Author: Tyler Hicks
Revision Date: 2017-06-09 15:21:43 UTC

Remove unreachable code when parsing mount opt name value pairs

Revision 886 introduced a change to the mount option parsing code for
name-value pairs. A break was added to a loop once the first '=' is seen.
Before the break was added, it was possible that a '=' would be seen, then
memory allocated for the name portion of the string, then another '=' could be
seen and the previous name string be freed and then reallocated. However,
there's no longer a chance of needed to reallocate the name string so the
free() is not needed.

Discovered by Coverity (CID 1375979)

Author: Tyler Hicks
Revision Date: 2016-08-24 21:15:15 UTC

hello-world/bin/sh: pass command line arguments to bash

Author: Tyler Hicks
Revision Date: 2016-07-08 21:32:05 UTC

debian/ecryptfs-utils.postinst: Fix any unencrypted GPT swap partitions
that have mistakenly remained marked as auto mount. This should only
modify the swap partitions on systems that ecryptfs-setup-swap has been
used on. (LP: #1447282, LP: #1597154)

Author: Christian Boltz
Revision Date: 2016-03-01 20:24:10 UTC

Fix wrong usage of write_prof_data in serialize_profile_from_old_profile()

write_prof_data[hat] is correct (it only contains one profile, see bug 1528139),
write_prof_data[profile][hat] is not and returns an empty (sub)hasher.

This affects RE_PROFILE_START and RE_PROFILE_BARE_FILE_ENTRY.

Acked-by: Kshitij Gupta <kgupta8592@gmail.com> for trunk, 2.9 and 2.10

Author: Tyler Hicks
Revision Date: 2015-03-06 18:56:48 UTC

parser: Remove atomic ops

The parser no longer has a need for the atomic operations since all
callers have been moved to libapparmor.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>

Author: Tyler Hicks
Revision Date: 2014-11-26 18:41:18 UTC

Add test for validating reported namelen value

Author: Tyler Hicks
Revision Date: 2014-08-27 21:38:24 UTC

parser: Don't write the stream's address to the rule buffer

The writeu16() function was returning the address of the passed in
std::ostringstream and then the callers of that function were
incorrectly writing that address to the rule buffer.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>

Author: Tyler Hicks
Revision Date: 2014-08-14 14:37:48 UTC

WIP: abstract rules

Author: Tyler Hicks
Revision Date: 2014-08-15 20:53:15 UTC

* 01-get-text.patch, 02-network1.patch, 03-type_name.patch,
  04-af_mapping.patch, 05-af_type_mappings.patch, 06-network3.patch,
  07-move-node.patch, 08-split-accept-perm.patch, 09-refactor1.patch,
  10-refactor1.patch, 11-refactor1.patch, 12-split-accept-from-rule.patch:
  Import the latest AF_UNIX parser patches from the AppArmor list. Note that
  these patches are a work in progress and are not in their final form.

Author: Tyler Hicks
Revision Date: 2014-08-07 00:57:21 UTC

* parser-include-usr-share-apparmor.patch, debian/apparmor.install: Adjust
  the default parser.conf file, to add /usr/share/apparmor as an additional
  search path when resolving include directives in profiles, and install the
  file in /etc/apparmor. Ubuntu places hardware specific access rules in
  /usr/share/apparmor/hardware. This change allows these files to be
  included without using an absolute path (e.g.,
  '#include <hardware/graphics.d>').