mirror of
https://github.com/containers/udica
synced 2026-07-31 06:45:21 +02:00
Vit Mojzis
1c91fe0d44
- Add test - Improve option descriptions and explain it in man page - Improve policy validation (more robust, support comments, improve error messages) Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
16 lines
564 B
Plaintext
16 lines
564 B
Plaintext
(optional test_optional_1
|
|
(typeattributeset cil_gen_require systemd_socket_proxyd_t)
|
|
(allow process systemd_socket_proxyd_t (unix_stream_socket (connectto)))
|
|
(optional test_optional_2
|
|
(typeattributeset cil_gen_require abrt_dump_oops_t)
|
|
; deny_ptrace
|
|
(booleanif (deny_ptrace)
|
|
(false
|
|
(allow process abrt_dump_oops_t (process (sigchld))) ; comment at the end of a line
|
|
(allow abrt_dump_oops_t process (process (ptrace)))
|
|
)
|
|
)
|
|
; ) -- commented parenthesis
|
|
)
|
|
)
|