Comment 3 for bug 1226356

Revision history for this message
Tyler Hicks (tyhicks) wrote : Re: explicit deny rules do not silence logging denials

Hi John - I think I've got a handle on this bug (patches are about to go out to the mailing list), but here's the output you requested:

$ echo "/t { deny dbus, }" | apparmor_parser -qQD expr-tree -D dfa-node-map

DFA: Expression Tree
(\ ([^\0000])*\0000([^\0000])*<64>|\ ([^\0000])*\0000([^\0000])*\0000([^\0000])*\0000([^\0000])*\0000([^\0000])*\0000([^\0000])*((<2>|<4>)|<64>))

Mapping of States to expr nodes
  State <= Nodes
-------------------
  0 <= {0x22fca60,0}
  1 <= {0x22fcdc0,0}
  2 <= {0x22fcd60,0}
  3 <= {0x22ffdc0,0x22ffc60}
  4 <= {0x2300000,0}
  5 <= {0x2300580,0}
  6 <= {0x2300690,0}
  7 <= {0x23007e0,0x23006b0}