rule is: 0 a domain, 1 a type, 2 a protocol, 3 an access (unsupported), 4 unknown
- def AaNet.word
- def AaNet.add.kind
- def AaNet.set_type
- def AaNet.set_proto
- def AaNet.set_domain
- def AaNet.addthe rule so far and the next word: a domain only first, then at most one type or protocol
- def AaNet.add.word
- def AaNet.parse.go
- def AaNet.proto_oka protocol needs the inet or inet6 domain, or none, and icmp is not inet6's (apparmor_parser 4.0.1: "Invalid network entry" otherwise)
- def AaNet.check
- def AaNet.parse.q
- def AaNet.parsethe terms after `network`