Comment 11 for bug 1662501

Revision history for this message
Seth Arnold (seth-arnold) wrote : Re: [Bug 1662501] Re: since the apparmor profile is disabled by default, please make the apparmor policy strict with option to make less strict

On Sun, Jul 29, 2018 at 11:35:58PM -0000, Daniel Richard G. wrote:
> I think we could really use some kind of conditional construct (IF ...
> THEN ...) in AppArmor syntax. Everything being talking about here

apparmor_parser does in fact have conditionals of exactly this form. They
aren't documented -- or used -- because the friendly tools don't yet know
how to parse the contents, or suggest changing the value of the booleans
in response to events in the logs.

Some Day. :)

Thanks