apparmor-2.11.0/0000755000175000017500000000000013034613163011204 5ustar jjjjapparmor-2.11.0/Makefile0000644000175000017500000000520513023044233012640 0ustar jjjj# # .PHONY: all all: @echo "*** See README for information how to build AppArmor ***" exit 1 COMMONDIR=common include ${COMMONDIR}/Make.rules DIRS=libraries/libapparmor \ binutils \ parser \ utils \ changehat/mod_apparmor \ changehat/pam_apparmor \ profiles \ tests #REPO_URL?=lp:apparmor # --per-file-timestamps is failing over SSH, https://bugs.launchpad.net/bzr/+bug/1257078 REPO_URL?=https://code.launchpad.net/~apparmor-dev/apparmor/master # alternate possibilities to export from #REPO_URL=. #REPO_URL="bzr+ssh://bazaar.launchpad.net/~sbeattie/+junk/apparmor-dev/" COVERITY_DIR=cov-int RELEASE_DIR=apparmor-${VERSION} __SETUP_DIR?=. # We create a separate version for tags because git can't handle tags # with embedded ~s in them. No spaces around '-' or they'll get # embedded in ${VERSION} TAG_VERSION=$(subst ~,-,${VERSION}) # Add exclusion entries arguments for tar here, of the form: # --exclude dir_to_exclude --exclude other_dir TAR_EXCLUSIONS= .PHONY: tarball tarball: clean REPO_VERSION=`$(value REPO_VERSION_CMD)` && \ make export_dir __EXPORT_DIR=${RELEASE_DIR} __REPO_VERSION=$${REPO_VERSION} && \ make setup __SETUP_DIR=${RELEASE_DIR} && \ tar ${TAR_EXCLUSIONS} -cvzf ${RELEASE_DIR}.tar.gz ${RELEASE_DIR} .PHONY: snapshot snapshot: clean $(eval REPO_VERSION:=$(shell $(value REPO_VERSION_CMD))) $(eval SNAPSHOT_NAME=apparmor-$(VERSION)~$(REPO_VERSION)) make export_dir __EXPORT_DIR=${SNAPSHOT_NAME} __REPO_VERSION=${REPO_VERSION} && \ make setup __SETUP_DIR=${SNAPSHOT_NAME} && \ tar ${TAR_EXCLUSIONS} -cvzf ${SNAPSHOT_NAME}.tar.gz ${SNAPSHOT_NAME} .PHONY: coverity coverity: snapshot cd $(SNAPSHOT_NAME)/libraries/libapparmor && ./configure --with-python $(foreach dir, $(filter-out utils profiles tests, $(DIRS)), \ cov-build --dir $(COVERITY_DIR) -- make -C $(SNAPSHOT_NAME)/$(dir);) tar -cvzf $(SNAPSHOT_NAME)-$(COVERITY_DIR).tar.gz $(COVERITY_DIR) .PHONY: export_dir export_dir: mkdir $(__EXPORT_DIR) /usr/bin/bzr export --per-file-timestamps -r $(__REPO_VERSION) $(__EXPORT_DIR) $(REPO_URL) echo "$(REPO_URL) $(__REPO_VERSION)" > $(__EXPORT_DIR)/common/.stamp_rev .PHONY: clean clean: -rm -rf ${RELEASE_DIR} ./apparmor-${VERSION}~* ${COVERITY_DIR} for dir in $(DIRS); do \ make -C $$dir clean; \ done .PHONY: setup setup: cd $(__SETUP_DIR)/libraries/libapparmor && ./autogen.sh # parser has an extra doc to build make -C $(__SETUP_DIR)/parser extra_docs # libraries/libapparmor needs configure to have run before # building docs $(foreach dir, $(filter-out libraries/libapparmor tests, $(DIRS)), \ make -C $(__SETUP_DIR)/$(dir) docs;) .PHONY: tag tag: bzr tag apparmor_${TAG_VERSION} apparmor-2.11.0/desktop/0000755000175000017500000000000013034613142012652 5ustar jjjjapparmor-2.11.0/changehat/0000755000175000017500000000000013034613142013123 5ustar jjjjapparmor-2.11.0/changehat/pam_apparmor/0000755000175000017500000000000013034613163015604 5ustar jjjjapparmor-2.11.0/changehat/pam_apparmor/Makefile0000644000175000017500000000635613023044233017250 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 1999, 2004, 2005 NOVELL (All rights reserved) # Copyright (c) 2016 Canonical, Ltd. # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- NAME=pam_apparmor all: COMMONDIR=../../common/ include $(COMMONDIR)/Make.rules ifdef USE_SYSTEM LIBAPPARMOR = $(shell if pkg-config --exists libapparmor ; then \ pkg-config --silence-errors --libs libapparmor ; \ elif ldconfig -p | grep -q libapparmor\.so$$ ; then \ echo -lapparmor ; \ fi ) ifeq ($(strip $(LIBAPPARMOR)),) ERROR_MESSAGE = $(error ${nl}\ ************************************************************************${nl}\ Unable to find libapparmor installed on this system; either${nl}\ install libapparmor devel packages, set the LIBAPPARMOR variable${nl}\ manually, or build against in-tree libapparmor.${nl}\ ************************************************************************${nl}) endif LIBAPPARMOR_INCLUDE = AA_LDLIBS = $(LIBAPPARMOR) AA_LINK_FLAGS = else LIBAPPARMOR_SRC := ../../libraries/libapparmor/ LIBAPPARMOR_INCLUDE_PATH = $(LIBAPPARMOR_SRC)/include LIBAPPARMOR_PATH := $(LIBAPPARMOR_SRC)/src/.libs/ ifeq ($(realpath $(LIBAPPARMOR_PATH)/libapparmor.a),) ERROR_MESSAGE = $(error ${nl}\ ************************************************************************${nl}\ $(LIBAPPARMOR_PATH)/libapparmor.a is missing; either build against${nl}\ the in-tree libapparmor by building it first and then trying again${nl}\ (see the top-level README for help) or build against the system${nl}\ libapparmor by adding USE_SYSTEM=1 to your make command.${nl}\ ************************************************************************${nl}) endif LIBAPPARMOR_INCLUDE = -I$(LIBAPPARMOR_INCLUDE_PATH) AA_LINK_FLAGS = -L$(LIBAPPARMOR_PATH) AA_LDLIBS = -lapparmor endif EXTRA_CFLAGS=$(CFLAGS) $(CPPFLAGS) -fPIC -shared -Wall $(LIBAPPARMOR_INCLUDE) LINK_FLAGS=-Xlinker -x $(AA_LINK_FLAGS) LIBS=-lpam $(AA_LDLIBS) OBJECTS=${NAME}.o get_options.o .PHONY: libapparmor_check .SILENT: libapparmor_check libapparmor_check: ; $(ERROR_MESSAGE) all: libapparmor_check $(NAME).so docs .PHONY: docs # docs: we should have some docs: $(NAME).so: ${OBJECTS} $(CC) $(EXTRA_CFLAGS) $(LINK_FLAGS) -o $@ ${OBJECTS} $(LIBS) %.o: %.c $(CC) $(EXTRA_CFLAGS) -c -o $@ $< # need some better way of determining this DESTDIR=/ SECDIR ?= ${DESTDIR}/lib/security .PHONY: install install: $(NAME).so install -m 755 -d $(SECDIR) install -m 555 $(NAME).so $(SECDIR)/ .PHONY: clean clean: rm -f core core.* *.so *.o *.s *.a *~ apparmor-2.11.0/changehat/pam_apparmor/COPYING0000644000175000017500000000374010517744370016653 0ustar jjjjThe pam_apparmor package is licensed under the same license as Linux-PAM , quoted below: ------------------------------------------------------------------------- Redistribution and use in source and binary forms of Linux-PAM, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain any existing copyright notice, and this entire permission notice in its entirety, including the disclaimer of warranties. 2. Redistributions in binary form must reproduce all prior and current copyright notices, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. The name of any author may not be used to endorse or promote products derived from this software without their specific prior written permission. ALTERNATIVELY, this product may be distributed under the terms of the GNU General Public License, in which case the provisions of the GNU GPL are required INSTEAD OF the above restrictions. (This clause is necessary due to a potential conflict between the GNU GPL and the restrictions contained in a BSD-style copyright.) THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ------------------------------------------------------------------------- apparmor-2.11.0/changehat/pam_apparmor/pam_apparmor.c0000644000175000017500000001322312653704412020433 0ustar jjjj/* pam_apparmor module */ /* * Copyright (c) 2006 * NOVELL (All rights reserved) * * Copyright (c) 2010 * Canonical, Ltd. (All rights reserved) * * Written by Jesse Michael 2006/08/24 * and Steve Beattie 2006/10/25 * * Based off of pam_motd by: * Ben Collins 2005/10/04 * Michael K. Johnson 1996/10/24 * */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include /* * here, we make a definition for the externally accessible function * in this file (this definition is required for static a module * but strongly encouraged generally) it is used to instruct the * modules include file to define the function prototypes. */ #define PAM_SM_SESSION #include #include "pam_apparmor.h" int debug_flag = 0; static struct config default_config = { .hat_type[0] = eGroupname, .hat_type[1] = eDefault, .hat_type[2] = eNoEntry, }; /* --- session management functions (only) --- */ PAM_EXTERN int pam_sm_close_session (pam_handle_t *pamh, int flags, int argc, const char **argv) { return PAM_IGNORE; } PAM_EXTERN int pam_sm_open_session(pam_handle_t *pamh, int flags, int argc, const char **argv) { int fd, retval, pam_retval = PAM_SUCCESS; unsigned int magic_token; const char *user; struct passwd *pw; struct group *gr; struct config *config = NULL; int i; if ((retval = get_options(pamh, &config, argc, argv)) != 0) return retval; if (!config) config = &default_config; /* grab the target user name */ retval = pam_get_user(pamh, &user, NULL); if (retval != PAM_SUCCESS || user == NULL || *user == '\0') { pam_syslog(pamh, LOG_ERR, "Can't determine user\n"); return PAM_USER_UNKNOWN; } pw = pam_modutil_getpwnam(pamh, user); if (!pw) { pam_syslog(pamh, LOG_ERR, "Can't determine group for user %s\n", user); return PAM_PERM_DENIED; } gr = pam_modutil_getgrgid(pamh, pw->pw_gid); if (!gr || !gr->gr_name) { pam_syslog(pamh, LOG_ERR, "Can't read info for group %d\n", pw->pw_gid); return PAM_PERM_DENIED; } fd = open("/dev/urandom", O_RDONLY); if (fd < 0) { pam_syslog(pamh, LOG_ERR, "Can't open /dev/urandom\n"); return PAM_PERM_DENIED; } /* the magic token needs to be non-zero otherwise, we won't be able * to probe for hats */ do { retval = pam_modutil_read(fd, (void *)&magic_token, sizeof(magic_token)); if (retval < 0) { pam_syslog(pamh, LOG_ERR, "Can't read from /dev/urandom\n"); close(fd); return PAM_PERM_DENIED; } } while ((magic_token == 0) || (retval != sizeof(magic_token))); close(fd); pam_retval = PAM_SUCCESS; for (i = 0; i < MAX_HAT_TYPES && config->hat_type[i] != eNoEntry; i++) { const char *hat = NULL; switch (config->hat_type[i]) { case eGroupname: hat = gr->gr_name; if (debug_flag) pam_syslog(pamh, LOG_DEBUG, "Using groupname '%s'\n", hat); break; case eUsername: hat = user; if (debug_flag) pam_syslog(pamh, LOG_DEBUG, "Using username '%s'\n", hat); break; case eDefault: if (debug_flag) pam_syslog(pamh, LOG_DEBUG, "Using DEFAULT\n"); hat = "DEFAULT"; break; default: pam_syslog(pamh, LOG_ERR, "Unknown value in hat table: %x\n", config->hat_type[i]); goto nodefault; break; } retval = change_hat(hat, magic_token); if (retval == 0) { /* success, let's bail */ if (debug_flag) pam_syslog(pamh, LOG_DEBUG, "Successfully changed to hat '%s'\n", hat); goto out; } switch (errno) { /* case EPERM: */ /* Can't enable until ECHILD patch gets accepted, and we can * distinguish between unconfined and confined-but-no-hats */ case EINVAL: /* apparmor is not loaded or application is unconfined, * stop attempting to use change_hat */ if (debug_flag) pam_syslog(pamh, LOG_DEBUG, "AppArmor not loaded, or application is unconfined\n"); pam_retval = PAM_SUCCESS; goto out; break; case ECHILD: /* application is confined but has no hats, * stop attempting to use change_hat */ goto nodefault; break; case EACCES: case ENOENT: /* failed to change into attempted hat, so we'll * jump back out and try the next one */ break; default: pam_syslog(pamh, LOG_ERR, "Unknown error occurred changing to %s hat: %s\n", hat, strerror(errno)); /* give up? */ pam_retval = PAM_SYSTEM_ERR; goto out; } retval = change_hat(NULL, magic_token); if (retval != 0) { /* changing into the specific hat and attempting to * jump back out both failed. that most likely * means that either apparmor is not loaded or we * don't have a profile loaded for this application. * in this case, we want to allow the pam operation * to succeed. */ goto out; } } nodefault: /* if we got here, we were unable to change into any of the hats * we attempted. */ pam_syslog(pamh, LOG_ERR, "Can't change to any hat\n"); pam_retval = PAM_SESSION_ERR; out: /* zero out the magic token so an attacker wouldn't be able to * just grab it out of process memory and instead would need to * brute force it */ memset(&magic_token, 0, sizeof(magic_token)); if (config && config != &default_config) free(config); return pam_retval; } #ifdef PAM_STATIC /* static module data */ struct pam_module _pam_apparmor_modstruct = { "pam_apparmor", NULL, NULL, NULL, pam_sm_open_session, pam_sm_close_session, NULL, }; #endif /* end of module definition */ apparmor-2.11.0/changehat/pam_apparmor/get_options.c0000644000175000017500000001105711503736226020313 0ustar jjjj/* * Written by Steve Beattie 2006/10/25 * * Modeled after the option parsing code in pam_unix2 by: * Copyright (c) 2006 SUSE Linux Products GmbH, Nuernberg, Germany. * Copyright (c) 2002, 2003, 2004 SuSE GmbH Nuernberg, Germany. * Author: Thorsten Kukuk * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, and the entire permission notice in its entirety, * including the disclaimer of warranties. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote * products derived from this software without specific prior * written permission. * * ALTERNATIVELY, this product may be distributed under the terms of * the GNU Public License, in which case the provisions of the GPL are * required INSTEAD OF the above restrictions. (This clause is * necessary due to a potential bad interaction between the GPL and * the restrictions contained in a BSD-style copyright.) * * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED * OF THE POSSIBILITY OF SUCH DAMAGE. */ #define _GNU_SOURCE /* for strndup() */ #include #include #include #include #include #include #define PAM_SM_SESSION #include #include "pam_apparmor.h" #define DEBUG_STRING "debug" #define ORDER_PREFIX "order=" static int parse_option(pam_handle_t *pamh, struct config **config, const char *argv) { const char *opts; if (argv == NULL || argv[0] == '\0') return 0; if (strcasecmp(argv, DEBUG_STRING) == 0) { debug_flag = 1; return 0; } else if (strncasecmp(argv, ORDER_PREFIX, strlen(ORDER_PREFIX)) != 0) { pam_syslog (pamh, LOG_ERR, "Unknown option: `%s'\n", argv); return PAM_SESSION_ERR; } opts = argv + strlen(ORDER_PREFIX); while (*opts != '\0') { hat_t hat; char *opt, *comma; int i; comma = index(opts, ','); if (comma) opt = strndup(opts, comma - opts); else opt = strdup(opts); if (!opt) { pam_syslog(pamh, LOG_ERR, "Memory allocation error: %s", strerror(errno)); return PAM_SESSION_ERR; } if (strcasecmp(opt, "group") == 0) hat = eGroupname; else if (strcasecmp(opt, "user") == 0) hat = eUsername; else if (strcasecmp(opt, "default") == 0) hat = eDefault; else { pam_syslog (pamh, LOG_ERR, "Unknown option: `%s'\n", opt); free(opt); return PAM_SESSION_ERR; } if (!(*config)) { struct config *new_cfg = malloc(sizeof(**config)); if (!new_cfg) { pam_syslog(pamh, LOG_ERR, "Memory allocation error: %s", strerror(errno)); free(opt); return PAM_SESSION_ERR; } new_cfg->hat_type[0] = eNoEntry; new_cfg->hat_type[1] = eNoEntry; new_cfg->hat_type[2] = eNoEntry; (*config) = new_cfg; } /* Find free table entry, looking for duplicates */ for (i = 0; i < MAX_HAT_TYPES && (*config)->hat_type[i] != eNoEntry; i++) { if ((*config)->hat_type[i] == hat) { pam_syslog(pamh, LOG_ERR, "Duplicate hat type: %s\n", opt); free(opt); free(*config); (*config) = NULL; return PAM_SESSION_ERR; } } if (i >= MAX_HAT_TYPES) { pam_syslog(pamh, LOG_ERR, "Unable to add hat type '%s'\n", opt); return PAM_SESSION_ERR; } (*config)->hat_type[i] = hat; free(opt); if (comma) opts = comma + 1; else opts += strlen(opts); } return 0; } int get_options(pam_handle_t *pamh, struct config **config, int argc, const char **argv) { int retval = 0; /* Parse parameters for module */ for ( ; argc-- > 0; argv++) { int rc = parse_option(pamh, config, *argv); if (rc != 0) retval = rc; } return retval; } apparmor-2.11.0/changehat/pam_apparmor/README0000644000175000017500000000640610600111015016453 0ustar jjjjpam_apparmor - a (linux specific) PAM module to add support for apparmor's subprocess confinement. An apparmor profile applies to an executable program; if a portion of the program needs different access permissions than other portions, the program can "change hats" via change_hat(2) to a different role, also known as a subprofile. The pam_apparmor PAM module allows applications to confine authenticated users into subprofiles based on groupnames, usernames, or a default profile. To accomplish this, pam_apparmor needs to be registered as a PAM session module. Compiling pam_apparmor ---------------------- The pam-development libraries and libapparmor need to be installed on the build system. 'make' should be all that is needed to build pam_apparmor.so; 'make rpm' should work on RPM-based systems. Configuring pam_apparmor ------------------------ To add pam_apparmor support to a pam enabled application, add a line like the following to the pam configuration file for the application (usually stored in /etc/pam.d/): session optional pam_apparmor.so Likely you will want add the pam_apparmor after other session management modules. If you make the pam_apparmor module 'required' instead of 'optional', the session will abort if pam_apparmor is not able to successfully find a hat to change_hat into. Be careful when making it required; it is possible to cause all attempted logins to the service to fail if the apparmor policy is insufficient. By default, pam_apparmor will attempt to change_hat into a hat based on the primary group name of the user logging in. If that hat fails to exist, the module will attempt to change_hat into a hat named DEFAULT (it is recommended to ensure this hat exists in the apparmor profiles for applications using pam_apparmor). However, this is configurable by adding an option to the pam configuration line to modify what order and what attributes pam_apparmor will attempt to use when attempting to change_hat. To do so, add 'order=' followed by a comma separated list of types of hats to try. The type of hats available are: * 'user' - the username will be used as the hatname * 'group' - the primary group will be used as the hatname * 'default' - the string 'DEFAULT' will be used as the hatname. Generally, this should be the hat of last resort. The order in the list determines the order the hat will be attempted. Some example configurations: # the default behavior session optional pam_apparmor.so order=group,default # attempt to use only the username session optional pam_apparmor.so order=user # use the username, followed by the primary groupname, followed by # DEFAULT if the prior hats do not exist in the apparmor profile session optional pam_apparmor.so order=user,group,default You can also add a 'debug' flag to the pam_apparmor session line; this will cause the pam module to report more of what it is attempting to do to syslog. References ---------- Project webpage: http://developer.novell.com/wiki/index.php/Novell_AppArmor To provide feedback or ask questions please contact the apparmor-dev@forge.novell.com mail list. This is the development list for the AppArmor team. See also: change_hat(3), and the Linux-PAM online documentation at http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/ apparmor-2.11.0/changehat/pam_apparmor/pam_apparmor.changes0000644000175000017500000000306510653272257021631 0ustar jjjj------------------------------------------------------------------- Mon Jul 30 08:16:39 CEST 2007 - sbeattie@suse.de - Convert libapparmor builddep to libapparmor-devel ------------------------------------------------------------------- Tue Mar 13 10:27:34 PDT 2007 - jmichael@suse.de - Use pam_modutil_* wrapper functions when possible ------------------------------------------------------------------- Tue Oct 31 12:00:00 UTC 2006 - jmichael@suse.de - Add debug option ------------------------------------------------------------------- Tue Oct 31 12:00:00 UTC 2006 - sbeattie@suse.de - Add configuration options to order attempted hat changes ------------------------------------------------------------------- Wed Oct 25 12:00:00 UTC 2006 - sbeattie@suse.de - remove auto-editing of pam's common-session - honor RPM's CFLAGS when building - add license (same as Linux PAM package). ------------------------------------------------------------------- Thu Sep 14 12:00:00 UTC 2006 - jmichael@suse.de - header comment was incorrect - use pam_get_user() instead of pam_get_item() - fix read from urandom if 0 ------------------------------------------------------------------- Fri Jan 13 12:00:00 UTC 2006 - sbeattie@suse.de - Add svn repo number to tarball ------------------------------------------------------------------- Fri Jan 13 12:00:00 UTC 2006 - jmichael@suse.de - Make magic tokens harder to guess by pulling them from /dev/urandom ------------------------------------------------------------------- Wed Dec 21 10:31:40 PST 2005 - jmichael@suse.de - initial apparmor-2.11.0/changehat/pam_apparmor/pam_apparmor.h0000644000175000017500000000424011503736226020440 0ustar jjjj/* pam_apparmor module */ /* * Written by Jesse Michael 2006/08/24 * and Steve Beattie 2006/10/25 * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, and the entire permission notice in its entirety, * including the disclaimer of warranties. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote * products derived from this software without specific prior * written permission. * * ALTERNATIVELY, this product may be distributed under the terms of * the GNU Public License, in which case the provisions of the GPL are * required INSTEAD OF the above restrictions. (This clause is * necessary due to a potential bad interaction between the GPL and * the restrictions contained in a BSD-style copyright.) * * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED * OF THE POSSIBILITY OF SUCH DAMAGE. */ enum hat_t { eNoEntry, eUsername, eGroupname, eDefault, }; typedef enum hat_t hat_t; #define MAX_HAT_TYPES 3 struct config { hat_t hat_type[MAX_HAT_TYPES]; }; extern int debug_flag; extern int get_options(pam_handle_t *pamh, struct config **config, int argc, const char **argv); apparmor-2.11.0/changehat/tomcat_apparmor/0000755000175000017500000000000013034613142016313 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/0000755000175000017500000000000013034613162020254 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/Makefile0000644000175000017500000000222012460557251021720 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 1999, 2004, 2005, 2006 NOVELL (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- NAME = tomcat_apparmor all: COMMONDIR=../../../common/ include $(COMMONDIR)/Make.rules LIB = lib CATALINA_HOME = /usr/share/tomcat55 all: ant -Dcatalina_home=${CATALINA_HOME} -Dtarget=1.5 jar jni_so clean: ant clean install: ant -Dversion=$(VERSION) -Drelease=$(MAN_RELEASE) -Dcatalina_home=${CATALINA_HOME} -Dinstall_lib=${LIB} install_jar install_jni apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/README.tomcat_apparmor0000644000175000017500000001472510624375002024334 0ustar jjjj# ------------------------------------------------------------------ # # Copyright (C) 2002-2006 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ ---------------------- 1. Overview 2. Requirements 3. Compiling the code 4. Installation 5. Generating a basic Tomcat profile 6. Implementation Notes 7. Profile Generation Tools and change_hat 8. Feedback/Resources ----------------------- 1. Overview -------- This package provides an implementation of a Tomcat 5.0 Valve that calls out to the change_hat(2) function provided by libapparmor to allow a process to change its security context. Any feedback is greatly appreciated. 2. Requirements ------------ AppArmor version 1.2 or later Tomcat version 5.0.X JDK 1.4.2 or later 3. Compiling the Code ----------------- From the top level directory execute: ant jar jni_so This will create a jar file and a shared library (for the JNI interface to the libapparmor library) and place the jar file under dist/ and the shared library under src/jni_src. 4. Installation ------------ - Copy the jar file to $TOMCAT_HOME/server/lib: [SLES10 example] cp dist/changeHatValve.jar /usr/share/tomcat5/server/lib - Copy the shared library to somehere in your library search path: cp dist/libJNIChangeHat.so /usr/lib [Note: you must ensure that the target directory is passed to tomcat via the java.library.path propert. This can be accomplished by setting the JAVA_OPTS enviroment variable, export JAVA_OPTS=-Djava.library.path, or set via the env variable LD_LIBRARY_PATH to include this directory so that tomcat can find this library at startup] - Configure the Tomcat server to use ChangeHatValve: Place the configuration directive below in your server.xml file. The valve definition should be the initial configuration option declared in the top-level container in the container hierarchy. [Note: The mediationType attribute may be set to ServletPath or URI depending on the granularity of containers that you wish to create. URI will prompt the user to create containers for every URI it processes. This is not recommended for most deployment scenarios and so the default "ServletPath" should be used. This maps to containers identified by the ServletPath header defined in the HttpRequest.] - Defining a default and required hat for the tomcat profile Edit the file /etc/apparmor/logprof.conf and add the following line to the section [required_hats]: ^.+/catalina.sh$ = DEFAULT Edit the file /etc/apparmor/logprof.conf and add the following line to the section [default_hat]: ^.+/catalina.sh$ = DEFAULT 5. Generating a basic Tomcat profile ------------------------------- Once the installation steps above have been started you are ready to begin creating a profile for your application. The profile creation tool genprof will guide you through generating a profile and its support for change_hat will prompt you create discrete hats as requested byt the changeHatValve during tomcat execution. 1. Create a basic profile for the tomcat server. - Run the command "genprof PATH_TO_CATALINA.SH" - In a seperate window start tomcat and then stop tomcat - In the genprof window press "S" to scan for events - Answer the questions about the initial profile for tomcat 2. Extending the profile to include containers for your web-app - Stop the tomcat server - Deploy your WAR file or equivalent files under the container. - execute "genprof PATH_TO_CATALINA.SH" - In a seperate window start tomcat and then exercise your web application - In the genprof window press "S" to scan for events During the prompting you will be asked questions similar to: ----------------------------------------------- Profile: /usr/share/tomcat5/bin/catalina.sh Default Hat: DEFAULT Requested Hat: /servlet/CookieExample (A)dd Requested Hat / (U)se Default Hat / (D)eny / Abo(r)t / (F)inish ------------------------------------------------ This example shows the tomcat valve for changehat attempting to change to the hat "/servlet/CookieExample". You can choose to create this hat, and subsequently fill it with resources, use the Default hat, named "DEFAULT" and is the default hat for request processing. 6. Implementation Notes -------------------- - Selecting the hat during request processing This implementation follows the following pattern to decide what hat to execute in for an incoming request: Try #1: Request data (URI or ServletInfo) if #1 fails (because the hat does not exist) then try #2 Try #2: DEFAULT - this is the default hat for request processing if #2 fails (because of any error) then.. Error: report that change_hat calls failed and remain in current security context. - Java 1.4.2 Notes This library uses java.security.SecureRandom to generate random numbers used as cookies in the change_hat(2) interface. This class on java version 1.4.2 uses /dev/random which is a blocking call and can adversely effect performance. Java can be configured to use /dev/urandom instead. For details: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4705093 7. Profile Tools and change_hat ---------------------------- When using the profile generation tool, genprof, you will be prompted to add a new hat when you exercise your program and requests are processed by the changeHatValve. You can choose to Add the hat or use the Default hat. If you choose to add the requested hat: genprof will create the hat and then all subsequent resource requests will be mediated in this hew hat (or security context). If you choose to use the default hat: genprof will mediate all resource requests in the default hat for the duration of processing this request. When the request processng is complete the valve will change_hat back to the parent context. 8. Feedback/Resources ----------------- To provide feedback or ask questions please contact the apparmor-dev@forge.novell.com mail list. This is the development list for the AppArmor team. apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/build.xml0000644000175000017500000000701711524266726022116 0ustar jjjj apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/Manifest0000644000175000017500000000003310624375002021741 0ustar jjjjMain-Class: ChangeHatValve apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/0000755000175000017500000000000013034613142021041 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/0000755000175000017500000000000013034613142021617 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/0000755000175000017500000000000013034613142023116 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/apparmor/0000755000175000017500000000000013034613152024740 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/apparmor/catalina/0000755000175000017500000000000013034613142026513 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/apparmor/catalina/valves/0000755000175000017500000000000013034613152030014 5ustar jjjj././@LongLink0000644000000000000000000000016100000000000011601 Lustar rootrootapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/apparmor/catalina/valves/ChangeHatValve.javaapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/apparmor/catalina/valves/ChangeH0000644000175000017500000001453710624401615031247 0ustar jjjj/* ------------------------------------------------------------------ * * Copyright (C) 2002-2007 Novell/SUSE * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * ------------------------------------------------------------------ */ package com.novell.apparmor.catalina.valves; import com.novell.apparmor.JNIChangeHat; import java.io.IOException; import javax.servlet.ServletException; import org.apache.catalina.Container; import org.apache.catalina.valves.ValveBase; import java.security.SecureRandom; public final class ChangeHatValve extends ValveBase { // JNI interface class for AppArmor change_hat private static JNIChangeHat changehat_wrapper = new JNIChangeHat(); private static SecureRandom randomNumberGenerator = null; private static String DEFAULT_HAT = "DEFAULT"; private static int SERVLET_PATH_MEDIATION = 0; private static int URI_MEDIATION = 1; private int mediationType = ChangeHatValve.SERVLET_PATH_MEDIATION; /* * * Property setter called during the parsing of the server.xml. * If the mediationType is an attribute of the * Valve definition for * com.novell.apparmor.catalina.valves.ChangeHatValve * then this setter will be called to set the value for this property. * * @param type URI|ServletPath * * Controls what granularity of security confinement when used with * AppArmor change_hat(2). Either based upon getServletPath() * or getRequestURI() called against on the request. * */ public void setMediationType( String type ) { if ( type.equalsIgnoreCase("URI") ) { this.mediationType = ChangeHatValve.URI_MEDIATION; } else if ( type.equalsIgnoreCase("servletPath") ) { this.mediationType = ChangeHatValve.SERVLET_PATH_MEDIATION; } } /* * * Return an int value representing the currently configured * mediationType for this instance. * */ public int getMediationType() { return this.mediationType; } /* * * Return an instance of SecureRandom creating one if necessary * */ SecureRandom getRndGen() { if ( ChangeHatValve.randomNumberGenerator == null) { ChangeHatValve.randomNumberGenerator = new java.security.SecureRandom(); } return ChangeHatValve.randomNumberGenerator; } /* * * Call to return a random cookie from the SecureRandom PRNG * */ int getCookie() { SecureRandom rnd = getRndGen(); if ( rnd == null ) { this.getContainer().getLogger().error( "[APPARMOR] can't initialize SecureRandom for cookie" + " generation for change_hat() call."); return 0; } return rnd.nextInt(); } /* * * Call out to AppArmor change_hat(2) to change the security * context for the processing of the request by subsequent valves. * Returns to the current security context when processing is complete. * The security context that is chosen is govern by the * mediationType property - which can be set in the * server.xml file. * * @param request Request being processed * @param response Response being processed * @param context The valve context used to invoke the next valve * in the current processing pipeline * * @exception IOException if an input/output error has occurred * @exception ServletException if a servlet error has occurred * */ public void invoke( org.apache.catalina.connector.Request request, org.apache.catalina.connector.Response response ) throws IOException, ServletException { Container container = this.getContainer(); int cookie, result; boolean inSubHat = false; container.getLogger().debug(this.getClass().toString() + "[APPARMOR] Request received [" + request.getInfo() + "]"); String hatname = ChangeHatValve.DEFAULT_HAT;; if ( getMediationType() == ChangeHatValve.SERVLET_PATH_MEDIATION ) { hatname = request.getServletPath(); } else if ( getMediationType() == ChangeHatValve.URI_MEDIATION ) { hatname = request.getRequestURI(); } /* * Select the AppArmor container for this request: * * 1. try hat name from either URI or ServletPath * (based on configuration) * * 2. try hat name of the defined DEFAULT_HAT * * 3. run in the current AppArmor context */ cookie = getCookie(); if ( hatname == null || "".equals(hatname) ) { hatname = ChangeHatValve.DEFAULT_HAT; } container.getLogger().debug("[APPARMOR] ChangeHat to [" + hatname + "] cookie [" + cookie + "]"); result = changehat_wrapper.changehat_in(hatname, cookie); if ( result == JNIChangeHat.EPERM ) { container.getLogger().error("[APPARMOR] change_hat valve " + "configured but Tomcat process is not confined by an " + "AppArmor profile."); getNext().invoke(request, response); } else { if ( result == JNIChangeHat.EACCES ) { changehat_wrapper.changehat_out(cookie); result = changehat_wrapper.changehat_in(ChangeHatValve.DEFAULT_HAT, cookie); if ( result != 0 ) { changehat_wrapper.changehat_out(cookie); container.getLogger().error("[APPARMOR] ChangeHat to [" + hatname + "] failed. Running in parent context."); } else { inSubHat = true; } } else if ( result != 0 ) { changehat_wrapper.changehat_out(cookie); container.getLogger().error("[APPARMOR] ChangeHat to [" + hatname + "] failed. Running in parent context."); } else { inSubHat = true; } getNext().invoke(request, response); if ( inSubHat ) changehat_wrapper.changehat_out(cookie); } } } apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/com/novell/apparmor/JNIChangeHat.java0000644000175000017500000000201010624375002027760 0ustar jjjj/* ------------------------------------------------------------------ * * Copyright (C) 2002-2005 Novell/SUSE * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * ------------------------------------------------------------------ */ package com.novell.apparmor; import java.nio.*; /** * * JNI interface to AppArmor change_hat(2) call * **/ public class JNIChangeHat { public static int EPERM = 1; public static int ENOMEM = 12; public static int EACCES = 13; public static int EFAULT = 14; // Native 'c' function delcaration public native int changehat_in(String subdomain, int magic_token); // Native 'c' function delcaration public native int changehat_out(int magic_token); static { // The runtime system executes a class's static initializer // when it loads the class. System.loadLibrary("JNIChangeHat"); } } apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/jni_src/0000755000175000017500000000000013034613165022475 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/jni_src/Makefile0000644000175000017500000000263711524266726024156 0ustar jjjjTOP = ../.. CLASSPATH = ${TOP}/build LIB = lib/ LIBDIR = /usr/${LIB} INCLUDE = ${LIBDIR}/jvm/java/include CFLAGS = -g -O2 -Wall -Wstrict-prototypes -Wl,-soname,$@.${SO_VERS} -pipe -fpic -D_REENTRANT INCLUDES = -I$(INCLUDE) -I$(INCLUDE)/linux -I$(TOP)/../../../libraries/libapparmor/src/ CLASSFILE = ${CLASSPATH}/com/novell/apparmor/${JAVA_CLASSNAME}.class DESTDIR = ${TOP}/dist SO_VERS = 1 JAVA_CLASSNAME = JNIChangeHat TARGET = lib${JAVA_CLASSNAME} all: ${TARGET}.so clean: rm -f *.so *.so.${SO_VERS} ${JAVA_CLASSNAME}.java com_novell_apparmor_${JAVA_CLASSNAME}.h ${JAVA_CLASSNAME}.java com_novell_apparmor_${JAVA_CLASSNAME}.h: ${CLASSFILE} javah -jni -classpath ${CLASSPATH} com.novell.apparmor.${JAVA_CLASSNAME} ${TARGET}.so: ${JAVA_CLASSNAME}.c ${JAVA_CLASSNAME}.java com_novell_apparmor_${JAVA_CLASSNAME}.h gcc ${INCLUDES} ${CFLAGS} -shared -o ${TARGET}.so ${JAVA_CLASSNAME}.c -L$(TOP)/../../../libraries/libapparmor/src/.libs -lapparmor install: ${TARGET}.so install -d $(DESTDIR)/${LIB} $(DESTDIR)${LIBDIR} mv -f $(TARGET).so $(TARGET)-$(VERSION)-$(RELEASE).so.$(SO_VERS) install -m 755 $(TARGET)-$(VERSION)-$(RELEASE).so.$(SO_VERS) ${DESTDIR}/${LIB} ln -sf /${LIB}/$(TARGET)-$(VERSION)-$(RELEASE).so.$(SO_VERS) ${DESTDIR}/${LIB}/$(TARGET).so.$(SO_VERS) ln -sf /${LIB}/$(TARGET).so.$(SO_VERS) ${DESTDIR}${LIBDIR}/$(TARGET).so apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_5/src/jni_src/JNIChangeHat.c0000644000175000017500000000270312263577431025036 0ustar jjjj/* ------------------------------------------------------------------ Copyright (C) 2002-2005 Novell/SUSE This program is free software; you can redistribute it and/or modify it under the terms of version 2 of the GNU General Public License published by the Free Software Foundation. ------------------------------------------------------------------ */ #include "jni.h" #include #include #include "com_novell_apparmor_JNIChangeHat.h" /* c intermediate lib call for Java -> JNI -> c library execution of the change_hat call */ JNIEXPORT jint Java_com_novell_apparmor_JNIChangeHat_changehat_1in (JNIEnv *env, jobject obj, jstring hatnameUTF, jint token) { int len; jint result = 0; if ( hatnameUTF == NULL ) { return ( EINVAL ); } len = (*env)->GetStringLength(env, hatnameUTF); if ( len > 0 ) { if ( len > 128 ) { len = 128; } char hatname[128]; (*env)->GetStringUTFRegion(env, hatnameUTF, 0, len, hatname); result = (jint) change_hat(hatname, (unsigned int) token); if ( result ) { return errno; } else { return result; } } return (jint) result; } JNIEXPORT jint JNICALL Java_com_novell_apparmor_JNIChangeHat_changehat_1out (JNIEnv *env, jobject obj, jint token) { jint result = 0; result = (jint) change_hat(NULL, (unsigned int) token); if ( result ) { return errno; } else { return result; } } apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/0000755000175000017500000000000013034613157020253 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/Makefile0000644000175000017500000000221512460557251021717 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 1999, 2004, 2005, 2006 NOVELL (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- NAME = tomcat_apparmor all: COMMONDIR=../../../common/ include $(COMMONDIR)/Make.rules LIB = lib CATALINA_HOME = /usr/share/tomcat5 # By default build 1.4 bytecode all: ant -Dtarget=1.4 jar jni_so clean: ant clean install: ant -Dversion=$(VERSION) -Drelease=$(MAN_RELEASE) -Dcatalina_home=${CATALINA_HOME} -Dinstall_lib=${LIB} install_jar install_jni apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/README.tomcat_apparmor0000644000175000017500000001472510514770034024331 0ustar jjjj# ------------------------------------------------------------------ # # Copyright (C) 2002-2006 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ ---------------------- 1. Overview 2. Requirements 3. Compiling the code 4. Installation 5. Generating a basic Tomcat profile 6. Implementation Notes 7. Profile Generation Tools and change_hat 8. Feedback/Resources ----------------------- 1. Overview -------- This package provides an implementation of a Tomcat 5.0 Valve that calls out to the change_hat(2) function provided by libapparmor to allow a process to change its security context. Any feedback is greatly appreciated. 2. Requirements ------------ AppArmor version 1.2 or later Tomcat version 5.0.X JDK 1.4.2 or later 3. Compiling the Code ----------------- From the top level directory execute: ant jar jni_so This will create a jar file and a shared library (for the JNI interface to the libapparmor library) and place the jar file under dist/ and the shared library under src/jni_src. 4. Installation ------------ - Copy the jar file to $TOMCAT_HOME/server/lib: [SLES10 example] cp dist/changeHatValve.jar /usr/share/tomcat5/server/lib - Copy the shared library to somehere in your library search path: cp dist/libJNIChangeHat.so /usr/lib [Note: you must ensure that the target directory is passed to tomcat via the java.library.path propert. This can be accomplished by setting the JAVA_OPTS enviroment variable, export JAVA_OPTS=-Djava.library.path, or set via the env variable LD_LIBRARY_PATH to include this directory so that tomcat can find this library at startup] - Configure the Tomcat server to use ChangeHatValve: Place the configuration directive below in your server.xml file. The valve definition should be the initial configuration option declared in the top-level container in the container hierarchy. [Note: The mediationType attribute may be set to ServletPath or URI depending on the granularity of containers that you wish to create. URI will prompt the user to create containers for every URI it processes. This is not recommended for most deployment scenarios and so the default "ServletPath" should be used. This maps to containers identified by the ServletPath header defined in the HttpRequest.] - Defining a default and required hat for the tomcat profile Edit the file /etc/apparmor/logprof.conf and add the following line to the section [required_hats]: ^.+/catalina.sh$ = DEFAULT Edit the file /etc/apparmor/logprof.conf and add the following line to the section [default_hat]: ^.+/catalina.sh$ = DEFAULT 5. Generating a basic Tomcat profile ------------------------------- Once the installation steps above have been started you are ready to begin creating a profile for your application. The profile creation tool genprof will guide you through generating a profile and its support for change_hat will prompt you create discrete hats as requested byt the changeHatValve during tomcat execution. 1. Create a basic profile for the tomcat server. - Run the command "genprof PATH_TO_CATALINA.SH" - In a seperate window start tomcat and then stop tomcat - In the genprof window press "S" to scan for events - Answer the questions about the initial profile for tomcat 2. Extending the profile to include containers for your web-app - Stop the tomcat server - Deploy your WAR file or equivalent files under the container. - execute "genprof PATH_TO_CATALINA.SH" - In a seperate window start tomcat and then exercise your web application - In the genprof window press "S" to scan for events During the prompting you will be asked questions similar to: ----------------------------------------------- Profile: /usr/share/tomcat5/bin/catalina.sh Default Hat: DEFAULT Requested Hat: /servlet/CookieExample (A)dd Requested Hat / (U)se Default Hat / (D)eny / Abo(r)t / (F)inish ------------------------------------------------ This example shows the tomcat valve for changehat attempting to change to the hat "/servlet/CookieExample". You can choose to create this hat, and subsequently fill it with resources, use the Default hat, named "DEFAULT" and is the default hat for request processing. 6. Implementation Notes -------------------- - Selecting the hat during request processing This implementation follows the following pattern to decide what hat to execute in for an incoming request: Try #1: Request data (URI or ServletInfo) if #1 fails (because the hat does not exist) then try #2 Try #2: DEFAULT - this is the default hat for request processing if #2 fails (because of any error) then.. Error: report that change_hat calls failed and remain in current security context. - Java 1.4.2 Notes This library uses java.security.SecureRandom to generate random numbers used as cookies in the change_hat(2) interface. This class on java version 1.4.2 uses /dev/random which is a blocking call and can adversely effect performance. Java can be configured to use /dev/urandom instead. For details: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4705093 7. Profile Tools and change_hat ---------------------------- When using the profile generation tool, genprof, you will be prompted to add a new hat when you exercise your program and requests are processed by the changeHatValve. You can choose to Add the hat or use the Default hat. If you choose to add the requested hat: genprof will create the hat and then all subsequent resource requests will be mediated in this hew hat (or security context). If you choose to use the default hat: genprof will mediate all resource requests in the default hat for the duration of processing this request. When the request processng is complete the valve will change_hat back to the parent context. 8. Feedback/Resources ----------------- To provide feedback or ask questions please contact the apparmor-dev@forge.novell.com mail list. This is the development list for the AppArmor team. apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/build.xml0000644000175000017500000000676210514770034022105 0ustar jjjj apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/Manifest0000644000175000017500000000003310470644261021741 0ustar jjjjMain-Class: ChangeHatValve apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/0000755000175000017500000000000013034613142021034 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/0000755000175000017500000000000013034613142021612 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/0000755000175000017500000000000013034613142023111 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/apparmor/0000755000175000017500000000000013034613153024734 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/apparmor/catalina/0000755000175000017500000000000013034613142026506 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/apparmor/catalina/valves/0000755000175000017500000000000013034613153030010 5ustar jjjj././@LongLink0000644000000000000000000000016100000000000011601 Lustar rootrootapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/apparmor/catalina/valves/ChangeHatValve.javaapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/apparmor/catalina/valves/ChangeH0000644000175000017500000001642210542275056031244 0ustar jjjj/* ------------------------------------------------------------------ * * Copyright (C) 2002-2005 Novell/SUSE * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * ------------------------------------------------------------------ */ package com.novell.apparmor.catalina.valves; import com.novell.apparmor.JNIChangeHat; import java.io.IOException; import javax.servlet.ServletException; import javax.servlet.http.HttpServletRequest; import org.apache.catalina.HttpRequest; import org.apache.catalina.Container; import org.apache.catalina.HttpResponse; import org.apache.catalina.valves.ValveBase; import java.security.SecureRandom; public final class ChangeHatValve extends ValveBase { // JNI interface class for AppArmor change_hat private static JNIChangeHat changehat_wrapper = new JNIChangeHat(); private static SecureRandom randomNumberGenerator = null; private static String DEFAULT_HAT = "DEFAULT"; private static int SERVLET_PATH_MEDIATION = 0; private static int URI_MEDIATION = 1; private int mediationType = ChangeHatValve.SERVLET_PATH_MEDIATION; /* * * Property setter called during the parsing of the server.xml. * If the mediationType is an attribute of the * Valve definition for * com.novell.apparmor.catalina.valves.ChangeHatValve * then this setter will be called to set the value for this property. * * @param type URI|ServletPath * * Controls what granularity of security confinement when used with * AppArmor change_hat(2). Either based upon getServletPath() * or getRequestURI() called against on the request. * */ public void setMediationType( String type ) { if ( type.equalsIgnoreCase("URI") ) { this.mediationType = ChangeHatValve.URI_MEDIATION; } else if ( type.equalsIgnoreCase("servletPath") ) { this.mediationType = ChangeHatValve.SERVLET_PATH_MEDIATION; } } /* * * Return an int value representing the currently configured * mediationType for this instance. * */ int getMediationType() { return this.mediationType; } /* * * Return an instance of SecureRandom creating one if necessary * */ SecureRandom getRndGen() { if ( ChangeHatValve.randomNumberGenerator == null) { ChangeHatValve.randomNumberGenerator = new java.security.SecureRandom(); } return ChangeHatValve.randomNumberGenerator; } /* * * Call to return a random cookie from the SecureRandom PRNG * */ int getCookie() { SecureRandom rnd = getRndGen(); if ( rnd == null ) { this.getContainer().getLogger().log( "[APPARMOR] can't initialize SecureRandom for cookie generation for change_hat() call.", container.getLogger().ERROR); return 0; } return rnd.nextInt(); } /* * * Call out to AppArmor change_hat(2) to change the security * context for the processing of the request by subsequent valves. * Returns to the current security context when processing is complete. * The security context that is chosen is govern by the * mediationType property - which can be set in the * server.xml file. * * @param request Request being processed * @param response Response being processed * @param context The valve context used to invoke the next valve * in the current processing pipeline * * @exception IOException if an input/output error has occurred * @exception ServletException if a servlet error has occurred * */ public void invoke( org.apache.catalina.Request request, org.apache.catalina.Response response, org.apache.catalina.ValveContext context ) throws IOException, ServletException { Container container = this.getContainer(); int cookie, result; boolean inSubHat = false; container.getLogger().log(this.getClass().toString() + "[APPARMOR] Request received [" + request.getInfo() + "]", container.getLogger().DEBUG); if ( !( request instanceof HttpRequest) || !(response instanceof HttpResponse) ) { container.getLogger().log(this.getClass().toString() + "[APPARMOR] Non HttpRequest received. Not changing context. " + "[" + request.getInfo() + "]", container.getLogger().ERROR); context.invokeNext(request, response); return; } HttpRequest httpRequest = (HttpRequest) request; HttpServletRequest servletRequest = (HttpServletRequest) httpRequest.getRequest(); String hatname = ChangeHatValve.DEFAULT_HAT;; if ( getMediationType() == ChangeHatValve.SERVLET_PATH_MEDIATION ) { hatname = servletRequest.getServletPath(); } else if ( getMediationType() == ChangeHatValve.URI_MEDIATION ) { hatname = servletRequest.getRequestURI(); } /* * Select the AppArmor container for this request: * * 1. try hat name from either URI or ServletPath * (based on configuration) * * 2. try hat name of the defined DEFAULT_HAT * * 3. run in the current AppArmor context */ cookie = getCookie(); if ( hatname == null || "".equals(hatname) ) { hatname = ChangeHatValve.DEFAULT_HAT; } container.getLogger().log("[APPARMOR] ChangeHat to [" + hatname + "] cookie [" + cookie + "]", container.getLogger().DEBUG); result = changehat_wrapper.changehat_in(hatname, cookie); if ( result == JNIChangeHat.EPERM ) { container.getLogger().log("[APPARMOR] change_hat valve " + "configured but Tomcat process is not confined by an " + "AppArmor profile.", container.getLogger().ERROR); context.invokeNext(request, response); } else { if ( result == JNIChangeHat.EACCES ) { changehat_wrapper.changehat_out(cookie); result = changehat_wrapper.changehat_in(ChangeHatValve.DEFAULT_HAT, cookie); if ( result != 0 ) { changehat_wrapper.changehat_out(cookie); container.getLogger().log("[APPARMOR] ChangeHat to [" + hatname + "] failed. Running in parent context.", container.getLogger().ERROR); } else { inSubHat = true; } } else if ( result != 0 ) { changehat_wrapper.changehat_out(cookie); container.getLogger().log("[APPARMOR] ChangeHat to [" + hatname + "] failed. Running in parent context.", container.getLogger().ERROR); } else { inSubHat = true; } context.invokeNext(request, response); if ( inSubHat ) changehat_wrapper.changehat_out(cookie); } } } apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/com/novell/apparmor/JNIChangeHat.java0000644000175000017500000000201010514770034027755 0ustar jjjj/* ------------------------------------------------------------------ * * Copyright (C) 2002-2005 Novell/SUSE * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * ------------------------------------------------------------------ */ package com.novell.apparmor; import java.nio.*; /** * * JNI interface to AppArmor change_hat(2) call * **/ public class JNIChangeHat { public static int EPERM = 1; public static int ENOMEM = 12; public static int EACCES = 13; public static int EFAULT = 14; // Native 'c' function delcaration public native int changehat_in(String subdomain, int magic_token); // Native 'c' function delcaration public native int changehat_out(int magic_token); static { // The runtime system executes a class's static initializer // when it loads the class. System.loadLibrary("JNIChangeHat"); } } apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/jni_src/0000755000175000017500000000000013034613165022470 5ustar jjjjapparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/jni_src/Makefile0000644000175000017500000000236710514770034024137 0ustar jjjjINCLUDE=/usr/lib/jvm/java/include TOP=../.. CLASSPATH=${TOP}/build CFLAGS=-g -O2 -Wall -Wstrict-prototypes -Wl,-soname,$@.${SO_VERS} -pipe -fpic -D_REENTRANT INCLUDES=-I$(INCLUDE) -I$(INCLUDE)/linux CLASSFILE=${CLASSPATH}/com/novell/apparmor/${JAVA_CLASSNAME}.class DESTDIR=${TOP}/dist SO_VERS = 1 LIB = lib/ LIBDIR = /usr/${LIB} JAVA_CLASSNAME=JNIChangeHat TARGET=lib${JAVA_CLASSNAME} all: ${TARGET}.so clean: rm -f *.so *.so.${SO_VERS} ${JAVA_CLASSNAME}.java com_novell_apparmor_${JAVA_CLASSNAME}.h ${JAVA_CLASSNAME}.java com_novell_apparmor_${JAVA_CLASSNAME}.h: ${CLASSFILE} javah -jni -classpath ${CLASSPATH} com.novell.apparmor.${JAVA_CLASSNAME} ${TARGET}.so: ${JAVA_CLASSNAME}.c ${JAVA_CLASSNAME}.java com_novell_apparmor_${JAVA_CLASSNAME}.h gcc ${INCLUDES} ${CFLAGS} -shared -o ${TARGET}.so ${JAVA_CLASSNAME}.c -lapparmor install: ${TARGET}.so install -d $(DESTDIR)/${LIB} $(DESTDIR)${LIBDIR} mv -f $(TARGET).so $(TARGET)-$(VERSION)-$(RELEASE).so.$(SO_VERS) install -m 755 $(TARGET)-$(VERSION)-$(RELEASE).so.$(SO_VERS) ${DESTDIR}/${LIB} ln -sf /${LIB}/$(TARGET)-$(VERSION)-$(RELEASE).so.$(SO_VERS) ${DESTDIR}/${LIB}/$(TARGET).so.$(SO_VERS) ln -sf /${LIB}/$(TARGET).so.$(SO_VERS) ${DESTDIR}${LIBDIR}/$(TARGET).so apparmor-2.11.0/changehat/tomcat_apparmor/tomcat_5_0/src/jni_src/JNIChangeHat.c0000644000175000017500000000270312263577431025031 0ustar jjjj/* ------------------------------------------------------------------ Copyright (C) 2002-2005 Novell/SUSE This program is free software; you can redistribute it and/or modify it under the terms of version 2 of the GNU General Public License published by the Free Software Foundation. ------------------------------------------------------------------ */ #include "jni.h" #include #include #include "com_novell_apparmor_JNIChangeHat.h" /* c intermediate lib call for Java -> JNI -> c library execution of the change_hat call */ JNIEXPORT jint Java_com_novell_apparmor_JNIChangeHat_changehat_1in (JNIEnv *env, jobject obj, jstring hatnameUTF, jint token) { int len; jint result = 0; if ( hatnameUTF == NULL ) { return ( EINVAL ); } len = (*env)->GetStringLength(env, hatnameUTF); if ( len > 0 ) { if ( len > 128 ) { len = 128; } char hatname[128]; (*env)->GetStringUTFRegion(env, hatnameUTF, 0, len, hatname); result = (jint) change_hat(hatname, (unsigned int) token); if ( result ) { return errno; } else { return result; } } return (jint) result; } JNIEXPORT jint JNICALL Java_com_novell_apparmor_JNIChangeHat_changehat_1out (JNIEnv *env, jobject obj, jint token) { jint result = 0; result = (jint) change_hat(NULL, (unsigned int) token); if ( result ) { return errno; } else { return result; } } apparmor-2.11.0/changehat/mod_apparmor/0000755000175000017500000000000013034613174015610 5ustar jjjjapparmor-2.11.0/changehat/mod_apparmor/Makefile0000644000175000017500000000722313023044233017244 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 2004, 2005 NOVELL (All rights reserved) # Copyright (c) 2016 Canonical, Ltd. # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- NAME:=apache2-mod_apparmor all: COMMONDIR=../../common/ include $(COMMONDIR)/Make.rules TARGET:=mod_apparmor.so MANPAGES=mod_apparmor.8 APXS:=$(shell if [ -x "/usr/sbin/apxs2" ] ; then \ echo "/usr/sbin/apxs2" ; \ elif [ -x "/usr/sbin/apxs" ] ; then \ echo "/usr/sbin/apxs" ; \ elif [ -x "/usr/bin/apxs2" ] ; then \ echo "/usr/bin/apxs2" ; \ elif [ -x "/usr/bin/apxs" ] ; then \ echo "/usr/bin/apxs" ; \ else \ echo "apxs" ; \ fi ) APXS_INSTALL_DIR=$(shell ${APXS} -q LIBEXECDIR) DESTDIR= ifdef USE_SYSTEM LIBAPPARMOR = $(shell if pkg-config --exists libapparmor ; then \ pkg-config --silence-errors --libs libapparmor ; \ elif ldconfig -p | grep -q libapparmor\.so$$ ; then \ echo -lapparmor ; \ fi ) ifeq ($(strip $(LIBAPPARMOR)),) ERROR_MESSAGE = $(error ${nl}\ ************************************************************************${nl}\ Unable to find libapparmor installed on this system; either${nl}\ install libapparmor devel packages, set the LIBAPPARMOR variable${nl}\ manually, or build against in-tree libapparmor.${nl}\ ************************************************************************${nl}) endif # LIBAPPARMOR not set LDLIBS += $(LIBAPPARMOR) else LIBAPPARMOR_SRC := ../../libraries/libapparmor/ LIBAPPARMOR_INCLUDE = $(LIBAPPARMOR_SRC)/include LIBAPPARMOR_PATH := $(LIBAPPARMOR_SRC)/src/.libs/ ifeq ($(realpath $(LIBAPPARMOR_PATH)/libapparmor.a),) ERROR_MESSAGE = $(error ${nl}\ ************************************************************************${nl}\ $(LIBAPPARMOR_PATH)/libapparmor.a is missing; either build against${nl}\ the in-tree libapparmor by building it first and then trying again${nl}\ (see the top-level README for help) or build against the system${nl}\ libapparmor by adding USE_SYSTEM=1 to your make command.${nl}\ ************************************************************************${nl}) endif # Need to pass -Wl twice here to get past both apxs2 and libtool, as # libtool will add the path to the RPATH of the library if passed -L/some/path LIBAPPARMOR_FLAGS = -I$(LIBAPPARMOR_INCLUDE) -Wl,-Wl,-L$(LIBAPPARMOR_PATH) LDLIBS = -lapparmor endif .PHONY: libapparmor_check .SILENT: libapparmor_check libapparmor_check: ; $(ERROR_MESSAGE) all: libapparmor_check $(TARGET) docs .PHONY: docs docs: ${MANPAGES} ${HTMLMANPAGES} %.so: %.c ${APXS} ${LIBAPPARMOR_FLAGS} -c $< ${LDLIBS} mv .libs/$@ . .PHONY: install install: ${TARGET} ${MANPAGES} mkdir -p ${DESTDIR}/${APXS_INSTALL_DIR} install -m 755 $< ${DESTDIR}/${APXS_INSTALL_DIR} make install_manpages DESTDIR=${DESTDIR} .PHONY: clean clean: pod_clean rm -rf .libs rm -f *.la *.lo *.so *.o *.slo .PHONY: check check: check_pod_files apparmor-2.11.0/changehat/mod_apparmor/pod2htmd.tmp0000644000175000017500000000000313034613174020044 0ustar jjjj . apparmor-2.11.0/changehat/mod_apparmor/mod_apparmor.conf0000644000175000017500000000015610417266507021147 0ustar jjjj # # Load the Immunix SubDomain change_hat module # LoadModule apparmor_module modules/mod_apparmor.so apparmor-2.11.0/changehat/mod_apparmor/mod_apparmor.80000644000175000017500000002113313034613174020361 0ustar jjjj.\" Automatically generated by Pod::Man 2.28 (Pod::Simple 3.29) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is turned on, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{ . if \nF \{ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "MOD_APPARMOR 8" .TH MOD_APPARMOR 8 "2016-06-24" "AppArmor 2.11.0" "AppArmor" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" mod_apparmor \- fine\-grained AppArmor confinement for Apache .SH "DESCRIPTION" .IX Header "DESCRIPTION" An AppArmor profile applies to an executable program; if a portion of the program needs different access permissions than other portions, the program can \*(L"change hats\*(R" via \fIaa_change_hat\fR\|(2) to a different role, also known as a subprofile. The mod_apparmor Apache module uses the \&\fIaa_change_hat\fR\|(2) mechanism to offer more fine-grained confinement of dynamic elements within Apache such as individual php and perl scripts, while still allowing the performance benefits of using mod_php and mod_perl. .PP To use mod_apparmor with Apache, ensure that mod_apparmor is configured to be loaded into Apache, either via a2enmod, yast or manual editing of the \&\fIapache2\fR\|(8)/\fIhttpd\fR\|(8) configuration files, and restart Apache. Make sure that apparmor is also functioning. .PP Once mod_apparmor is loaded within Apache, all requests to Apache will cause mod_apparmor to attempt to change into a hat that matches the ServerName for the server/vhost. If no such hat is found, it will first fall back by attempting to change into a hat composed of the ServerName-URI (e.g. \*(L"www.example.com\-/app/some.cgi\*(R"). If that hat is not found, it will fall back to attempting to use the hat named by the \s-1URI \s0(e.g. \*(L"/app/some.cgi\*(R"). If that hat is not found, it will fall back to attempting to use the hat \s-1DEFAULT_URI\s0; if that also does not exist, it will fall back to using the global Apache profile. Most static web pages can simply make use of the \s-1DEFAULT_URI\s0 hat. .PP Additionally, before any requests come in to Apache, mod_apparmor will attempt to change hat into the \s-1HANDLING_UNTRUSTED_INPUT\s0 hat. mod_apparmor will attempt to use this hat while Apache is doing the initial parsing of a given http request, before its given to a specific handler (like mod_php) for processing. .PP Because defining hats for every \s-1URI/URL\s0 often becomes tedious, mod_apparmor provides the AAHatName and AADefaultHatName Apache configuration options. .IP "\fBAAHatName\fR" 4 .IX Item "AAHatName" AAHatName allows you to specify a hat to be used for a given Apache , , or directive (see the Apache documentation for more details). Note that mod_apparmor behavior can become confused if and directives are intermingled and it is recommended to use one type of directive. If the hat specified by AAHatName does not exist in the Apache profile, then it falls back to the behavior described above. .IP "\fBAADefaultHatName\fR" 4 .IX Item "AADefaultHatName" AADefaultHatName allows you to specify a default hat to be used for virtual hosts and other Apache server directives, so that you can have different defaults for different virtual hosts. This can be overridden by the AAHatName directive and is checked for only if there isn't a matching AAHatName. The default value of AADefaultHatName is the ServerName for the server/vhost configuration. If the AADefaultHatName hat does not exist, then it falls back to the behavior described above. .SH "URI REQUEST SUMMARY" .IX Header "URI REQUEST SUMMARY" When profiling with mod_apparmor, it is helpful to keep the following order of operations in mind: .PP On each \s-1URI\s0 request, mod_apparmor will first \fIaa_change_hat\fR\|(2) into ^HANDLING_UNTRUSTED_INPUT, if it exists. .PP Then, after performing the initial parsing of the request, mod_apparmor will: .IP "1." 4 try to \fIaa_change_hat\fR\|(2) into a matching AAHatName hat if it exists and applies, otherwise it will .IP "2." 4 try to \fIaa_change_hat\fR\|(2) into an AADefaultHatName hat, either the ServerName (the default) or the configuration value specified by the AADefaultHatName directive, for the server/vhost, otherwise it will .IP "3." 4 try to \fIaa_change_hat\fR\|(2) into the ServerName-URI, otherwise it will .IP "4." 4 try to \fIaa_change_hat\fR\|(2) into the \s-1URI\s0 itself, otherwise it will .IP "5." 4 try to \fIaa_change_hat\fR\|(2) into the \s-1DEFAULT_URI\s0 hat, if it exists, otherwise it will .IP "6." 4 fall back to the global Apache policy .SH "BUGS" .IX Header "BUGS" \&\fImod_apparmor()\fR currently only supports apache2, and has only been tested with the prefork \s-1MPM\s0 configuration \*(-- threaded configurations of Apache may not work correctly. For Apache 2.4 users, you should enable the mpm_prefork module. .PP There are likely other bugs lurking about; if you find any, please report them at . .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fIapparmor\fR\|(7), \fIsubdomain.conf\fR\|(5), \fIapparmor_parser\fR\|(8), \fIaa_change_hat\fR\|(2) and . apparmor-2.11.0/changehat/mod_apparmor/COPYING.LGPL0000644000175000017500000006350010417022466017404 0ustar jjjj GNU LESSER GENERAL PUBLIC LICENSE Version 2.1, February 1999 Copyright (C) 1991, 1999 Free Software Foundation, Inc. 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. [This is the first released version of the Lesser GPL. It also counts as the successor of the GNU Library Public License, version 2, hence the version number 2.1.] Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public Licenses are intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This license, the Lesser General Public License, applies to some specially designated software packages--typically libraries--of the Free Software Foundation and other authors who decide to use it. You can use it too, but we suggest you first think carefully about whether this license or the ordinary General Public License is the better strategy to use in any particular case, based on the explanations below. When we speak of free software, we are referring to freedom of use, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish); that you receive source code or can get it if you want it; that you can change the software and use pieces of it in new free programs; and that you are informed that you can do these things. To protect your rights, we need to make restrictions that forbid distributors to deny you these rights or to ask you to surrender these rights. These restrictions translate to certain responsibilities for you if you distribute copies of the library or if you modify it. For example, if you distribute copies of the library, whether gratis or for a fee, you must give the recipients all the rights that we gave you. You must make sure that they, too, receive or can get the source code. If you link other code with the library, you must provide complete object files to the recipients, so that they can relink them with the library after making changes to the library and recompiling it. And you must show them these terms so they know their rights. We protect your rights with a two-step method: (1) we copyright the library, and (2) we offer you this license, which gives you legal permission to copy, distribute and/or modify the library. To protect each distributor, we want to make it very clear that there is no warranty for the free library. Also, if the library is modified by someone else and passed on, the recipients should know that what they have is not the original version, so that the original author's reputation will not be affected by problems that might be introduced by others. Finally, software patents pose a constant threat to the existence of any free program. We wish to make sure that a company cannot effectively restrict the users of a free program by obtaining a restrictive license from a patent holder. Therefore, we insist that any patent license obtained for a version of the library must be consistent with the full freedom of use specified in this license. Most GNU software, including some libraries, is covered by the ordinary GNU General Public License. This license, the GNU Lesser General Public License, applies to certain designated libraries, and is quite different from the ordinary General Public License. We use this license for certain libraries in order to permit linking those libraries into non-free programs. When a program is linked with a library, whether statically or using a shared library, the combination of the two is legally speaking a combined work, a derivative of the original library. The ordinary General Public License therefore permits such linking only if the entire combination fits its criteria of freedom. The Lesser General Public License permits more lax criteria for linking other code with the library. We call this license the "Lesser" General Public License because it does Less to protect the user's freedom than the ordinary General Public License. It also provides other free software developers Less of an advantage over competing non-free programs. These disadvantages are the reason we use the ordinary General Public License for many libraries. However, the Lesser license provides advantages in certain special circumstances. For example, on rare occasions, there may be a special need to encourage the widest possible use of a certain library, so that it becomes a de-facto standard. To achieve this, non-free programs must be allowed to use the library. A more frequent case is that a free library does the same job as widely used non-free libraries. In this case, there is little to gain by limiting the free library to free software only, so we use the Lesser General Public License. In other cases, permission to use a particular library in non-free programs enables a greater number of people to use a large body of free software. For example, permission to use the GNU C Library in non-free programs enables many more people to use the whole GNU operating system, as well as its variant, the GNU/Linux operating system. Although the Lesser General Public License is Less protective of the users' freedom, it does ensure that the user of a program that is linked with the Library has the freedom and the wherewithal to run that program using a modified version of the Library. The precise terms and conditions for copying, distribution and modification follow. Pay close attention to the difference between a "work based on the library" and a "work that uses the library". The former contains code derived from the library, whereas the latter must be combined with the library in order to run. GNU LESSER GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License (also called "this License"). Each licensee is addressed as "you". A "library" means a collection of software functions and/or data prepared so as to be conveniently linked with application programs (which use some of those functions and data) to form executables. The "Library", below, refers to any such software library or work which has been distributed under these terms. A "work based on the Library" means either the Library or any derivative work under copyright law: that is to say, a work containing the Library or a portion of it, either verbatim or with modifications and/or translated straightforwardly into another language. (Hereinafter, translation is included without limitation in the term "modification".) "Source code" for a work means the preferred form of the work for making modifications to it. For a library, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the library. Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running a program using the Library is not restricted, and output from such a program is covered only if its contents constitute a work based on the Library (independent of the use of the Library in a tool for writing it). Whether that is true depends on what the Library does and what the program that uses the Library does. 1. You may copy and distribute verbatim copies of the Library's complete source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and distribute a copy of this License along with the Library. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Library or any portion of it, thus forming a work based on the Library, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) The modified work must itself be a software library. b) You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change. c) You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License. d) If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that uses the facility, other than as an argument passed when the facility is invoked, then you must make a good faith effort to ensure that, in the event an application does not supply such function or table, the facility still operates, and performs whatever part of its purpose remains meaningful. (For example, a function in a library to compute square roots has a purpose that is entirely well-defined independent of the application. Therefore, Subsection 2d requires that any application-supplied function or table used by this function must be optional: if the application does not supply it, the square root function must still compute square roots.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Library, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Library, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Library. In addition, mere aggregation of another work not based on the Library with the Library (or with a work based on the Library) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the Library. To do this, you must alter all the notices that refer to this License, so that they refer to the ordinary GNU General Public License, version 2, instead of to this License. (If a newer version than version 2 of the ordinary GNU General Public License has appeared, then you can specify that version instead if you wish.) Do not make any other change in these notices. Once this change is made in a given copy, it is irreversible for that copy, so the ordinary GNU General Public License applies to all subsequent copies and derivative works made from that copy. This option is useful when you wish to copy part of the code of the Library into a program that is not a library. 4. You may copy and distribute the Library (or a portion or derivative of it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange. If distribution of object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place satisfies the requirement to distribute the source code, even though third parties are not compelled to copy the source along with the object code. 5. A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a "work that uses the Library". Such a work, in isolation, is not a derivative work of the Library, and therefore falls outside the scope of this License. However, linking a "work that uses the Library" with the Library creates an executable that is a derivative of the Library (because it contains portions of the Library), rather than a "work that uses the library". The executable is therefore covered by this License. Section 6 states terms for distribution of such executables. When a "work that uses the Library" uses material from a header file that is part of the Library, the object code for the work may be a derivative work of the Library even though the source code is not. Whether this is true is especially significant if the work can be linked without the Library, or if the work is itself a library. The threshold for this to be true is not precisely defined by law. If such an object file uses only numerical parameters, data structure layouts and accessors, and small macros and small inline functions (ten lines or less in length), then the use of the object file is unrestricted, regardless of whether it is legally a derivative work. (Executables containing this object code plus portions of the Library will still fall under Section 6.) Otherwise, if the work is a derivative of the Library, you may distribute the object code for the work under the terms of Section 6. Any executables containing that work also fall under Section 6, whether or not they are linked directly with the Library itself. 6. As an exception to the Sections above, you may also combine or link a "work that uses the Library" with the Library to produce a work containing portions of the Library, and distribute that work under terms of your choice, provided that the terms permit modification of the work for the customer's own use and reverse engineering for debugging such modifications. You must give prominent notice with each copy of the work that the Library is used in it and that the Library and its use are covered by this License. You must supply a copy of this License. If the work during execution displays copyright notices, you must include the copyright notice for the Library among them, as well as a reference directing the user to the copy of this License. Also, you must do one of these things: a) Accompany the work with the complete corresponding machine-readable source code for the Library including whatever changes were used in the work (which must be distributed under Sections 1 and 2 above); and, if the work is an executable linked with the Library, with the complete machine-readable "work that uses the Library", as object code and/or source code, so that the user can modify the Library and then relink to produce a modified executable containing the modified Library. (It is understood that the user who changes the contents of definitions files in the Library will not necessarily be able to recompile the application to use the modified definitions.) b) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (1) uses at run time a copy of the library already present on the user's computer system, rather than copying library functions into the executable, and (2) will operate properly with a modified version of the library, if the user installs one, as long as the modified version is interface-compatible with the version that the work was made with. c) Accompany the work with a written offer, valid for at least three years, to give the same user the materials specified in Subsection 6a, above, for a charge no more than the cost of performing this distribution. d) If distribution of the work is made by offering access to copy from a designated place, offer equivalent access to copy the above specified materials from the same place. e) Verify that the user has already received a copy of these materials or that you have already sent this user a copy. For an executable, the required form of the "work that uses the Library" must include any data and utility programs needed for reproducing the executable from it. However, as a special exception, the materials to be distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally accompany the operating system. Such a contradiction means you cannot use both them and the Library together in an executable that you distribute. 7. You may place library facilities that are a work based on the Library side-by-side in a single library together with other library facilities not covered by this License, and distribute such a combined library, provided that the separate distribution of the work based on the Library and of the other library facilities is otherwise permitted, and provided that you do these two things: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities. This must be distributed under the terms of the Sections above. b) Give prominent notice with the combined library of the fact that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 8. You may not copy, modify, sublicense, link with, or distribute the Library except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense, link with, or distribute the Library is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 9. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Library (or any work based on the Library), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Library or works based on it. 10. Each time you redistribute the Library (or any work based on the Library), the recipient automatically receives a license from the original licensor to copy, distribute, link with or modify the Library subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties with this License. 11. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Library at all. For example, if a patent license would not permit royalty-free redistribution of the Library by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Library. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply, and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 12. If the distribution and/or use of the Library is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Library under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 13. The Free Software Foundation may publish revised and/or new versions of the Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Library does not specify a license version number, you may choose any version ever published by the Free Software Foundation. 14. If you wish to incorporate parts of the Library into other free programs whose distribution conditions are incompatible with these, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Libraries If you develop a new library, and you want it to be of the greatest possible use to the public, we recommend making it free software that everyone can redistribute and change. You can do so by permitting redistribution under these terms (or, alternatively, under the terms of the ordinary General Public License). To apply these terms, attach the following notices to the library. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA Also add information on how to contact you by electronic and paper mail. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the library, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the library `Frob' (a library for tweaking knobs) written by James Random Hacker. , 1 April 1990 Ty Coon, President of Vice That's all there is to it! apparmor-2.11.0/changehat/mod_apparmor/mod_apparmor.8.html0000644000175000017500000001353413034613174021332 0ustar jjjj
 

NAME

mod_apparmor - fine-grained AppArmor confinement for Apache

DESCRIPTION

An AppArmor profile applies to an executable program; if a portion of the program needs different access permissions than other portions, the program can "change hats" via aa_change_hat(2) to a different role, also known as a subprofile. The mod_apparmor Apache module uses the aa_change_hat(2) mechanism to offer more fine-grained confinement of dynamic elements within Apache such as individual php and perl scripts, while still allowing the performance benefits of using mod_php and mod_perl.

To use mod_apparmor with Apache, ensure that mod_apparmor is configured to be loaded into Apache, either via a2enmod, yast or manual editing of the apache2(8)/httpd(8) configuration files, and restart Apache. Make sure that apparmor is also functioning.

Once mod_apparmor is loaded within Apache, all requests to Apache will cause mod_apparmor to attempt to change into a hat that matches the ServerName for the server/vhost. If no such hat is found, it will first fall back by attempting to change into a hat composed of the ServerName-URI (e.g. "www.example.com-/app/some.cgi"). If that hat is not found, it will fall back to attempting to use the hat named by the URI (e.g. "/app/some.cgi"). If that hat is not found, it will fall back to attempting to use the hat DEFAULT_URI; if that also does not exist, it will fall back to using the global Apache profile. Most static web pages can simply make use of the DEFAULT_URI hat.

Additionally, before any requests come in to Apache, mod_apparmor will attempt to change hat into the HANDLING_UNTRUSTED_INPUT hat. mod_apparmor will attempt to use this hat while Apache is doing the initial parsing of a given http request, before its given to a specific handler (like mod_php) for processing.

Because defining hats for every URI/URL often becomes tedious, mod_apparmor provides the AAHatName and AADefaultHatName Apache configuration options.

AAHatName

AAHatName allows you to specify a hat to be used for a given Apache <Directory>, <DirectoryMatch>, <Location> or <LocationMatch> directive (see the Apache documentation for more details). Note that mod_apparmor behavior can become confused if <Directory*> and <Location*> directives are intermingled and it is recommended to use one type of directive. If the hat specified by AAHatName does not exist in the Apache profile, then it falls back to the behavior described above.

AADefaultHatName

AADefaultHatName allows you to specify a default hat to be used for virtual hosts and other Apache server directives, so that you can have different defaults for different virtual hosts. This can be overridden by the AAHatName directive and is checked for only if there isn't a matching AAHatName. The default value of AADefaultHatName is the ServerName for the server/vhost configuration. If the AADefaultHatName hat does not exist, then it falls back to the behavior described above.

URI REQUEST SUMMARY

When profiling with mod_apparmor, it is helpful to keep the following order of operations in mind:

On each URI request, mod_apparmor will first aa_change_hat(2) into ^HANDLING_UNTRUSTED_INPUT, if it exists.

Then, after performing the initial parsing of the request, mod_apparmor will:

  1. try to aa_change_hat(2) into a matching AAHatName hat if it exists and applies, otherwise it will

  2. try to aa_change_hat(2) into an AADefaultHatName hat, either the ServerName (the default) or the configuration value specified by the AADefaultHatName directive, for the server/vhost, otherwise it will

  3. try to aa_change_hat(2) into the ServerName-URI, otherwise it will

  4. try to aa_change_hat(2) into the URI itself, otherwise it will

  5. try to aa_change_hat(2) into the DEFAULT_URI hat, if it exists, otherwise it will

  6. fall back to the global Apache policy

BUGS

mod_apparmor() currently only supports apache2, and has only been tested with the prefork MPM configuration -- threaded configurations of Apache may not work correctly. For Apache 2.4 users, you should enable the mpm_prefork module.

There are likely other bugs lurking about; if you find any, please report them at https://bugs.launchpad.net/apparmor/+filebug.

SEE ALSO

apparmor(7), subdomain.conf(5), apparmor_parser(8), aa_change_hat(2) and http://wiki.apparmor.net.

 
apparmor-2.11.0/changehat/mod_apparmor/mod_apparmor.pod0000644000175000017500000001260112733156327021003 0ustar jjjj# This publication is intellectual property of Novell Inc. and Canonical # Ltd. Its contents can be duplicated, either in part or in whole, provided # that a copyright label is visibly located on each copy. # # All information found in this book has been compiled with utmost # attention to detail. However, this does not guarantee complete accuracy. # Neither SUSE LINUX GmbH, Canonical Ltd, the authors, nor the translators # shall be held liable for possible errors or the consequences thereof. # # Many of the software and hardware descriptions cited in this book # are registered trademarks. All trade names are subject to copyright # restrictions and may be registered trade marks. SUSE LINUX GmbH # and Canonical Ltd. essentially adhere to the manufacturer's spelling. # # Names of products and trademarks appearing in this book (with or without # specific notation) are likewise subject to trademark and trade protection # laws and may thus fall under copyright restrictions. # =pod =head1 NAME mod_apparmor - fine-grained AppArmor confinement for Apache =head1 DESCRIPTION An AppArmor profile applies to an executable program; if a portion of the program needs different access permissions than other portions, the program can "change hats" via aa_change_hat(2) to a different role, also known as a subprofile. The mod_apparmor Apache module uses the aa_change_hat(2) mechanism to offer more fine-grained confinement of dynamic elements within Apache such as individual php and perl scripts, while still allowing the performance benefits of using mod_php and mod_perl. To use mod_apparmor with Apache, ensure that mod_apparmor is configured to be loaded into Apache, either via a2enmod, yast or manual editing of the apache2(8)/httpd(8) configuration files, and restart Apache. Make sure that apparmor is also functioning. Once mod_apparmor is loaded within Apache, all requests to Apache will cause mod_apparmor to attempt to change into a hat that matches the ServerName for the server/vhost. If no such hat is found, it will first fall back by attempting to change into a hat composed of the ServerName-URI (e.g. "www.example.com-/app/some.cgi"). If that hat is not found, it will fall back to attempting to use the hat named by the URI (e.g. "/app/some.cgi"). If that hat is not found, it will fall back to attempting to use the hat DEFAULT_URI; if that also does not exist, it will fall back to using the global Apache profile. Most static web pages can simply make use of the DEFAULT_URI hat. Additionally, before any requests come in to Apache, mod_apparmor will attempt to change hat into the HANDLING_UNTRUSTED_INPUT hat. mod_apparmor will attempt to use this hat while Apache is doing the initial parsing of a given http request, before its given to a specific handler (like mod_php) for processing. Because defining hats for every URI/URL often becomes tedious, mod_apparmor provides the AAHatName and AADefaultHatName Apache configuration options. =over 4 =item B AAHatName allows you to specify a hat to be used for a given Apache EDirectoryE, EDirectoryMatchE, ELocationE or ELocationMatchE directive (see the Apache documentation for more details). Note that mod_apparmor behavior can become confused if EDirectory*E and ELocation*E directives are intermingled and it is recommended to use one type of directive. If the hat specified by AAHatName does not exist in the Apache profile, then it falls back to the behavior described above. =item B AADefaultHatName allows you to specify a default hat to be used for virtual hosts and other Apache server directives, so that you can have different defaults for different virtual hosts. This can be overridden by the AAHatName directive and is checked for only if there isn't a matching AAHatName. The default value of AADefaultHatName is the ServerName for the server/vhost configuration. If the AADefaultHatName hat does not exist, then it falls back to the behavior described above. =back =head1 URI REQUEST SUMMARY When profiling with mod_apparmor, it is helpful to keep the following order of operations in mind: On each URI request, mod_apparmor will first aa_change_hat(2) into ^HANDLING_UNTRUSTED_INPUT, if it exists. Then, after performing the initial parsing of the request, mod_apparmor will: =over 4 =item 1 try to aa_change_hat(2) into a matching AAHatName hat if it exists and applies, otherwise it will =item 2 try to aa_change_hat(2) into an AADefaultHatName hat, either the ServerName (the default) or the configuration value specified by the AADefaultHatName directive, for the server/vhost, otherwise it will =item 3 try to aa_change_hat(2) into the ServerName-URI, otherwise it will =item 4 try to aa_change_hat(2) into the URI itself, otherwise it will =item 5 try to aa_change_hat(2) into the DEFAULT_URI hat, if it exists, otherwise it will =item 6 fall back to the global Apache policy =back =head1 BUGS mod_apparmor() currently only supports apache2, and has only been tested with the prefork MPM configuration -- threaded configurations of Apache may not work correctly. For Apache 2.4 users, you should enable the mpm_prefork module. There are likely other bugs lurking about; if you find any, please report them at L. =head1 SEE ALSO apparmor(7), subdomain.conf(5), apparmor_parser(8), aa_change_hat(2) and L. =cut apparmor-2.11.0/changehat/mod_apparmor/frob_sysconfig0000755000175000017500000000423211503736226020556 0ustar jjjj#!/usr/bin/perl -w # # ---------------------------------------------------------------------- # Copyright (c) 2004, 2005 NOVELL (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- # read /etc/sysconfig/apache2 and add "change_hat" to the apache # modules found there use Getopt::Long; use File::Temp qw/ :mktemp /; my $module="apparmor"; sub usage() { print "$0\t--file= modify \n"; print "\t\t\t--remove remove option from config file\n"; print "\t\t\t--help this help\n"; exit(0); } my ($conffile,$help,$remove); GetOptions( "file=s" => \$conffile, "remove" => \$remove, "help!" => \$help ) or usage(); usage() if $help; if (defined $conffile) { $old = $conffile; chomp($old); } else { $old="/etc/sysconfig/apache2"; } open(MENU,"<$old") or die "Fatal: can't open $old: $!"; ($fh, $file) = mkstemp($old . "XXXXXX" ); while () { # ok, we rely on the '="' to site the changes ; if (! defined $remove) { if ( /^\s*APACHE_MODULES="/ ) { if ( ! /$module/ ) { s/="/="$module /; } } } else { # remove the option if ( /^\s*APACHE_MODULES=".*$module/ ) { s/$module\s*//; } # remove old versions of the module if ( /^\s*APACHE_MODULES=".*change_hat/ ) { s/change_hat\s*//; } } print $fh $_; } rename $old, "$old.orig" || system("/bin/mv", $old, "$old.orig") && die "$old could not be renamed to $old.orig ($!); see $file for modifications"; rename $file, "$old" || system("/bin/mv", $file, "$old") && die "$file could not be renamed to $old ($!); see $file for modifications"; apparmor-2.11.0/changehat/mod_apparmor/mod_apparmor.c0000644000175000017500000003316312466252371020450 0ustar jjjj/* * Copyright (c) 2004, 2005, 2006 NOVELL (All rights reserved) * Copyright (c) 2014 Canonical, Ltd. (All rights reserved) * * The mod_apparmor module is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * mod_apparmor - (apache 2.0.x) * Author: Steve Beattie * * This currently only implements change_hat functionality, but could be * extended for other stuff we decide to do. */ #include "ap_config.h" #include "httpd.h" #include "http_config.h" #include "http_request.h" #include "http_log.h" #include "http_main.h" #include "http_protocol.h" #include "util_filter.h" #include "apr.h" #include "apr_strings.h" #include "apr_lib.h" #include #include /* #define DEBUG */ /* should the following be configurable? */ #define DEFAULT_HAT "HANDLING_UNTRUSTED_INPUT" #define DEFAULT_URI_HAT "DEFAULT_URI" /* Compatibility with apache 2.2 */ #if AP_SERVER_MAJORVERSION_NUMBER == 2 && AP_SERVER_MINORVERSION_NUMBER < 3 #define APLOG_TRACE1 APLOG_DEBUG server_rec *ap_server_conf = NULL; #endif #ifdef APLOG_USE_MODULE APLOG_USE_MODULE(apparmor); #endif module AP_MODULE_DECLARE_DATA apparmor_module; static unsigned long magic_token = 0; static int inside_default_hat = 0; typedef struct { const char *hat_name; char *path; } apparmor_dir_cfg; typedef struct { const char *hat_name; int is_initialized; } apparmor_srv_cfg; /* aa_init() gets invoked in the post_config stage of apache. * Unfortunately, apache reads its config once when it starts up, then * it re-reads it when goes into its restart loop, where it starts it's * children. This means we cannot call change_hat here, as the modules * memory will be wiped out, and the magic_token will be lost, so apache * wouldn't be able to change_hat back out. */ static int aa_init(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s) { apr_file_t *file; apr_size_t size = sizeof(magic_token); int ret; ret = apr_file_open (&file, "/dev/urandom", APR_READ, APR_OS_DEFAULT, p); if (!ret) { apr_file_read(file, (void *) &magic_token, &size); apr_file_close(file); } else { ap_log_error(APLOG_MARK, APLOG_ERR, errno, ap_server_conf, "Failed to open /dev/urandom"); } ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "Opened /dev/urandom successfully"); return OK; } /* As each child starts up, we'll change_hat into a default hat, mostly * to protect ourselves from bugs in parsing network input, but before * we change_hat to the uri specific hat. */ static void aa_child_init(apr_pool_t *p, server_rec *s) { int ret; ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "init: calling change_hat with '%s'", DEFAULT_HAT); ret = aa_change_hat(DEFAULT_HAT, magic_token); if (ret < 0) { ap_log_error(APLOG_MARK, APLOG_ERR, errno, ap_server_conf, "Failed to change_hat to '%s'", DEFAULT_HAT); } else { inside_default_hat = 1; } } static void debug_dump_uri(request_rec *r) { apr_uri_t *uri = &r->parsed_uri; if (uri) ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Dumping uri info " "scheme='%s' host='%s' path='%s' query='%s' fragment='%s'", uri->scheme, uri->hostname, uri->path, uri->query, uri->fragment); else ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Asked to dump NULL uri"); } /* aa_enter_hat will attempt to change_hat in the following order: (1) to a hatname in a location directive (2) to the server name or a defined per-server default (3) to the server name + "-" + uri (4) to the uri (5) to DEFAULT_URI (6) back to the parent profile */ static int aa_enter_hat(request_rec *r) { int aa_ret = -1; apparmor_dir_cfg *dcfg = (apparmor_dir_cfg *) ap_get_module_config(r->per_dir_config, &apparmor_module); apparmor_srv_cfg *scfg = (apparmor_srv_cfg *) ap_get_module_config(r->server->module_config, &apparmor_module); const char *aa_hat_array[6] = { NULL, NULL, NULL, NULL, NULL, NULL }; int i = 0; char *aa_label, *aa_mode, *aa_hat; const char *vhost_uri; debug_dump_uri(r); ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "aa_enter_hat (%s) n:0x%lx p:0x%lx main:0x%lx", dcfg->path, (unsigned long) r->next, (unsigned long) r->prev, (unsigned long) r->main); /* We only call change_hat for the main request, not subrequests */ if (r->main) return OK; if (inside_default_hat) { aa_change_hat(NULL, magic_token); inside_default_hat = 0; } if (dcfg != NULL && dcfg->hat_name != NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[dcfg] adding hat '%s' to aa_change_hat vector", dcfg->hat_name); aa_hat_array[i++] = dcfg->hat_name; } if (scfg) { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "Dumping scfg info: " "scfg='0x%lx' scfg->hat_name='%s'", (unsigned long) scfg, scfg->hat_name); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "scfg is null"); } if (scfg != NULL) { if (scfg->hat_name != NULL) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[scfg] adding hat '%s' to aa_change_hat vector", scfg->hat_name); aa_hat_array[i++] = scfg->hat_name; } else { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[scfg] adding server_name '%s' to aa_change_hat vector", r->server->server_hostname); aa_hat_array[i++] = r->server->server_hostname; } vhost_uri = apr_pstrcat(r->pool, r->server->server_hostname, "-", r->uri, NULL); ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[vhost+uri] adding vhost+uri '%s' to aa_change_hat vector", vhost_uri); aa_hat_array[i++] = vhost_uri; } ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[uri] adding uri '%s' to aa_change_hat vector", r->uri); aa_hat_array[i++] = r->uri; ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, "[default] adding '%s' to aa_change_hat vector", DEFAULT_URI_HAT); aa_hat_array[i++] = DEFAULT_URI_HAT; aa_ret = aa_change_hatv(aa_hat_array, magic_token); if (aa_ret < 0) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, errno, r, "aa_change_hatv call failed"); } /* Check to see if a defined AAHatName or AADefaultHatName would * apply, but wasn't the hat we landed up in; report a warning if * that's the case. */ aa_ret = aa_getcon(&aa_label, &aa_mode); if (aa_ret < 0) { ap_log_rerror(APLOG_MARK, APLOG_WARNING, errno, r, "aa_getcon call failed"); } else { ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "AA checks: aa_getcon result is '%s', mode '%s'", aa_label, aa_mode); /* TODO: use libapparmor get hat_name fn here once it is implemented */ aa_hat = strstr(aa_label, "//"); if (aa_hat != NULL && strcmp(aa_mode, "enforce") == 0) { aa_hat += 2; /* skip "//" */ ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "AA checks: apache is in hat '%s', mode '%s'", aa_hat, aa_mode); if (dcfg != NULL && dcfg->hat_name != NULL) { if (strcmp(aa_hat, dcfg->hat_name) != 0) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, "AAHatName '%s' applies, but does not appear to be a hat in the apache apparmor policy", dcfg->hat_name); } else if (scfg != NULL && scfg->hat_name != NULL) { if (strcmp(aa_hat, scfg->hat_name) != 0 && strcmp(aa_hat, r->uri) != 0) ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, "AADefaultHatName '%s' applies, but does not appear to be a hat in the apache apparmor policy", scfg->hat_name); } } free(aa_label); } return OK; } static int aa_exit_hat(request_rec *r) { int aa_ret; apparmor_dir_cfg *dcfg = (apparmor_dir_cfg *) ap_get_module_config(r->per_dir_config, &apparmor_module); /* apparmor_srv_cfg *scfg = (apparmor_srv_cfg *) ap_get_module_config(r->server->module_config, &apparmor_module); */ ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "exiting change_hat: dir hat %s dir path %s", dcfg->hat_name, dcfg->path); /* can convert the following back to aa_change_hat() when the * aa_change_hat() bug addressed in trunk commit 2329 lands in most * system libapparmors */ aa_change_hatv(NULL, magic_token); aa_ret = aa_change_hat(DEFAULT_HAT, magic_token); if (aa_ret < 0) { ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r, "Failed to change_hat to '%s'", DEFAULT_HAT); } else { inside_default_hat = 1; } return OK; } static const char * aa_cmd_ch_path(cmd_parms *cmd, void *mconfig, const char *parm1) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, "directory config change hat %s", parm1 ? parm1 : "DEFAULT"); apparmor_dir_cfg *dcfg = mconfig; if (parm1 != NULL) { dcfg->hat_name = parm1; } else { dcfg->hat_name = "DEFAULT"; } return NULL; } static int path_warn_once; static const char * immunix_cmd_ch_path(cmd_parms *cmd, void *mconfig, const char *parm1) { if (path_warn_once == 0) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, "ImmHatName is " "deprecated, please use AAHatName instead"); path_warn_once = 1; } return aa_cmd_ch_path(cmd, mconfig, parm1); } static const char * aa_cmd_ch_srv(cmd_parms *cmd, void *mconfig, const char *parm1) { ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, ap_server_conf, "server config change hat %s", parm1 ? parm1 : "DEFAULT"); apparmor_srv_cfg *scfg = (apparmor_srv_cfg *) ap_get_module_config(cmd->server->module_config, &apparmor_module); if (parm1 != NULL) { scfg->hat_name = parm1; } else { scfg->hat_name = "DEFAULT"; } return NULL; } static int srv_warn_once; static const char * immunix_cmd_ch_srv(cmd_parms *cmd, void *mconfig, const char *parm1) { if (srv_warn_once == 0) { ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, ap_server_conf, "ImmDefaultHatName is " "deprecated, please use AADefaultHatName instead"); srv_warn_once = 1; } return aa_cmd_ch_srv(cmd, mconfig, parm1); } static void * aa_create_dir_config(apr_pool_t *p, char *path) { apparmor_dir_cfg *newcfg = (apparmor_dir_cfg *) apr_pcalloc(p, sizeof(*newcfg)); ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "aa_create_dir_cfg (%s)", path ? path : ":no path:"); if (newcfg == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, "aa_create_dir_config: couldn't alloc dir config"); return NULL; } newcfg->path = apr_pstrdup(p, path ? path : ":no path:"); return newcfg; } /* XXX: Should figure out an appropriate action to take here, if any static void * aa_merge_dir_config(apr_pool_t *p, void *parent, void *child) { apparmor_dir_cfg *newcfg = (apparmor_dir_cfg *) apr_pcalloc(p, sizeof(*newcfg)); ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "in immunix_merge_dir ()"); if (newcfg == NULL) return NULL; return newcfg; } */ static void * aa_create_srv_config(apr_pool_t *p, server_rec *srv) { apparmor_srv_cfg *newcfg = (apparmor_srv_cfg *) apr_pcalloc(p, sizeof(*newcfg)); ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, ap_server_conf, "in aa_create_srv_config"); if (newcfg == NULL) { ap_log_error(APLOG_MARK, APLOG_ERR, 0, ap_server_conf, "aa_create_srv_config: couldn't alloc srv config"); return NULL; } return newcfg; } static const command_rec mod_apparmor_cmds[] = { AP_INIT_TAKE1( "ImmHatName", immunix_cmd_ch_path, NULL, ACCESS_CONF, "" ), AP_INIT_TAKE1( "ImmDefaultHatName", immunix_cmd_ch_srv, NULL, RSRC_CONF, "" ), AP_INIT_TAKE1( "AAHatName", aa_cmd_ch_path, NULL, ACCESS_CONF, "" ), AP_INIT_TAKE1( "AADefaultHatName", aa_cmd_ch_srv, NULL, RSRC_CONF, "" ), { NULL } }; static void register_hooks(apr_pool_t *p) { ap_hook_post_config(aa_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_child_init(aa_child_init, NULL, NULL, APR_HOOK_MIDDLE); ap_hook_access_checker(aa_enter_hat, NULL, NULL, APR_HOOK_FIRST); /* ap_hook_post_read_request(aa_enter_hat, NULL, NULL, APR_HOOK_FIRST); */ ap_hook_log_transaction(aa_exit_hat, NULL, NULL, APR_HOOK_LAST); } module AP_MODULE_DECLARE_DATA apparmor_module = { STANDARD20_MODULE_STUFF, aa_create_dir_config, /* dir config creater */ NULL, /* dir merger --- default is to override */ /* immunix_merge_dir_config, */ /* dir merger --- default is to override */ aa_create_srv_config, /* server config */ NULL, /* merge server config */ mod_apparmor_cmds, /* command table */ register_hooks /* register hooks */ }; apparmor-2.11.0/parser/0000755000175000017500000000000013034613172012500 5ustar jjjjapparmor-2.11.0/parser/parser_include.c0000644000175000017500000001611112504631026015642 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * Copyright (c) 2010 - 2012 * Canonical Ltd. * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Canonical, Ltd. */ /* Handle subdomain includes, as a straight forward preprocessing phase. While we are at it we will strip comments. Why? because it made it easier. We support 2 types of includes #include which searches for the first occurance of name in the subdomain directory path. #include "name" which will search for a relative or absolute pathed file -p : preprocess only. Dump output to stdout -I path : add a path to be search by #include < > -b path : set the base path to something other than /etc/subdomain.d */ #include #include #include #include #include #include #include #include #include #include #include "lib.h" #include "parser.h" #include "parser_include.h" /* An array of search directories, I sure hope 100's enough */ #define MAX_PATH 100 /* maximum depth of nesting */ #define MAX_NEST_LEVEL 100 /* Location of the subdomain.conf file */ #ifdef SUBDOMAIN_CONFDIR #define SUBDOMAIN_CONF SUBDOMAIN_CONFDIR "/subdomain.conf" #else /* !defined SUBDOMAIN_CONFDIR */ #define SUBDOMAIN_CONF "/etc/subdomain.conf" #endif /* SUBDOMAIN_CONFDIR */ static char *path[MAX_PATH] = { NULL }; static int npath = 0; static int fgetline(FILE * f, char *buffer, size_t len); static int stripcomment(char *s); static char *stripblanks(char *s); /* default base directory is /etc/subdomain.d, it can be overriden with the -b option. */ const char *basedir; static const char *default_basedir = "/etc/apparmor.d"; static const char *old_basedir = "/etc/subdomain.d"; /* set up basedir so that it can be overridden/used later. */ void init_base_dir(void) { int rc; struct stat sbuf; /* basedir should always start out NULL; if not, something's * wrong.*/ assert(basedir == NULL); rc = stat(default_basedir, &sbuf); if (rc == 0 && S_ISDIR(sbuf.st_mode)) { basedir = default_basedir; return; } rc = stat(old_basedir, &sbuf); if (rc == 0 && S_ISDIR(sbuf.st_mode)) { basedir = old_basedir; return; } } /* Set the base dir. Used to change default path for relative includes */ void set_base_dir(char *dir) { char *t; int i, rc; struct stat sbuf; t = strndup(dir, PATH_MAX); if (!t) { PERROR(_("Error: Out of memory.\n")); return; } /*strip trailing /'s */ for (i = strlen(t) - 1; i >= 0 && t[i] == '/'; i--) t[i] = 0; rc = stat(t, &sbuf); if (rc == -1 || !S_ISDIR(sbuf.st_mode)) { PERROR(_("Error: basedir %s is not a directory, skipping.\n"), t); free(t); return; } basedir = t; return; } /* Add a directory to the search path. */ int add_search_dir(const char *dir) { char *t; size_t len; if (npath >= MAX_PATH) { PERROR(_("Error: Could not add directory %s to search path.\n"), dir); return 0; } if (!dir) return 1; len = strlen(dir); if (len == 0) return 1; t = strdup(dir); if (t == NULL) { PERROR(_("Error: Could not allocate memory.\n")); return 0; } /*strip trailing /'s */ while (len > 0 && t[--len] == '/') t[len] = '\0'; path[npath] = t; npath++; return 1; } /* Parse Subdomain.conf and put the default dirs in place. subdomain.conf is a shell sourcable file we only parse entries starting with SUBDOMAIN_PATH= if there are multiple entries with SUBDOMAIN_PATH= each will get added. SUBDOMAIN_PATH=/etc/subdomain.d:/etc/subdomain.d/include is the same as SUBDOMAIN_PATH=/etc/subdomain.d SUBDOMAIN_PATH=/etc/subdomain.d/include */ void parse_default_paths(void) { autofclose FILE *f; char buf[1024]; char *t, *s; int saved_npath = npath; f = fopen(SUBDOMAIN_CONF, "r"); if (f == NULL) goto out; memset(buf, 0, sizeof(buf)); while (fgetline(f, buf, 1024)) { if (stripcomment(buf) && (t = strstr(buf, "SUBDOMAIN_PATH="))) { t += 15; /* handle : separating path elements */ do { s = strchr(t, ':'); if (s) *s = 0; if (!add_search_dir(stripblanks(t))) break; if (s) t = s + 1; } while (s != NULL); } } /* if subdomain.conf doesn't set a base search dir set it to this */ out: if (npath - saved_npath == 0) { add_search_dir(basedir); } } FILE *search_path(char *filename, char **fullpath) { FILE *newf = NULL; char *buf = NULL; int i; for (i = 0; i < npath; i++) { if (asprintf(&buf, "%s/%s", path[i], filename) < 0) { perror("asprintf"); exit(1); } newf = fopen(buf, "r"); if (newf && fullpath) *fullpath = buf; else free(buf); buf = NULL; if (newf) break; } return newf; } /* get a line from the file. If it is to long truncate it. */ static int fgetline(FILE * f, char *buffer, size_t len) { char *b = buffer; int c; while (((c = fgetc(f)) != EOF) && (c != '\n') && (strlen(buffer) < len - 1)) { *b = c; b++; } *b = '\0'; if (c != EOF) return 1; return 0; } /* If there is a comment null terminate the string, return strlen of the stripped string*/ static int stripcomment(char *s) { char *t = s; while (*s != '#' && *s != 0) s++; *s = 0; return strlen(t); } static char *stripblanks(char *s) { char *c; while (isspace(*s)) s++; c = s; while (!isspace(*s) && *s != 0) s++; *s = 0; return c; } struct include_stack_t { char *filename; int lineno; struct include_stack_t *next; }; struct include_stack_t *include_stack_head = NULL; static void start_include_position(const char *filename) { if (current_filename) free(current_filename); current_filename = strdup(filename ? filename : "stdin"); current_lineno = 1; } void push_include_stack(char *filename) { struct include_stack_t *include = NULL; include = (struct include_stack_t *) malloc(sizeof(*include)); if (!include) { perror("malloc of included file stack tracker"); /* failures in this area are non-fatal */ return; } include->filename = strdup(current_filename); include->lineno = current_lineno; include->next = include_stack_head; include_stack_head = include; start_include_position(filename); } void pop_include_stack(void) { struct include_stack_t *include = NULL; if (!include_stack_head) return; include = include_stack_head; include_stack_head = include->next; if (current_filename) free(current_filename); current_filename = include->filename; current_lineno = include->lineno; free(include); } void reset_include_stack(const char *filename) { while (include_stack_head) pop_include_stack(); start_include_position(filename); } apparmor-2.11.0/parser/parser_policy.c0000644000175000017500000002333212673100443015522 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * Copyright (c) 2010 - 2012 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical, * Ltd. */ #include #include #include #include #include #include #include #include #include "parser.h" #include "profile.h" #include "parser_yacc.h" /* #define DEBUG */ #ifdef DEBUG #undef PDEBUG #define PDEBUG(fmt, args...) fprintf(stderr, "Lexer: " fmt, ## args) #else #undef PDEBUG #define PDEBUG(fmt, args...) /* Do nothing */ #endif #define NPDEBUG(fmt, args...) /* Do nothing */ ProfileList policy_list; void add_to_list(Profile *prof) { pair res = policy_list.insert(prof); if (!res.second) { PERROR("Multiple definitions for profile %s exist," "bailing out.\n", prof->name); exit(1); } } void add_hat_to_policy(Profile *prof, Profile *hat) { hat->parent = prof; pair res = prof->hat_table.insert(hat); if (!res.second) { PERROR("Multiple definitions for hat %s in profile %s exist," "bailing out.\n", hat->name, prof->name); exit(1); } } int add_entry_to_x_table(Profile *prof, char *name) { int i; for (i = (AA_EXEC_LOCAL >> 10) + 1; i < AA_EXEC_COUNT; i++) { if (!prof->exec_table[i]) { prof->exec_table[i] = name; return i; } else if (strcmp(prof->exec_table[i], name) == 0) { /* name already in table */ free(name); return i; } } free(name); return 0; } static int add_named_transition(Profile *prof, struct cod_entry *entry) { char *name = NULL; /* check to see if it is a local transition */ if (!label_contains_ns(entry->nt_name)) { char *sub = strstr(entry->nt_name, "//"); /* does the subprofile name match the rule */ if (sub && strncmp(prof->name, sub, sub - entry->nt_name) && strcmp(sub + 2, entry->name) == 0) { free(entry->nt_name); entry->nt_name = NULL; return AA_EXEC_LOCAL >> 10; } else if (((entry->mode & AA_USER_EXEC_MODIFIERS) == SHIFT_MODE(AA_EXEC_LOCAL, AA_USER_SHIFT)) || ((entry->mode & AA_OTHER_EXEC_MODIFIERS) == SHIFT_MODE(AA_EXEC_LOCAL, AA_OTHER_SHIFT))) { if (strcmp(entry->nt_name, entry->name) == 0) { free(entry->nt_name); entry->nt_name = NULL; return AA_EXEC_LOCAL >> 10; } /* specified as cix so profile name is implicit */ name = (char *) malloc(strlen(prof->name) + strlen(entry->nt_name) + 3); if (!name) { PERROR("Memory allocation error\n"); exit(1); } sprintf(name, "%s//%s", prof->name, entry->nt_name); free(entry->nt_name); entry->nt_name = NULL; } else { /** * pass control of the memory pointed to by nt_name * from entry to add_entry_to_x_table() */ name = entry->nt_name; entry->nt_name = NULL; } } else { /** * pass control of the memory pointed to by nt_name * from entry to add_entry_to_x_table() */ name = entry->nt_name; entry->nt_name = NULL; } return add_entry_to_x_table(prof, name); } void add_entry_to_policy(Profile *prof, struct cod_entry *entry) { entry->next = prof->entries; prof->entries = entry; } void post_process_file_entries(Profile *prof) { struct cod_entry *entry; int cp_mode = 0; list_for_each(prof->entries, entry) { if (entry->nt_name) { int mode = 0; int n = add_named_transition(prof, entry); if (!n) { PERROR("Profile %s has too many specified profile transitions.\n", prof->name); exit(1); } if (entry->mode & AA_USER_EXEC) mode |= SHIFT_MODE(n << 10, AA_USER_SHIFT); if (entry->mode & AA_OTHER_EXEC) mode |= SHIFT_MODE(n << 10, AA_OTHER_SHIFT); entry->mode = ((entry->mode & ~AA_ALL_EXEC_MODIFIERS) | (mode & AA_ALL_EXEC_MODIFIERS)); } /* FIXME: currently change_profile also implies onexec */ cp_mode |= entry->mode & (AA_CHANGE_PROFILE); } /* if there are change_profile rules, this implies that we need * access to /proc/self/attr/current */ if (cp_mode & AA_CHANGE_PROFILE) { /* FIXME: should use @{PROC}/@{PID}/attr/{current,exec} */ struct cod_entry *new_ent; char *buffer = strdup("/proc/*/attr/{current,exec}"); if (!buffer) { PERROR("Memory allocation error\n"); exit(1); } new_ent = new_entry(buffer, AA_MAY_WRITE, NULL); if (!new_ent) { PERROR("Memory allocation error\n"); exit(1); } add_entry_to_policy(prof, new_ent); } } void post_process_rule_entries(Profile *prof) { for (RuleList::iterator i = prof->rule_ents.begin(); i != prof->rule_ents.end(); i++) (*i)->post_process(*prof); } #define CHANGEHAT_PATH "/proc/[0-9]*/attr/current" /* add file rules to access /proc files to call change_hat() */ static int profile_add_hat_rules(Profile *prof) { struct cod_entry *entry; /* TODO: ??? fix logic for when to add to hat/base vs. local */ /* don't add hat rules for local_profiles or base profiles */ if (prof->local || prof->hat_table.empty()) return 0; /* add entry to hat */ entry = new_entry(strdup(CHANGEHAT_PATH), AA_MAY_WRITE, NULL); if (!entry) return ENOMEM; add_entry_to_policy(prof, entry); return 0; } int load_policy_list(ProfileList &list, int option, aa_kernel_interface *kernel_interface, int cache_fd) { int res = 0; for (ProfileList::iterator i = list.begin(); i != list.end(); i++) { res = load_profile(option, kernel_interface, *i, cache_fd); if (res != 0) break; } return res; } int load_flattened_hats(Profile *prof, int option, aa_kernel_interface *kernel_interface, int cache_fd) { return load_policy_list(prof->hat_table, option, kernel_interface, cache_fd); } int load_policy(int option, aa_kernel_interface *kernel_interface, int cache_fd) { return load_policy_list(policy_list, option, kernel_interface, cache_fd); } int load_hats(std::ostringstream &buf, Profile *prof) { for (ProfileList::iterator i = prof->hat_table.begin(); i != prof->hat_table.end(); i++) { sd_serialize_profile(buf, *i, 0); } return 0; } void dump_policy(void) { policy_list.dump(); } void dump_policy_names(void) { policy_list.dump_profile_names(true); } /* merge_hats: merges hat_table into hat_table owned by prof */ static void merge_hats(Profile *prof, ProfileList &hats) { for (ProfileList::iterator i = hats.begin(); i != hats.end(); ) { ProfileList::iterator cur = i++; add_hat_to_policy(prof, *cur); hats.erase(cur); } } Profile *merge_policy(Profile *a, Profile *b) { Profile *ret = a; struct cod_entry *last; if (!a) { ret = b; goto out; } if (!b) goto out; if (a->name || b->name) { PERROR("ASSERT: policy merges shouldn't have names %s %s\n", a->name ? a->name : "", b->name ? b->name : ""); exit(1); } if (a->entries) { list_last_entry(a->entries, last); last->next = b->entries; } else { a->entries = b->entries; } b->entries = NULL; a->flags.complain = a->flags.complain || b->flags.complain; a->flags.audit = a->flags.audit || b->flags.audit; a->caps.allow |= b->caps.allow; a->caps.audit |= b->caps.audit; a->caps.deny |= b->caps.deny; a->caps.quiet |= b->caps.quiet; if (a->net.allow) { size_t i; for (i = 0; i < get_af_max(); i++) { a->net.allow[i] |= b->net.allow[i]; a->net.audit[i] |= b->net.audit[i]; a->net.deny[i] |= b->net.deny[i]; a->net.quiet[i] |= b->net.quiet[i]; } } merge_hats(a, b->hat_table); delete b; out: return ret; } int process_profile_rules(Profile *profile) { int error; error = process_profile_regex(profile); if (error) { PERROR(_("ERROR processing regexs for profile %s, failed to load\n"), profile->name); exit(1); return error; } error = process_profile_policydb(profile); if (error) { PERROR(_("ERROR processing policydb rules for profile %s, failed to load\n"), (profile)->name); exit(1); return error; } return 0; } int post_process_policy_list(ProfileList &list, int debug_only); int post_process_profile(Profile *profile, int debug_only) { int error = 0; error = profile_add_hat_rules(profile); if (error) { PERROR(_("ERROR adding hat access rule for profile %s\n"), profile->name); return error; } error = process_profile_variables(profile); if (error) { PERROR(_("ERROR expanding variables for profile %s, failed to load\n"), profile->name); exit(1); return error; } error = replace_profile_aliases(profile); if (error) { PERROR(_("ERROR replacing aliases for profile %s, failed to load\n"), profile->name); return error; } error = profile_merge_rules(profile); if (error) { PERROR(_("ERROR merging rules for profile %s, failed to load\n"), profile->name); exit(1); return error; } if (!debug_only) { error = process_profile_rules(profile); if (error) return error; } error = post_process_policy_list(profile->hat_table, debug_only); return error; } int post_process_policy_list(ProfileList &list, int debug_only) { int error = 0; for (ProfileList::iterator i = list.begin(); i != list.end(); i++) { error = post_process_profile(*i, debug_only); if (error) break; } return error; } int post_process_policy(int debug_only) { return post_process_policy_list(policy_list, debug_only); } void free_policies(void) { policy_list.clear(); } apparmor-2.11.0/parser/common_optarg.c0000644000175000017500000001325112326001041015477 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * Copyright (c) 2010 - 2014 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical, * Ltd. */ #include #include #include #include #include "common_optarg.h" #include "parser.h" optflag_table_t dumpflag_table[] = { { 1, "rule-exprs", "Dump rule to expr tree conversions", DFA_DUMP_RULE_EXPR }, { 1, "expr-stats", "Dump stats on expr tree", DFA_DUMP_TREE_STATS }, { 1, "expr-tree", "Dump expression tree", DFA_DUMP_TREE }, { 1, "expr-simplified", "Dump simplified expression tree", DFA_DUMP_SIMPLE_TREE }, { 1, "stats", "Dump all compile stats", DFA_DUMP_TREE_STATS | DFA_DUMP_STATS | DFA_DUMP_TRANS_STATS | DFA_DUMP_EQUIV_STATS | DFA_DUMP_DIFF_STATS }, { 1, "progress", "Dump progress for all compile phases", DFA_DUMP_PROGRESS | DFA_DUMP_STATS | DFA_DUMP_TRANS_PROGRESS | DFA_DUMP_TRANS_STATS | DFA_DUMP_DIFF_PROGRESS | DFA_DUMP_DIFF_STATS }, { 1, "dfa-progress", "Dump dfa creation as in progress", DFA_DUMP_PROGRESS | DFA_DUMP_STATS }, { 1, "dfa-stats", "Dump dfa creation stats", DFA_DUMP_STATS }, { 1, "dfa-states", "Dump dfa state diagram", DFA_DUMP_STATES }, { 1, "dfa-graph", "Dump dfa dot (graphviz) graph", DFA_DUMP_GRAPH }, { 1, "dfa-minimize", "Dump dfa minimization", DFA_DUMP_MINIMIZE }, { 1, "dfa-unreachable", "Dump dfa unreachable states", DFA_DUMP_UNREACHABLE }, { 1, "dfa-node-map", "Dump expr node set to state mapping", DFA_DUMP_NODE_TO_DFA }, { 1, "dfa-uniq-perms", "Dump unique perms", DFA_DUMP_UNIQ_PERMS }, { 1, "dfa-minimize-uniq-perms", "Dump unique perms post minimization", DFA_DUMP_MIN_UNIQ_PERMS }, { 1, "dfa-minimize-partitions", "Dump dfa minimization partitions", DFA_DUMP_MIN_PARTS }, { 1, "compress-progress", "Dump progress of compression", DFA_DUMP_TRANS_PROGRESS | DFA_DUMP_TRANS_STATS }, { 1, "compress-stats", "Dump stats on compression", DFA_DUMP_TRANS_STATS }, { 1, "compressed-dfa", "Dump compressed dfa", DFA_DUMP_TRANS_TABLE }, { 1, "equiv-stats", "Dump equivalence class stats", DFA_DUMP_EQUIV_STATS }, { 1, "equiv", "Dump equivalence class", DFA_DUMP_EQUIV }, { 1, "diff-encode", "Dump differential encoding", DFA_DUMP_DIFF_ENCODE }, { 1, "diff-stats", "Dump differential encoding stats", DFA_DUMP_DIFF_STATS }, { 1, "diff-progress", "Dump progress of differential encoding", DFA_DUMP_DIFF_PROGRESS | DFA_DUMP_DIFF_STATS }, { 0, NULL, NULL, 0 }, }; optflag_table_t optflag_table[] = { { 2, "0", "no optimizations", DFA_CONTROL_TREE_NORMAL | DFA_CONTROL_TREE_SIMPLE | DFA_CONTROL_MINIMIZE | DFA_CONTROL_REMOVE_UNREACHABLE | DFA_CONTROL_DIFF_ENCODE }, { 1, "equiv", "use equivalent classes", DFA_CONTROL_EQUIV }, { 1, "expr-normalize", "expression tree normalization", DFA_CONTROL_TREE_NORMAL }, { 1, "expr-simplify", "expression tree simplification", DFA_CONTROL_TREE_SIMPLE }, { 0, "expr-left-simplify", "left simplification first", DFA_CONTROL_TREE_LEFT }, { 2, "expr-right-simplify", "right simplification first", DFA_CONTROL_TREE_LEFT }, { 1, "minimize", "dfa state minimization", DFA_CONTROL_MINIMIZE }, { 1, "filter-deny", "filter out deny information from final dfa", DFA_CONTROL_FILTER_DENY }, { 1, "remove-unreachable", "dfa unreachable state removal", DFA_CONTROL_REMOVE_UNREACHABLE }, { 0, "compress-small", "do slower dfa transition table compression", DFA_CONTROL_TRANS_HIGH }, { 2, "compress-fast", "do faster dfa transition table compression", DFA_CONTROL_TRANS_HIGH }, { 1, "diff-encode", "Differentially encode transitions", DFA_CONTROL_DIFF_ENCODE }, { 0, NULL, NULL, 0 }, }; void print_flag_table(optflag_table_t *table) { int i; unsigned int longest = 0; for (i = 0; table[i].option; i++) { if (strlen(table[i].option) > longest) longest = strlen(table[i].option); } for (i = 0; table[i].option; i++) { printf("%5s%-*s \t%s\n", (table[i].control & 1) ? "[no-]" : "", longest, table[i].option, table[i].desc); } } int handle_flag_table(optflag_table_t *table, const char *optarg, dfaflags_t *flags) { const char *arg = optarg; int i, invert = 0; if (strncmp(optarg, "no-", 3) == 0) { arg = optarg + 3; invert = 1; } for (i = 0; table[i].option; i++) { if (strcmp(table[i].option, arg) == 0) { /* check if leading no- was specified but is not * supported by the option */ if (invert && !(table[i].control & 1)) return 0; if (table[i].control & 2) invert |= 1; if (invert) *flags &= ~table[i].flags; else *flags |= table[i].flags; return 1; } } return 0; } void display_dump(const char *command) { display_version(); printf("\n%s: --dump [Option]\n\n" "Options:\n" "--------\n" " variables \tDump variables\n" " expanded-variables\t Dump variables after expansion\n" ,command); print_flag_table(dumpflag_table); } void display_optimize(const char *command) { display_version(); printf("\n%s: -O [Option]\n\n" "Options:\n" "--------\n" ,command); print_flag_table(optflag_table); } apparmor-2.11.0/parser/apparmor_parser.pod0000644000175000017500000002572413000455156016412 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, # 2008, 2009 # NOVELL (All rights reserved) # # Copyright (c) 2010 - 2012 # Canonical Ltd. (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- =pod =head1 NAME apparmor_parser - loads AppArmor profiles into the kernel =head1 SYNOPSIS BcommandE [profiles]...> BcommandE> B =head1 DESCRIPTION B is used as a general tool to compile, and manage AppArmor policy, including loading new apparmor.d(5) profiles into the Linux kernel. AppArmor profiles restrict the operations available to processes. The B are loaded into the Linux kernel by the B program. The B may be specified by file name or a directory name containing a set of profiles. If a directory is specified then the B will try to do a profile load for each file in the directory that is not a dot file, or explicitly black listed (*.dpkg-new, *.dpkg-old, *.dpkg-dist, *-dpkg-bak, *.repnew, *.rpmsave, *orig, *.rej, *~). The B will fall back to taking input from standard input if a profile or directory is not supplied. The input supplied to B should be in the format described in apparmor.d(5). =head1 COMMANDS The command set is broken into four subcategories. =over 4 =item unprivileged commands Commands that don't require any privilege and don't operate on profiles. =item unprivileged profile commands Commands that operate on a profile either specified on the command line or read from stdin if no profile was specified. =item privileged commands Commands that require the MAC_ADMIN capability within the affected AppArmor namespace to load policy into the kernel or filesystem write permissions to update the affected privileged files (cache etc). =item privileged profile commands Commands that require privilege and operate on profiles. =back =head1 Unprivileged commands =over 4 =item -V, --version Print the version number and exit. =item -h, --help Give a quick reference guide. =back =head1 Unprivileged profile commands =over 4 =item -N, --names Produce a list of policies from a given set of profiles (implies -K). =item -p, --preprocess Apply preprocessing to the input profile(s) by flattening includes into the output profile and dump to stdout. =item -S, --stdout Writes a binary (cached) profile to stdout (implies -K and -T). =item -o file, --ofile file Writes a binary (cached) profile to the specified file (implies -K and -T) =back =head1 Privileged commands =over 4 =item --purge-cache Unconditionally clear out cached profiles. =back =head1 Privileged profile commands =over 4 =item -a, --add Insert the AppArmor definitions given into the kernel. This is the default action. This gives an error message if a AppArmor definition by the same name already exists in the kernel, or if the parser doesn't understand its input. It reports when an addition succeeded. =item -r, --replace This flag is required if an AppArmor definition by the same name already exists in the kernel; used to replace the definition already in the kernel with the definition given on standard input. =item -R, --remove This flag is used to remove an AppArmor definition already in the kernel. Note that it still requires a complete AppArmor definition as described in apparmor.d(5) even though the contents of the definition aren't used. =back =head1 OPTIONS =over 4 =item -B, --binary Treat the profile files specified on the command line (or stdin if none specified) as binary cache files, produced with the -S or -o options, and load to the kernel as specified by -a, -r, and -R (implies -K and -T). =item -C, --Complain Force the profile to load in complain mode. =item -b n, --base n Set the base directory for resolving #include directives defined as relative paths. =item -I n, --Include n Add element n to the search path when resolving #include directives defined as an absolute paths. =item -f n, --subdomainfs n Set the location of the apparmor security filesystem (default is "/sys/kernel/security/apparmor"). =item -M n, --features-file n Use the features file located at path "n" (default is /etc/apparmor.d/cache/.features). If the --cache-loc option is present, the ".features" file in the specified cache directory is used. =item -m n, --match-string n Only use match features "n". =item -n n, --namespace-string n Force a profile to load in the namespace "n". =item -X, --readimpliesX In the case of profiles that are loading on systems were READ_IMPLIES_EXEC is set in the kernel for a given process, load the profile so that any "r" flags are processed as "mr". =item -k, --show-cache Report the cache processing (hit/miss details) when loading or saving cached profiles. =item -K, --skip-cache Perform no caching at all: disables -W, implies -T. =item -T, --skip-read-cache By default, if a profile's cache is found in the location specified by --cache-loc and the timestamp is newer than the profile, it will be loaded from the cache. This option disables this cache loading behavior. =item -W, --write-cache Write out cached profiles to the location specified in --cache-loc. Off by default. In cases where abstractions have been changed, and the parser is running with "--replace", it may make sense to also use "--skip-read-cache" with the "--write-cache" option. =item --skip-bad-cache Skip updating the cache if it contains cached profiles in a bad or inconsistent state =item -L, --cache-loc Set the location of the cache directory. If not specified the cache location defaults to /etc/apparmor.d/cache =item -Q, --skip-kernel-load Perform all actions except the actual loading of a profile into the kernel. This is useful for testing profile generation, caching, etc, without making changes to the running kernel profiles. This also removes the need for privilege to execute the commands that manage policy in the kernel =item -q, --quiet Do not report on the profiles as they are loaded, and not show warnings. =item -v, --verbose Report on the profiles as they are loaded, and show warnings. =item --warn=n Enable various warnings during policy compilation. A single dump flag can be specified per --warn option, but the --warn flag can be passed multiple times. apparmor_parser --warn=rules-not-enforced ... Use --help=warn to see a full list of which warn flags are supported. =item -d, --debug Given once, only checks the profiles to ensure syntactic correctness. Given twice, dumps its interpretation of the profile for checking. =item -D n, --dump=n Debug flag for dumping various structures and passes of policy compilation. A single dump flag can be specified per --dump option, but the dump flag can be passed multiple times. Note progress flags tend to also imply the matching stats flag. apparmor_parser --dump=dfa-stats --dump=trans-stats Use --help=dump to see a full list of which dump flags are supported =item -j n, --jobs=n Set the number of jobs used to compile the specified policy. Where n can be # - a specific number of jobs auto - the # of cpus in the in the system x# - # * number of cpus Eg. -j8 OR --jobs=8 allows for 8 parallel jobs -jauto OR --jobs=auto sets the jobs to the # of cpus -jx4 OR --jobs=x4 sets the jobs to # of cpus * 4 -jx1 is equivalent to -jauto The default value is the number of cpus in the system. =item --max-jobs n Set a hard cap on the value that can be specified by the --jobs flag. It takes the same set of options available to the --jobs option, and defaults to 8*cpus =item -O n, --optimize=n Set the optimization flags used by policy compilation. A single optimization flag can be toggled per -O option, but the optimize flag can be passed multiple times. Turning off some phases of the optimization can make it so that policy can't complete compilation due to size constraints (it is entirely possible to create a dfa with millions of states that will take days or longer to compile). Note: The parser is set to use a balanced default set of flags, that will result in reasonable compression but not take excessive amounts of time to complete. Use --help=optimize to see a full list of which optimization flags are supported. =item --abort-on-error Abort processing of profiles on the first error encountered, otherwise the parser will continue to try to compile other profiles if specified. Note: If an error is encountered while processing profiles the last error encountered will be used to set the exit code. =item --skip-bad-cache-rebuild The default behavior of the parser is to check if a cached version of a profile exists and if it does it attempt to load it into the kernel. If that load is rejected, then the parser will attempt to rebuild the cache file, and load again. This option tells the parser to not attempt to rebuild the cache on failure, instead the parser continues on with processing the remaining profiles. =back =head1 CONFIG FILE An optional config file /etc/apparmor/parser.conf can be used to specify the default options for the parser, which then can be overridden using the command line options. The config file ignores leading whitespace and treats lines that begin with # as comments. Config options are specified one per line using the same format as the longform command line options (without the preceding --). Eg. #comment optimize=no-expr-tree optimize=compress-fast As with the command line some options accumulate and others override, ie. when there are conflicting versions of switch the last option is the one chosen. Eg. Optimize=no-minimize Optimize=minimize would result in Optimize=minimize being set. The Include, Dump, and Optimize options accululate except for the inversion option (no-X vs. X), and a couple options that work by setting/clearing multiple options (compress-small). In that case the option will override the flags it sets but will may accumulate with others. All other options override previously set values. =head1 BUGS If you find any bugs, please report them at L. =head1 SEE ALSO apparmor(7), apparmor.d(5), subdomain.conf(5), aa_change_hat(2), and L. =cut apparmor-2.11.0/parser/apparmor_parser.8.html0000644000175000017500000003421013034613172016731 0ustar jjjj
 

NAME

apparmor_parser - loads AppArmor profiles into the kernel

SYNOPSIS

apparmor_parser [options] <command> [profiles]...

apparmor_parser [options] <command>

apparmor_parser [-hv] [--help] [--version]

DESCRIPTION

apparmor_parser is used as a general tool to compile, and manage AppArmor policy, including loading new apparmor.d(5) profiles into the Linux kernel.

AppArmor profiles restrict the operations available to processes.

The profiles are loaded into the Linux kernel by the apparmor_parser program. The profiles may be specified by file name or a directory name containing a set of profiles. If a directory is specified then the apparmor_parser will try to do a profile load for each file in the directory that is not a dot file, or explicitly black listed (*.dpkg-new, *.dpkg-old, *.dpkg-dist, *-dpkg-bak, *.repnew, *.rpmsave, *orig, *.rej, *~). The apparmor_parser will fall back to taking input from standard input if a profile or directory is not supplied.

The input supplied to apparmor_parser should be in the format described in apparmor.d(5).

COMMANDS

The command set is broken into four subcategories.

unprivileged commands

Commands that don't require any privilege and don't operate on profiles.

unprivileged profile commands

Commands that operate on a profile either specified on the command line or read from stdin if no profile was specified.

privileged commands

Commands that require the MAC_ADMIN capability within the affected AppArmor namespace to load policy into the kernel or filesystem write permissions to update the affected privileged files (cache etc).

privileged profile commands

Commands that require privilege and operate on profiles.

Unprivileged commands

-V, --version

Print the version number and exit.

-h, --help

Give a quick reference guide.

Unprivileged profile commands

-N, --names

Produce a list of policies from a given set of profiles (implies -K).

-p, --preprocess

Apply preprocessing to the input profile(s) by flattening includes into the output profile and dump to stdout.

-S, --stdout

Writes a binary (cached) profile to stdout (implies -K and -T).

-o file, --ofile file

Writes a binary (cached) profile to the specified file (implies -K and -T)

Privileged commands

--purge-cache

Unconditionally clear out cached profiles.

Privileged profile commands

-a, --add

Insert the AppArmor definitions given into the kernel. This is the default action. This gives an error message if a AppArmor definition by the same name already exists in the kernel, or if the parser doesn't understand its input. It reports when an addition succeeded.

-r, --replace

This flag is required if an AppArmor definition by the same name already exists in the kernel; used to replace the definition already in the kernel with the definition given on standard input.

-R, --remove

This flag is used to remove an AppArmor definition already in the kernel. Note that it still requires a complete AppArmor definition as described in apparmor.d(5) even though the contents of the definition aren't used.

OPTIONS

-B, --binary

Treat the profile files specified on the command line (or stdin if none specified) as binary cache files, produced with the -S or -o options, and load to the kernel as specified by -a, -r, and -R (implies -K and -T).

-C, --Complain

Force the profile to load in complain mode.

-b n, --base n

Set the base directory for resolving #include directives defined as relative paths.

-I n, --Include n

Add element n to the search path when resolving #include directives defined as an absolute paths.

-f n, --subdomainfs n

Set the location of the apparmor security filesystem (default is "/sys/kernel/security/apparmor").

-M n, --features-file n

Use the features file located at path "n" (default is /etc/apparmor.d/cache/.features). If the --cache-loc option is present, the ".features" file in the specified cache directory is used.

-m n, --match-string n

Only use match features "n".

-n n, --namespace-string n

Force a profile to load in the namespace "n".

-X, --readimpliesX

In the case of profiles that are loading on systems were READ_IMPLIES_EXEC is set in the kernel for a given process, load the profile so that any "r" flags are processed as "mr".

-k, --show-cache

Report the cache processing (hit/miss details) when loading or saving cached profiles.

-K, --skip-cache

Perform no caching at all: disables -W, implies -T.

-T, --skip-read-cache

By default, if a profile's cache is found in the location specified by --cache-loc and the timestamp is newer than the profile, it will be loaded from the cache. This option disables this cache loading behavior.

-W, --write-cache

Write out cached profiles to the location specified in --cache-loc. Off by default. In cases where abstractions have been changed, and the parser is running with "--replace", it may make sense to also use "--skip-read-cache" with the "--write-cache" option.

--skip-bad-cache

Skip updating the cache if it contains cached profiles in a bad or inconsistent state

-L, --cache-loc

Set the location of the cache directory. If not specified the cache location defaults to /etc/apparmor.d/cache

-Q, --skip-kernel-load

Perform all actions except the actual loading of a profile into the kernel. This is useful for testing profile generation, caching, etc, without making changes to the running kernel profiles.

This also removes the need for privilege to execute the commands that manage policy in the kernel

-q, --quiet

Do not report on the profiles as they are loaded, and not show warnings.

-v, --verbose

Report on the profiles as they are loaded, and show warnings.

--warn=n

Enable various warnings during policy compilation. A single dump flag can be specified per --warn option, but the --warn flag can be passed multiple times.

  apparmor_parser --warn=rules-not-enforced ...

Use --help=warn to see a full list of which warn flags are supported.

-d, --debug

Given once, only checks the profiles to ensure syntactic correctness. Given twice, dumps its interpretation of the profile for checking.

-D n, --dump=n

Debug flag for dumping various structures and passes of policy compilation. A single dump flag can be specified per --dump option, but the dump flag can be passed multiple times. Note progress flags tend to also imply the matching stats flag.

  apparmor_parser --dump=dfa-stats --dump=trans-stats <file>

Use --help=dump to see a full list of which dump flags are supported

-j n, --jobs=n

Set the number of jobs used to compile the specified policy. Where n can be

  #    - a specific number of jobs
  auto - the # of cpus in the in the system
  x#   - # * number of cpus

Eg. -j8 OR --jobs=8 allows for 8 parallel jobs -jauto OR --jobs=auto sets the jobs to the # of cpus -jx4 OR --jobs=x4 sets the jobs to # of cpus * 4 -jx1 is equivalent to -jauto

The default value is the number of cpus in the system.

--max-jobs n

Set a hard cap on the value that can be specified by the --jobs flag. It takes the same set of options available to the --jobs option, and defaults to 8*cpus

-O n, --optimize=n

Set the optimization flags used by policy compilation. A single optimization flag can be toggled per -O option, but the optimize flag can be passed multiple times. Turning off some phases of the optimization can make it so that policy can't complete compilation due to size constraints (it is entirely possible to create a dfa with millions of states that will take days or longer to compile).

Note: The parser is set to use a balanced default set of flags, that will result in reasonable compression but not take excessive amounts of time to complete.

Use --help=optimize to see a full list of which optimization flags are supported.

--abort-on-error Abort processing of profiles on the first error encountered, otherwise the parser will continue to try to compile other profiles if specified.

Note: If an error is encountered while processing profiles the last error encountered will be used to set the exit code.

--skip-bad-cache-rebuild The default behavior of the parser is to check if a cached version of a profile exists and if it does it attempt to load it into the kernel. If that load is rejected, then the parser will attempt to rebuild the cache file, and load again.

This option tells the parser to not attempt to rebuild the cache on failure, instead the parser continues on with processing the remaining profiles.

CONFIG FILE

An optional config file /etc/apparmor/parser.conf can be used to specify the default options for the parser, which then can be overridden using the command line options.

The config file ignores leading whitespace and treats lines that begin with # as comments. Config options are specified one per line using the same format as the longform command line options (without the preceding --).

Eg. #comment

    optimize=no-expr-tree
    optimize=compress-fast

As with the command line some options accumulate and others override, ie. when there are conflicting versions of switch the last option is the one chosen.

Eg. Optimize=no-minimize Optimize=minimize

would result in Optimize=minimize being set.

The Include, Dump, and Optimize options accululate except for the inversion option (no-X vs. X), and a couple options that work by setting/clearing multiple options (compress-small). In that case the option will override the flags it sets but will may accumulate with others.

All other options override previously set values.

BUGS

If you find any bugs, please report them at https://bugs.launchpad.net/apparmor/+filebug.

SEE ALSO

apparmor(7), apparmor.d(5), subdomain.conf(5), aa_change_hat(2), and http://wiki.apparmor.net.

 
apparmor-2.11.0/parser/af_rule.h0000644000175000017500000000376312413327176014305 0ustar jjjj/* * Copyright (c) 2014 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_AF_RULE_H #define __AA_AF_RULE_H #include "immunix.h" #include "network.h" #include "parser.h" #include "profile.h" #include "rule.h" enum cond_side { local_cond, peer_cond, either_cond }; struct supported_cond { const char *name; bool supported; bool in; bool multivalue; enum cond_side side ; }; class af_rule: public rule_t { public: std::string af_name; char *sock_type; int sock_type_n; char *proto; int proto_n; char *label; char *peer_label; int mode; int audit; bool deny; af_rule(const char *name): af_name(name), sock_type(NULL), sock_type_n(-1), proto(NULL), proto_n(0), label(NULL), peer_label(NULL), mode(0), audit(0), deny(0) {} virtual ~af_rule() { free(sock_type); free(proto); free(label); free(peer_label); }; bool cond_check(struct supported_cond *cond, struct cond_entry *ent, bool peer, const char *rname); int move_base_cond(struct cond_entry *conds, bool peer); virtual bool has_peer_conds(void) { return peer_label ? true : false; } virtual ostream &dump_prefix(ostream &os); virtual ostream &dump_local(ostream &os); virtual ostream &dump_peer(ostream &os); virtual ostream &dump(ostream &os); virtual int expand_variables(void); virtual int gen_policy_re(Profile &prof) = 0; virtual void post_process(Profile &prof unused) { }; }; #endif /* __AA_AF_RULE_H */ apparmor-2.11.0/parser/parser_include.h0000644000175000017500000000233412232666001015650 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * Copyright (c) 2010 - 2012 * Canonical Ltd. * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Canonical, Ltd. */ #ifndef PARSER_INCLUDE_H #define PARSER_INCLUDE_H extern int preprocess_only; extern int add_search_dir(const char *dir); extern void init_base_dir(void); extern void set_base_dir(char *dir); extern void parse_default_paths(void); extern int do_include_preprocessing(char *profilename); FILE *search_path(char *filename, char **fullpath); extern void push_include_stack(char *filename); extern void pop_include_stack(void); extern void reset_include_stack(const char *filename); #endif apparmor-2.11.0/parser/subdomain.conf0000644000175000017500000000365211513672602015341 0ustar jjjj# subdomain.conf is a shared AppArmor configuration file that is sh sourcable. ################## AppArmor init.d configuration ################ # Move this to /etc/sysconfig/apparmor eventually ## Path: System/AppArmor ## Description: Enable the OWLSM extension to AppArmor ## Type: yesno ## Default: no # # Enable OWLSM extension to AppArmor? # OWLSM is an extension to AppArmor that prevents processes from # following symlinks they don't own and creating hardlinks to files they # don't own, in an attempt to prevent /tmp race attacks. However, OWLSM # can break some applications, so is disabled by default. SUBDOMAIN_ENABLE_OWLSM="no" ## Path: System/AppArmor ## Description: Enable the AppArmor event daemon for reporting ## Type: yesno ## Default: no # # Enable the AppArmor event daemon for reporting? APPARMOR_ENABLE_AAEVENTD="no" #SUBDOMAIN_MODULE_PANIC=XXX #This option controls how subdomain behaves when the init script attempts #to load the AppArmor module and fails. There are 4 options #warn - log a failure message. (default behavior) #build - attempt to build the AppArmor module is the module can't be loaded. # If successful # the module will be built for the running kernel and loaded. # If the build fails # a failure message is logged #panic - If the AppArmor module fails to load # a failure message will be logged # and the machine will drop to runlevel 1 (single user) #build-panic - If the AppArmor module fails to load # attempt to build the module # If building the module fails # panic (drop to runlevel 1) #SUBDOMAIN_MODULE_PANIC=warn ################## subdomain_parser configuration ################ #SUBDOMAIN_PATH=XXXX #This option specifies the include path that the subdomain_parser will #use by default. If no entry is specified /etc/subdomain.d is used by #default. #SUBDOMAIN_PATH=/etc/subdomain.d apparmor-2.11.0/parser/Makefile0000644000175000017500000003112713023044233014136 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 1999, 2000, 2001, 2002, 2004, 2005, 2006, 2007 # NOVELL (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- NAME=apparmor-parser all: COMMONDIR=../common/ include $(COMMONDIR)/Make.rules DESTDIR=/ APPARMOR_BIN_PREFIX=${DESTDIR}/lib/apparmor CONFDIR=/etc/apparmor INSTALL_CONFDIR=${DESTDIR}${CONFDIR} LOCALEDIR=/usr/share/locale MANPAGES=apparmor.d.5 apparmor.7 apparmor_parser.8 subdomain.conf.5 YACC := /usr/bin/bison YFLAGS := -d LEX := /usr/bin/flex LEXFLAGS = -B -v WARNINGS = -Wall EXTRA_WARNINGS = -Wsign-compare -Wmissing-field-initializers -Wformat-security -Wunused-parameter CXX_WARNINGS = ${WARNINGS} $(shell for warning in ${EXTRA_WARNINGS} ; do \ if ${CXX} $${warning} -S -o /dev/null -xc /dev/null >/dev/null 2>&1; then \ echo "$${warning}"; \ fi ; \ done) CPP_WARNINGS = ifndef CFLAGS CFLAGS = -g -O2 -pipe ifdef DEBUG CFLAGS += -pg -D DEBUG endif ifdef COVERAGE CFLAGS = -g -pg -fprofile-arcs -ftest-coverage endif endif #CFLAGS EXTRA_CXXFLAGS = ${CFLAGS} ${CPPFLAGS} ${CXX_WARNINGS} -std=gnu++0x -D_GNU_SOURCE EXTRA_CFLAGS = ${EXTRA_CXXFLAGS} ${CPP_WARNINGS} #LEXLIB := -lfl # override this on the make command to point to where the immunix.h file is # (yeah this is lame, but since we are tied to the kernel so tightly...) #INCLUDEDIR = /usr/src/linux/include INCLUDEDIR = ifdef INCLUDEDIR CFLAGS += -I$(INCLUDEDIR) endif # Internationalization support. Define a package and a LOCALEDIR EXTRA_CFLAGS+=-DPACKAGE=\"${NAME}\" -DLOCALEDIR=\"${LOCALEDIR}\" # Compile-time configuration of the location of the config file EXTRA_CFLAGS+=-DSUBDOMAIN_CONFDIR=\"${CONFDIR}\" SRCS = parser_common.c parser_include.c parser_interface.c parser_lex.c \ parser_main.c parser_misc.c parser_merge.c parser_symtab.c \ parser_yacc.c parser_regex.c parser_variable.c parser_policy.c \ parser_alias.c common_optarg.c lib.c network.c \ mount.cc dbus.cc profile.cc rule.cc signal.cc ptrace.cc \ af_rule.cc af_unix.cc policy_cache.c HDRS = parser.h parser_include.h immunix.h mount.h dbus.h lib.h profile.h \ rule.h common_optarg.h signal.h ptrace.h network.h af_rule.h af_unix.h \ policy_cache.h TOOLS = apparmor_parser OBJECTS = $(patsubst %.cc, %.o, $(SRCS:.c=.o)) AAREDIR= libapparmor_re AAREOBJECT = ${AAREDIR}/libapparmor_re.a AAREOBJECTS = $(AAREOBJECT) AARE_LDFLAGS = -static-libgcc -static-libstdc++ -L. AALIB = -Wl,-Bstatic -lapparmor -Wl,-Bdynamic -lpthread ifdef USE_SYSTEM # Using the system libapparmor so Makefile dependencies can't be used LIBAPPARMOR_A = INCLUDE_APPARMOR = APPARMOR_H = else LIBAPPARMOR_SRC = ../libraries/libapparmor LOCAL_LIBAPPARMOR_INCLUDE = $(LIBAPPARMOR_SRC)/include LOCAL_LIBAPPARMOR_LDPATH = $(LIBAPPARMOR_SRC)/src/.libs LIBAPPARMOR_A = $(LOCAL_LIBAPPARMOR_LDPATH)/libapparmor.a INCLUDE_APPARMOR = -I$(LOCAL_LIBAPPARMOR_INCLUDE) AARE_LDFLAGS += -L$(LOCAL_LIBAPPARMOR_LDPATH) APPARMOR_H = $(LOCAL_LIBAPPARMOR_INCLUDE)/sys/apparmor.h endif EXTRA_CFLAGS += $(INCLUDE_APPARMOR) LEX_C_FILES = parser_lex.c YACC_C_FILES = parser_yacc.c parser_yacc.h TESTS = tst_regex tst_misc tst_symtab tst_variable tst_lib TEST_CFLAGS = $(EXTRA_CFLAGS) -DUNIT_TEST -Wno-unused-result TEST_OBJECTS = $(filter-out \ parser_lex.o \ parser_yacc.o \ common_optarg.o \ parser_main.o \ policy_cache.o, ${OBJECTS}) \ $(AAREOBJECTS) TEST_LDFLAGS = $(AARE_LDFLAGS) TEST_LDLIBS = $(AALIB) ifdef V VERBOSE = 1 endif ifndef VERBOSE VERBOSE = 0 endif ifeq ($(VERBOSE),1) BUILD_OUTPUT = Q = else BUILD_OUTPUT = > /dev/null 2>&1 Q = @ endif export Q VERBOSE BUILD_OUTPUT po/${NAME}.pot: ${SRCS} ${HDRS} $(MAKE) -C po ${NAME}.pot NAME=${NAME} SOURCES="${SRCS} ${HDRS}" techdoc.pdf: techdoc.tex timestamp=$(shell date --utc "+%Y%m%d%H%M%S%z" -r $< );\ while pdflatex "\def\fixedpdfdate{$$timestamp}\input $<" ${BUILD_OUTPUT} || exit 1 ; \ grep -q "Label(s) may have changed" techdoc.log; \ do :; done techdoc/index.html: techdoc.pdf latex2html -show_section_numbers -split 0 -noinfo -nonavigation -noaddress techdoc.tex ${BUILD_OUTPUT} techdoc.txt: techdoc/index.html w3m -dump $< > $@ # targets arranged this way so that people who don't want full docs can # pick specific targets they want. arch: $(TOOLS) manpages: $(MANPAGES) htmlmanpages: $(HTMLMANPAGES) pdf: techdoc.pdf docs: manpages htmlmanpages extra_docs: pdf indep: docs $(Q)$(MAKE) -C po all all: arch indep .PHONY: coverage coverage: $(MAKE) clean apparmor_parser COVERAGE=1 ifndef USE_SYSTEM $(LIBAPPARMOR_A): @if [ ! -f $@ ]; then \ echo "error: $@ is missing. Pick one of these possible solutions:" 1>&2; \ echo " 1) Build against the in-tree libapparmor by building it first and then trying again. See the top-level README for help." 1>&2; \ echo " 2) Build against the system libapparmor by adding USE_SYSTEM=1 to your make command." 1>&2;\ return 1; \ fi endif apparmor_parser: $(OBJECTS) $(AAREOBJECTS) $(LIBAPPARMOR_A) $(CXX) $(LDFLAGS) $(EXTRA_CFLAGS) -o $@ $(OBJECTS) $(LIBS) \ ${LEXLIB} $(AAREOBJECTS) $(AARE_LDFLAGS) $(AALIB) parser_yacc.c parser_yacc.h: parser_yacc.y parser.h profile.h $(YACC) $(YFLAGS) -o parser_yacc.c parser_yacc.y parser_lex.c: parser_lex.l parser_yacc.h parser.h profile.h mount.h dbus.h policy_cache.h $(LEX) ${LEXFLAGS} -o$@ $< parser_lex.o: parser_lex.c parser.h parser_yacc.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_misc.o: parser_misc.c parser.h parser_yacc.h profile.h cap_names.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_yacc.o: parser_yacc.c parser_yacc.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_main.o: parser_main.c parser.h parser_version.h policy_cache.h libapparmor_re/apparmor_re.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_interface.o: parser_interface.c parser.h profile.h libapparmor_re/apparmor_re.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_include.o: parser_include.c parser.h parser_include.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_merge.o: parser_merge.c parser.h profile.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_regex.o: parser_regex.c parser.h profile.h libapparmor_re/apparmor_re.h libapparmor_re/aare_rules.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_symtab.o: parser_symtab.c parser.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_variable.o: parser_variable.c parser.h profile.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_policy.o: parser_policy.c parser.h parser_yacc.h profile.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_alias.o: parser_alias.c parser.h profile.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_common.o: parser_common.c parser.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< mount.o: mount.cc mount.h parser.h immunix.h rule.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< common_optarg.o: common_optarg.c common_optarg.h parser.h libapparmor_re/apparmor_re.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< policy_cache.o: policy_cache.c policy_cache.h parser.h lib.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< lib.o: lib.c lib.h parser.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< dbus.o: dbus.cc dbus.h parser.h immunix.h parser_yacc.h rule.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< signal.o: signal.cc signal.h parser.h immunix.h parser_yacc.h rule.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< ptrace.o: ptrace.cc ptrace.h parser.h immunix.h parser_yacc.h rule.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< network.o: network.c network.h parser.h immunix.h parser_yacc.h rule.h af_names.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< af_rule.o: af_rule.cc af_rule.h network.h parser.h profile.h immunix.h parser_yacc.h rule.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< af_unix.o: af_unix.cc af_unix.h network.h af_rule.h parser.h profile.h immunix.h parser_yacc.h $(APPARMOR_H) $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< profile.o: profile.cc profile.h parser.h network.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< rule.o: rule.cc rule.h policydb.h $(CXX) $(EXTRA_CFLAGS) -c -o $@ $< parser_version.h: Makefile @echo \#define PARSER_VERSION \"$(VERSION)\" > .ver @mv -f .ver $@ # af_names and capabilities generation has moved to common/Make.rules, # as well as the filtering that occurs for network protocols that # apparmor should not mediate. .PHONY: af_names.h af_names.h: echo "$(AF_NAMES)" | LC_ALL=C sed -n -e 's/[ \t]\?AF_MAX[ \t]\+[0-9]\+,//g' -e 's/[ \t]\+\?AF_\([A-Z0-9_]\+\)[ \t]\+\([0-9]\+\),/#ifndef AF_\1\n# define AF_\1 \2\n#endif\nAA_GEN_NET_ENT("\L\1", \UAF_\1)\n\n/pg' > $@ echo "$(AF_NAMES)" | LC_ALL=C sed -n -e 's/.*,[ \t]\+AF_MAX[ \t]\+\([0-9]\+\),\?.*/#define AA_AF_MAX \1\n/p' >> $@ # cat $@ cap_names.h: /usr/include/linux/capability.h echo "$(CAPABILITIES)" | LC_ALL=C sed -n -e "s/[ \\t]\\?CAP_\\([A-Z0-9_]\\+\\)/\{\"\\L\\1\", \\UCAP_\\1\},\\n/pg" > $@ tst_lib: lib.c parser.h $(filter-out lib.o, ${TEST_OBJECTS}) $(CXX) $(TEST_CFLAGS) -o $@ $< $(filter-out $(<:.c=.o), ${TEST_OBJECTS}) $(TEST_LDFLAGS) $(TEST_LDLIBS) tst_%: parser_%.c parser.h $(filter-out parser_%.o, ${TEST_OBJECTS}) $(CXX) $(TEST_CFLAGS) -o $@ $< $(filter-out $(<:.c=.o), ${TEST_OBJECTS}) $(TEST_LDFLAGS) $(TEST_LDLIBS) .SILENT: check .PHONY: check check: check_pod_files tests .SILENT: tests tests: apparmor_parser ${TESTS} sh -e -c 'for test in ${TESTS} ; do echo "*** running $${test}" && ./$${test}; done' $(Q)$(MAKE) -s -C tst tests # always need to rebuild. .SILENT: $(AAREOBJECT) .PHONY: $(AAREOBJECT) $(AAREOBJECT): $(MAKE) -C $(AAREDIR) CFLAGS="$(EXTRA_CXXFLAGS)" .PHONY: install-rhel4 install-rhel4: install-redhat .PHONY: install-redhat install-redhat: install -m 755 -d $(DESTDIR)/etc/init.d install -m 755 rc.apparmor.$(subst install-,,$@) $(DESTDIR)/etc/init.d/apparmor .PHONY: install-suse install-suse: install -m 755 -d $(DESTDIR)/etc/init.d install -m 755 rc.apparmor.$(subst install-,,$(@)) $(DESTDIR)/etc/init.d/boot.apparmor install -m 755 -d $(DESTDIR)/sbin ln -sf /etc/init.d/boot.apparmor $(DESTDIR)/sbin/rcapparmor ln -sf rcapparmor $(DESTDIR)/sbin/rcsubdomain .PHONY: install-slackware install-slackware: install -m 755 -d $(APPARMOR_BIN_PREFIX)/install install -m 755 frob_slack_rc $(APPARMOR_BIN_PREFIX)/install install -m 755 -d $(DESTDIR)/etc/rc.d install -m 755 rc.apparmor.$(subst install-,,$(@)) $(DESTDIR)/etc/rc.d/rc.apparmor .PHONY: install-debian install-debian: .PHONY: install-unknown install-unknown: INSTALLDEPS=arch ifndef DISTRO DISTRO=$(shell if [ -f /etc/slackware-version ] ; then \ echo slackware ; \ elif [ -f /etc/debian_version ] ; then \ echo debian ;\ elif which rpm > /dev/null ; then \ if [ "$(rpm --eval '0%{?suse_version}')" != "0" ] ; then \ echo suse ;\ elif [ "$(rpm --eval '%{_host_vendor}')" = redhat ] ; then \ echo rhel4 ;\ elif [ "$(rpm --eval '0%{?fedora}')" != "0" ] ; then \ echo rhel4 ;\ else \ echo unknown ;\ fi ;\ else \ echo unknown ;\ fi) endif ifdef DISTRO INSTALLDEPS+=install-$(DISTRO) endif .PHONY: install install: install-indep install-arch .PHONY: install-arch install-arch: $(INSTALLDEPS) install -m 755 -d $(DESTDIR)/sbin install -m 755 ${TOOLS} $(DESTDIR)/sbin .PHONY: install-indep install-indep: indep install -m 755 -d $(INSTALL_CONFDIR) install -m 644 subdomain.conf $(INSTALL_CONFDIR) install -m 644 parser.conf $(INSTALL_CONFDIR) install -m 755 -d ${DESTDIR}/var/lib/apparmor install -m 755 -d $(APPARMOR_BIN_PREFIX) install -m 755 rc.apparmor.functions $(APPARMOR_BIN_PREFIX) $(MAKE) -C po install NAME=${NAME} DESTDIR=${DESTDIR} $(MAKE) install_manpages DESTDIR=${DESTDIR} ifndef VERBOSE .SILENT: clean endif .PHONY: clean clean: pod_clean rm -f core core.* *.o *.s *.a *~ *.gcda *.gcno rm -f gmon.out rm -f $(TOOLS) $(TESTS) rm -f $(LEX_C_FILES) rm -f $(YACC_C_FILES) rm -f parser_version.h rm -f $(NAME)*.tar.gz $(NAME)*.tgz rm -f af_names.h rm -f cap_names.h rm -rf techdoc.aux techdoc.out techdoc.log techdoc.pdf techdoc.toc techdoc.txt techdoc/ $(MAKE) -s -C $(AAREDIR) clean $(MAKE) -s -C po clean $(MAKE) -s -C tst clean apparmor-2.11.0/parser/dbus.cc0000644000175000017500000002032212520634225013744 0ustar jjjj/* * Copyright (c) 2013 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #include #include #include #include #include #include #include #include "parser.h" #include "profile.h" #include "parser_yacc.h" #include "dbus.h" int parse_dbus_mode(const char *str_mode, int *mode, int fail) { return parse_X_mode("DBus", AA_VALID_DBUS_PERMS, str_mode, mode, fail); } void dbus_rule::move_conditionals(struct cond_entry *conds) { struct cond_entry *cond_ent; list_for_each(conds, cond_ent) { /* for now disallow keyword 'in' (list) */ if (!cond_ent->eq) yyerror("keyword \"in\" is not allowed in dbus rules\n"); if (list_len(cond_ent->vals) > 1) yyerror("dbus conditional \"%s\" only supports a single value\n", cond_ent->name); if (strcmp(cond_ent->name, "bus") == 0) { move_conditional_value("dbus", &bus, cond_ent); } else if (strcmp(cond_ent->name, "name") == 0) { move_conditional_value("dbus", &name, cond_ent); } else if (strcmp(cond_ent->name, "label") == 0) { move_conditional_value("dbus", &peer_label, cond_ent); } else if (strcmp(cond_ent->name, "path") == 0) { move_conditional_value("dbus", &path, cond_ent); } else if (strcmp(cond_ent->name, "interface") == 0) { move_conditional_value("dbus", &interface, cond_ent); } else if (strcmp(cond_ent->name, "member") == 0) { move_conditional_value("dbus", &member, cond_ent); } else { yyerror("invalid dbus conditional \"%s\"\n", cond_ent->name); } } } dbus_rule::dbus_rule(int mode_p, struct cond_entry *conds, struct cond_entry *peer_conds): bus(NULL), name(NULL), peer_label(NULL), path(NULL), interface(NULL), member(NULL), mode(0), audit(0), deny(0) { int name_is_subject_cond = 0, message_rule = 0, service_rule = 0; /* Move the global/subject conditionals over & check the results */ move_conditionals(conds); if (name) name_is_subject_cond = 1; if (peer_label) yyerror("dbus \"label\" conditional can only be used inside of the \"peer=()\" grouping\n"); /* Move the peer conditionals */ move_conditionals(peer_conds); if (path || interface || member || peer_label || (name && !name_is_subject_cond)) message_rule = 1; if (name && name_is_subject_cond) service_rule = 1; if (message_rule && service_rule) yyerror("dbus rule contains message conditionals and service conditionals\n"); /* Copy mode. If no mode was specified, assign an implied mode. */ if (mode_p) { mode = mode_p; if (mode & ~AA_VALID_DBUS_PERMS) yyerror("mode contains unknown dbus access\n"); else if (message_rule && (mode & AA_DBUS_BIND)) yyerror("dbus \"bind\" access cannot be used with message rule conditionals\n"); else if (service_rule && (mode & (AA_DBUS_SEND | AA_DBUS_RECEIVE))) yyerror("dbus \"send\" and/or \"receive\" accesses cannot be used with service rule conditionals\n"); else if (mode & AA_DBUS_EAVESDROP && (path || interface || member || peer_label || name)) { yyerror("dbus \"eavesdrop\" access can only contain a bus conditional\n"); } } else { if (message_rule) mode = (AA_DBUS_SEND | AA_DBUS_RECEIVE); else if (service_rule) mode = (AA_DBUS_BIND); else mode = AA_VALID_DBUS_PERMS; } free_cond_list(conds); free_cond_list(peer_conds); } ostream &dbus_rule::dump(ostream &os) { if (audit) os << "audit "; if (deny) os << "deny "; os << "dbus ( "; if (mode & AA_DBUS_SEND) os << "send "; if (mode & AA_DBUS_RECEIVE) os << "receive "; if (mode & AA_DBUS_BIND) os << "bind "; if (mode & AA_DBUS_EAVESDROP) os << "eavesdrop "; os << ")"; if (bus) os << " bus=\"" << bus << "\""; if ((mode & AA_DBUS_BIND) && name) os << " name=\"" << name << "\""; if (path) os << " path=\"" << path << "\""; if (interface) os << " interface=\"" << interface << "\""; if (member) os << " member=\"" << member << "\""; if (!(mode & AA_DBUS_BIND) && (peer_label || name)) { os << " peer=( "; if (peer_label) os << "label=\"" << peer_label << "\" "; if (name) os << "name=\"" << name << "\" "; os << ")"; } os << ",\n"; return os; } int dbus_rule::expand_variables(void) { int error = expand_entry_variables(&bus); if (error) return error; error = expand_entry_variables(&name); if (error) return error; error = expand_entry_variables(&peer_label); if (error) return error; error = expand_entry_variables(&path); if (error) return error; error = expand_entry_variables(&interface); if (error) return error; error = expand_entry_variables(&member); if (error) return error; return 0; } /* do we want to warn once/profile or just once per compile?? */ static void warn_once(const char *name) { static const char *warned_name = NULL; if ((warnflags & WARN_RULE_NOT_ENFORCED) && warned_name != name) { cerr << "Warning from profile " << name << " ("; if (current_filename) cerr << current_filename; else cerr << "stdin"; cerr << ") dbus rules not enforced\n"; warned_name = name; } } int dbus_rule::gen_policy_re(Profile &prof) { std::string busbuf; std::string namebuf; std::string peer_labelbuf; std::string pathbuf; std::string ifacebuf; std::string memberbuf; std::ostringstream buffer; const char *vec[6]; pattern_t ptype; int pos; if (!kernel_supports_dbus) { warn_once(prof.name); return RULE_NOT_SUPPORTED; } buffer << "\\x" << std::setfill('0') << std::setw(2) << std::hex << AA_CLASS_DBUS; busbuf.append(buffer.str()); if (bus) { ptype = convert_aaregex_to_pcre(bus, 0, glob_default, busbuf, &pos); if (ptype == ePatternInvalid) goto fail; } else { /* match any char except \000 0 or more times */ busbuf.append(default_match_pattern); } vec[0] = busbuf.c_str(); if (name) { ptype = convert_aaregex_to_pcre(name, 0, glob_default, namebuf, &pos); if (ptype == ePatternInvalid) goto fail; vec[1] = namebuf.c_str(); } else { /* match any char except \000 0 or more times */ vec[1] = default_match_pattern; } if (peer_label) { ptype = convert_aaregex_to_pcre(peer_label, 0, glob_default, peer_labelbuf, &pos); if (ptype == ePatternInvalid) goto fail; vec[2] = peer_labelbuf.c_str(); } else { /* match any char except \000 0 or more times */ vec[2] = default_match_pattern; } if (path) { ptype = convert_aaregex_to_pcre(path, 0, glob_default, pathbuf, &pos); if (ptype == ePatternInvalid) goto fail; vec[3] = pathbuf.c_str(); } else { /* match any char except \000 0 or more times */ vec[3] = default_match_pattern; } if (interface) { ptype = convert_aaregex_to_pcre(interface, 0, glob_default, ifacebuf, &pos); if (ptype == ePatternInvalid) goto fail; vec[4] = ifacebuf.c_str(); } else { /* match any char except \000 0 or more times */ vec[4] = default_match_pattern; } if (member) { ptype = convert_aaregex_to_pcre(member, 0, glob_default, memberbuf, &pos); if (ptype == ePatternInvalid) goto fail; vec[5] = memberbuf.c_str(); } else { /* match any char except \000 0 or more times */ vec[5] = default_match_pattern; } if (mode & AA_DBUS_BIND) { if (!prof.policy.rules->add_rule_vec(deny, mode & AA_DBUS_BIND, audit & AA_DBUS_BIND, 2, vec, dfaflags)) goto fail; } if (mode & (AA_DBUS_SEND | AA_DBUS_RECEIVE)) { if (!prof.policy.rules->add_rule_vec(deny, mode & (AA_DBUS_SEND | AA_DBUS_RECEIVE), audit & (AA_DBUS_SEND | AA_DBUS_RECEIVE), 6, vec, dfaflags)) goto fail; } if (mode & AA_DBUS_EAVESDROP) { if (!prof.policy.rules->add_rule_vec(deny, mode & AA_DBUS_EAVESDROP, audit & AA_DBUS_EAVESDROP, 1, vec, dfaflags)) goto fail; } return RULE_OK; fail: return RULE_ERROR; } apparmor-2.11.0/parser/parser_misc.c0000644000175000017500000007463212673211535015174 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * Copyright (c) 2013 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. */ /* assistance routines */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include "lib.h" #include "parser.h" #include "profile.h" #include "parser_yacc.h" #include "mount.h" #include "dbus.h" /* #define DEBUG */ #ifdef DEBUG #undef PDEBUG #define PDEBUG(fmt, args...) fprintf(stderr, "Lexer: " fmt, ## args) #else #undef PDEBUG #define PDEBUG(fmt, args...) /* Do nothing */ #endif #define NPDEBUG(fmt, args...) /* Do nothing */ int is_blacklisted(const char *name, const char *path) { int retval = _aa_is_blacklisted(name); if (retval == -1) PERROR("Ignoring: '%s'\n", path ? path : name); return !retval ? 0 : 1; } struct keyword_table { const char *keyword; int token; }; static struct keyword_table keyword_table[] = { /* network */ {"network", TOK_NETWORK}, {"unix", TOK_UNIX}, /* misc keywords */ {"capability", TOK_CAPABILITY}, {"if", TOK_IF}, {"else", TOK_ELSE}, {"not", TOK_NOT}, {"defined", TOK_DEFINED}, {"change_profile", TOK_CHANGE_PROFILE}, {"unsafe", TOK_UNSAFE}, {"safe", TOK_SAFE}, {"link", TOK_LINK}, {"owner", TOK_OWNER}, {"user", TOK_OWNER}, {"other", TOK_OTHER}, {"subset", TOK_SUBSET}, {"audit", TOK_AUDIT}, {"deny", TOK_DENY}, {"allow", TOK_ALLOW}, {"set", TOK_SET}, {"rlimit", TOK_RLIMIT}, {"alias", TOK_ALIAS}, {"rewrite", TOK_ALIAS}, {"ptrace", TOK_PTRACE}, {"file", TOK_FILE}, {"mount", TOK_MOUNT}, {"remount", TOK_REMOUNT}, {"umount", TOK_UMOUNT}, {"unmount", TOK_UMOUNT}, {"pivot_root", TOK_PIVOTROOT}, {"in", TOK_IN}, {"dbus", TOK_DBUS}, {"signal", TOK_SIGNAL}, {"send", TOK_SEND}, {"receive", TOK_RECEIVE}, {"bind", TOK_BIND}, {"read", TOK_READ}, {"write", TOK_WRITE}, {"eavesdrop", TOK_EAVESDROP}, {"peer", TOK_PEER}, {"trace", TOK_TRACE}, {"tracedby", TOK_TRACEDBY}, {"readby", TOK_READBY}, /* terminate */ {NULL, 0} }; static struct keyword_table rlimit_table[] = { {"cpu", RLIMIT_CPU}, {"fsize", RLIMIT_FSIZE}, {"data", RLIMIT_DATA}, {"stack", RLIMIT_STACK}, {"core", RLIMIT_CORE}, {"rss", RLIMIT_RSS}, {"nofile", RLIMIT_NOFILE}, {"ofile", RLIMIT_OFILE}, {"as", RLIMIT_AS}, {"nproc", RLIMIT_NPROC}, {"memlock", RLIMIT_MEMLOCK}, {"locks", RLIMIT_LOCKS}, {"sigpending", RLIMIT_SIGPENDING}, {"msgqueue", RLIMIT_MSGQUEUE}, #ifdef RLIMIT_NICE {"nice", RLIMIT_NICE}, #endif #ifdef RLIMIT_RTPRIO {"rtprio", RLIMIT_RTPRIO}, #endif #ifdef RLIMIT_RTTIME {"rttime", RLIMIT_RTTIME}, #endif /* terminate */ {NULL, 0} }; /* for alpha matches, check for keywords */ static int get_table_token(const char *name unused, struct keyword_table *table, const char *keyword) { int i; for (i = 0; table[i].keyword; i++) { PDEBUG("Checking %s %s\n", name, table[i].keyword); if (strcmp(keyword, table[i].keyword) == 0) { PDEBUG("Found %s %s\n", name, table[i].keyword); return table[i].token; } } PDEBUG("Unable to find %s %s\n", name, keyword); return -1; } static struct keyword_table capability_table[] = { /* capabilities */ #include "cap_names.h" #ifndef CAP_SYSLOG {"syslog", 34}, #endif /* terminate */ {NULL, 0} }; /* for alpha matches, check for keywords */ int get_keyword_token(const char *keyword) { return get_table_token("keyword", keyword_table, keyword); } int name_to_capability(const char *keyword) { return get_table_token("capability", capability_table, keyword); } int get_rlimit(const char *name) { return get_table_token("rlimit", rlimit_table, name); } char *processunquoted(const char *string, int len) { char *buffer, *s; s = buffer = (char *) malloc(len + 1); if (!buffer) return NULL; while (len > 0) { const char *pos = string + 1; long c; if (*string == '\\' && len > 1 && (c = strn_escseq(&pos, "", len)) != -1) { /* catch \\ or \134 and other aare special chars and * pass it through to be handled by the backend * pcre conversion */ if (c == 0) { strncpy(s, string, pos - string); s += pos - string; } else if (strchr("*?[]{}^,\\", c) != NULL) { *s++ = '\\'; *s++ = c; } else *s++ = c; len -= pos - string; string = pos; } else { /* either unescaped char OR * unsupported escape sequence resulting in char being * copied. */ *s++ = *string++; len--; } } *s = 0; return buffer; } /* rewrite a quoted string substituting escaped characters for the * real thing. Strip the quotes around the string */ char *processquoted(const char *string, int len) { /* skip leading " and eat trailing " */ if (*string == '"') { len -= 2; if (len < 0) /* start and end point to same quote */ len = 0; return processunquoted(string + 1, len); } /* no quotes? treat as unquoted */ return processunquoted(string, len); } char *processid(const char *string, int len) { /* lexer should never call this fn if len <= 0 */ assert(len > 0); if (*string == '"') return processquoted(string, len); return processunquoted(string, len); } /* strip off surrounding delimiters around variables */ char *process_var(const char *var) { const char *orig = var; int len = strlen(var); if (*orig == '@' || *orig == '$') { orig++; len--; } else { PERROR("ASSERT: Found var '%s' without variable prefix\n", var); return NULL; } if (*orig == '{') { orig++; len--; if (orig[len - 1] != '}') { PERROR("ASSERT: No matching '}' in variable '%s'\n", var); return NULL; } else len--; } return strndup(orig, len); } /* returns -1 if value != true or false, otherwise 0 == false, 1 == true */ int str_to_boolean(const char *value) { int retval = -1; if (strcasecmp("TRUE", value) == 0) retval = 1; if (strcasecmp("FALSE", value) == 0) retval = 0; return retval; } static int warned_uppercase = 0; void warn_uppercase(void) { if (!warned_uppercase) { pwarn(_("Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n")); warned_uppercase = 1; } } static int parse_sub_mode(const char *str_mode, const char *mode_desc unused) { #define IS_DIFF_QUAL(mode, q) (((mode) & AA_MAY_EXEC) && (((mode) & AA_EXEC_TYPE) != ((q) & AA_EXEC_TYPE))) int mode = 0; const char *p; PDEBUG("Parsing mode: %s\n", str_mode); if (!str_mode) return 0; p = str_mode; while (*p) { char thisc = *p; char next = *(p + 1); char lower; int tmode = 0; reeval: switch (thisc) { case COD_READ_CHAR: if (read_implies_exec) { PDEBUG("Parsing mode: found %s READ imply X\n", mode_desc); mode |= AA_MAY_READ | AA_OLD_EXEC_MMAP; } else { PDEBUG("Parsing mode: found %s READ\n", mode_desc); mode |= AA_MAY_READ; } break; case COD_WRITE_CHAR: PDEBUG("Parsing mode: found %s WRITE\n", mode_desc); if ((mode & AA_MAY_APPEND) && !(mode & AA_MAY_WRITE)) yyerror(_("Conflict 'a' and 'w' perms are mutually exclusive.")); mode |= AA_MAY_WRITE | AA_MAY_APPEND; break; case COD_APPEND_CHAR: PDEBUG("Parsing mode: found %s APPEND\n", mode_desc); if (mode & AA_MAY_WRITE) yyerror(_("Conflict 'a' and 'w' perms are mutually exclusive.")); mode |= AA_MAY_APPEND; break; case COD_LINK_CHAR: PDEBUG("Parsing mode: found %s LINK\n", mode_desc); mode |= AA_OLD_MAY_LINK; break; case COD_LOCK_CHAR: PDEBUG("Parsing mode: found %s LOCK\n", mode_desc); mode |= AA_OLD_MAY_LOCK; break; case COD_INHERIT_CHAR: PDEBUG("Parsing mode: found INHERIT\n"); if (mode & AA_EXEC_MODIFIERS) { yyerror(_("Exec qualifier 'i' invalid, conflicting qualifier already specified")); } else { if (next != tolower(next)) warn_uppercase(); mode |= (AA_EXEC_INHERIT | AA_MAY_EXEC); p++; /* skip 'x' */ } break; case COD_UNSAFE_UNCONFINED_CHAR: tmode = AA_EXEC_UNSAFE; pwarn(_("Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n"), COD_UNSAFE_UNCONFINED_CHAR, COD_EXEC_CHAR); /* fall through */ case COD_UNCONFINED_CHAR: tmode |= AA_EXEC_UNCONFINED | AA_MAY_EXEC; PDEBUG("Parsing mode: found UNCONFINED\n"); if (IS_DIFF_QUAL(mode, tmode)) { yyerror(_("Exec qualifier '%c' invalid, conflicting qualifier already specified"), thisc); } else { if (next != tolower(next)) warn_uppercase(); mode |= tmode; p++; /* skip 'x' */ } tmode = 0; break; case COD_UNSAFE_PROFILE_CHAR: case COD_UNSAFE_LOCAL_CHAR: tmode = AA_EXEC_UNSAFE; /* fall through */ case COD_PROFILE_CHAR: case COD_LOCAL_CHAR: if (tolower(thisc) == COD_UNSAFE_PROFILE_CHAR) tmode |= AA_EXEC_PROFILE | AA_MAY_EXEC; else { tmode |= AA_EXEC_LOCAL | AA_MAY_EXEC; } PDEBUG("Parsing mode: found PROFILE\n"); if (tolower(next) == COD_INHERIT_CHAR) { tmode |= AA_EXEC_INHERIT; if (IS_DIFF_QUAL(mode, tmode)) { yyerror(_("Exec qualifier '%c%c' invalid, conflicting qualifier already specified"), thisc, next); } else { mode |= tmode; p += 2; /* skip x */ } } else if (tolower(next) == COD_UNSAFE_UNCONFINED_CHAR) { tmode |= AA_EXEC_PUX; if (IS_DIFF_QUAL(mode, tmode)) { yyerror(_("Exec qualifier '%c%c' invalid, conflicting qualifier already specified"), thisc, next); } else { mode |= tmode; p += 2; /* skip x */ } } else if (IS_DIFF_QUAL(mode, tmode)) { yyerror(_("Exec qualifier '%c' invalid, conflicting qualifier already specified"), thisc); } else { if (next != tolower(next)) warn_uppercase(); mode |= tmode; p++; /* skip 'x' */ } tmode = 0; break; case COD_MMAP_CHAR: PDEBUG("Parsing mode: found %s MMAP\n", mode_desc); mode |= AA_OLD_EXEC_MMAP; break; case COD_EXEC_CHAR: /* thisc is valid for deny rules, and named transitions * but invalid for regular x transitions * sort it out later. */ mode |= AA_MAY_EXEC; break; /* error cases */ default: lower = tolower(thisc); switch (lower) { case COD_READ_CHAR: case COD_WRITE_CHAR: case COD_APPEND_CHAR: case COD_LINK_CHAR: case COD_INHERIT_CHAR: case COD_MMAP_CHAR: case COD_EXEC_CHAR: PDEBUG("Parsing mode: found invalid upper case char %c\n", thisc); warn_uppercase(); thisc = lower; goto reeval; break; default: yyerror(_("Internal: unexpected mode character '%c' in input"), thisc); break; } break; } p++; } PDEBUG("Parsed mode: %s 0x%x\n", str_mode, mode); return mode; } int parse_mode(const char *str_mode) { int tmp, mode = 0; tmp = parse_sub_mode(str_mode, ""); mode = SHIFT_MODE(tmp, AA_USER_SHIFT); mode |= SHIFT_MODE(tmp, AA_OTHER_SHIFT); if (mode & ~AA_VALID_PERMS) yyerror(_("Internal error generated invalid perm 0x%llx\n"), mode); return mode; } static int parse_X_sub_mode(const char *X, const char *str_mode, int *result, int fail, const char *mode_desc unused) { int mode = 0; const char *p; PDEBUG("Parsing %s mode: %s\n", X, str_mode); if (!str_mode) return 0; p = str_mode; while (*p) { char current = *p; char lower; reeval: switch (current) { case COD_READ_CHAR: PDEBUG("Parsing %s mode: found %s READ\n", X, mode_desc); mode |= AA_DBUS_RECEIVE; break; case COD_WRITE_CHAR: PDEBUG("Parsing %s mode: found %s WRITE\n", X, mode_desc); mode |= AA_DBUS_SEND; break; /* error cases */ default: lower = tolower(current); switch (lower) { case COD_READ_CHAR: case COD_WRITE_CHAR: PDEBUG("Parsing %s mode: found invalid upper case char %c\n", X, current); warn_uppercase(); current = lower; goto reeval; break; default: if (fail) yyerror(_("Internal: unexpected %s mode character '%c' in input"), X, current); else return 0; break; } break; } p++; } PDEBUG("Parsed %s mode: %s 0x%x\n", X, str_mode, mode); *result = mode; return 1; } int parse_X_mode(const char *X, int valid, const char *str_mode, int *mode, int fail) { *mode = 0; if (!parse_X_sub_mode(X, str_mode, mode, fail, "")) return 0; if (*mode & ~valid) { if (fail) yyerror(_("Internal error generated invalid %s perm 0x%x\n"), X, mode); else return 0; } return 1; } /** * parse_label - break a label down to the namespace and profile name * @stack: Will be true if the first char in @label is '&' to indicate stacking * @ns: Will point to the first char in the namespace upon return or NULL * if no namespace is present * @ns_len: Number of chars in the namespace string or 0 if no namespace * is present * @name: Will point to the first char in the profile name upon return * @name_len: Number of chars in the name string * @label: The label to parse into namespace and profile name * * The returned pointers will point to locations within the original * @label string. No new strings are allocated. * * Returns 0 upon success or non-zero with @ns, @ns_len, @name, and * @name_len undefined upon error. Error codes are: * * 1) Namespace is not terminated despite @label starting with ':' * 2) Namespace is empty meaning @label starts with "::" * 3) Profile name is empty */ static int _parse_label(bool *stack, char **ns, size_t *ns_len, char **name, size_t *name_len, const char *label) { const char *name_start = NULL; const char *ns_start = NULL; const char *ns_end = NULL; if (label[0] == '&') { /** * Leading ampersand means that the current profile should * be stacked with the rest of the label */ *stack = true; label++; } else { *stack = false; } if (label[0] != ':') { /* There is no namespace specified in the label */ name_start = label; } else { /* A leading ':' indicates that a namespace is specified */ ns_start = label + 1; ns_end = strstr(ns_start, ":"); if (!ns_end) return 1; /** * Handle either of the two namespace formats: * 1) :ns:name * 2) :ns://name */ name_start = ns_end + 1; if (!strncmp(name_start, "//", 2)) name_start += 2; } /** * The casts below are to allow @label to be const, signifying * that this function doesn't modify it, while allowing callers to * decide if they want to pass in pointers to const or non-const * strings. */ *ns = (char *)ns_start; *name = (char *)name_start; *ns_len = ns_end - ns_start; *name_len = strlen(name_start); if (*ns && *ns_len == 0) return 2; else if (*name_len == 0) return 3; return 0; } bool label_contains_ns(const char *label) { bool stack = false; char *ns = NULL; char *name = NULL; size_t ns_len = 0; size_t name_len = 0; return _parse_label(&stack, &ns, &ns_len, &name, &name_len, label) == 0 && ns; } bool parse_label(bool *_stack, char **_ns, char **_name, const char *label, bool yyerr) { const char *err = NULL; char *ns = NULL; char *name = NULL; size_t ns_len = 0; size_t name_len = 0; int res; res = _parse_label(_stack, &ns, &ns_len, &name, &name_len, label); if (res == 1) { err = _("Namespace not terminated: %s\n"); } else if (res == 2) { err = _("Empty namespace: %s\n"); } else if (res == 3) { err = _("Empty named transition profile name: %s\n"); } else if (res != 0) { err = _("Unknown error while parsing label: %s\n"); } if (err) { if (yyerr) yyerror(err, label); else fprintf(stderr, err, label); return false; } if (ns) { *_ns = strndup(ns, ns_len); if (!*_ns) goto alloc_fail; } else { *_ns = NULL; } *_name = strndup(name, name_len); if (!*_name) { free(*_ns); goto alloc_fail; } return true; alloc_fail: err = _("Memory allocation error."); if (yyerr) yyerror(err); else fprintf(stderr, "%s", err); return false; } struct cod_entry *new_entry(char *id, int mode, char *link_id) { struct cod_entry *entry = NULL; entry = (struct cod_entry *)calloc(1, sizeof(struct cod_entry)); if (!entry) return NULL; entry->name = id; entry->link_name = link_id; entry->mode = mode; entry->audit = 0; entry->deny = FALSE; entry->pattern_type = ePatternInvalid; entry->pat.regex = NULL; entry->next = NULL; PDEBUG(" Insertion of: (%s)\n", entry->name); return entry; } struct cod_entry *copy_cod_entry(struct cod_entry *orig) { struct cod_entry *entry = NULL; entry = (struct cod_entry *)calloc(1, sizeof(struct cod_entry)); if (!entry) return NULL; DUP_STRING(orig, entry, name, err); DUP_STRING(orig, entry, link_name, err); DUP_STRING(orig, entry, nt_name, err); entry->mode = orig->mode; entry->audit = orig->audit; entry->deny = orig->deny; /* XXX - need to create copies of the patterns, too */ entry->pattern_type = orig->pattern_type; entry->pat.regex = NULL; entry->next = orig->next; return entry; err: free_cod_entries(entry); return NULL; } void free_cod_entries(struct cod_entry *list) { if (!list) return; if (list->next) free_cod_entries(list->next); if (list->name) free(list->name); if (list->link_name) free(list->link_name); if (list->nt_name) free(list->nt_name); if (list->pat.regex) free(list->pat.regex); free(list); } static void debug_base_perm_mask(int mask) { if (HAS_MAY_READ(mask)) printf("%c", COD_READ_CHAR); if (HAS_MAY_WRITE(mask)) printf("%c", COD_WRITE_CHAR); if (HAS_MAY_APPEND(mask)) printf("%c", COD_APPEND_CHAR); if (HAS_MAY_LINK(mask)) printf("%c", COD_LINK_CHAR); if (HAS_MAY_LOCK(mask)) printf("%c", COD_LOCK_CHAR); if (HAS_EXEC_MMAP(mask)) printf("%c", COD_MMAP_CHAR); if (HAS_MAY_EXEC(mask)) printf("%c", COD_EXEC_CHAR); } void debug_cod_entries(struct cod_entry *list) { struct cod_entry *item = NULL; printf("--- Entries ---\n"); list_for_each(list, item) { printf("Mode:\t"); if (HAS_CHANGE_PROFILE(item->mode)) printf(" change_profile"); if (HAS_EXEC_UNSAFE(item->mode)) printf(" unsafe"); debug_base_perm_mask(SHIFT_TO_BASE(item->mode, AA_USER_SHIFT)); printf(":"); debug_base_perm_mask(SHIFT_TO_BASE(item->mode, AA_OTHER_SHIFT)); if (item->name) printf("\tName:\t(%s)\n", item->name); else printf("\tName:\tNULL\n"); if (AA_LINK_BITS & item->mode) printf("\tlink:\t(%s)\n", item->link_name ? item->link_name : "/**"); } } static const char *capnames[] = { "chown", "dac_override", "dac_read_search", "fowner", "fsetid", "kill", "setgid", "setuid", "setpcap", "linux_immutable", "net_bind_service", "net_broadcast", "net_admin", "net_raw", "ipc_lock", "ipc_owner", "sys_module", "sys_rawio", "sys_chroot", "sys_ptrace", "sys_pacct", "sys_admin", "sys_boot", "sys_nice", "sys_resource", "sys_time", "sys_tty_config", "mknod", "lease", "audit_write", "audit_control", "setfcap", "mac_override", "syslog", }; const char *capability_to_name(unsigned int cap) { const char *capname; capname = (cap < (sizeof(capnames) / sizeof(char *)) ? capnames[cap] : "invalid-capability"); return capname; } void __debug_capabilities(uint64_t capset, const char *name) { unsigned int i; printf("%s:", name); for (i = 0; i < (sizeof(capnames)/sizeof(char *)); i++) { if (((1ull << i) & capset) != 0) { printf (" %s", capability_to_name(i)); } } printf("\n"); } struct value_list *new_value_list(char *value) { struct value_list *val = (struct value_list *) calloc(1, sizeof(struct value_list)); if (val) val->value = value; return val; } void free_value_list(struct value_list *list) { struct value_list *next; while (list) { next = list->next; if (list->value) free(list->value); free(list); list = next; } } struct value_list *dup_value_list(struct value_list *list) { struct value_list *entry, *dup, *head = NULL; char *value; list_for_each(list, entry) { value = NULL; if (list->value) { value = strdup(list->value); if (!value) goto fail2; } dup = new_value_list(value); if (!dup) goto fail; if (head) list_append(head, dup); else head = dup; } return head; fail: free(value); fail2: free_value_list(head); return NULL; } void print_value_list(struct value_list *list) { struct value_list *entry; if (!list) return; fprintf(stderr, "%s", list->value); list = list->next; list_for_each(list, entry) { fprintf(stderr, ", %s", entry->value); } } void move_conditional_value(const char *rulename, char **dst_ptr, struct cond_entry *cond_ent) { if (*dst_ptr) yyerror("%s conditional \"%s\" can only be specified once\n", rulename, cond_ent->name); *dst_ptr = cond_ent->vals->value; cond_ent->vals->value = NULL; } struct cond_entry *new_cond_entry(char *name, int eq, struct value_list *list) { struct cond_entry *ent = (struct cond_entry *) calloc(1, sizeof(struct cond_entry)); if (ent) { ent->name = name; ent->vals = list; ent->eq = eq; } return ent; } void free_cond_entry(struct cond_entry *ent) { if (ent) { free(ent->name); free_value_list(ent->vals); free(ent); } } void free_cond_list(struct cond_entry *ents) { struct cond_entry *entry, *tmp; list_for_each_safe(ents, entry, tmp) { free_cond_entry(entry); } } void print_cond_entry(struct cond_entry *ent) { if (ent) { fprintf(stderr, "%s=(", ent->name); print_value_list(ent->vals); fprintf(stderr, ")\n"); } } struct time_units { const char *str; long long value; }; static struct time_units time_units[] = { { "us", 1LL }, { "microsecond", 1LL }, { "microseconds", 1LL }, { "ms", 1000LL }, { "millisecond", 1000LL }, { "milliseconds", 1000LL }, { "s", 1000LL * 1000LL }, { "sec", SECONDS_P_MS }, { "second", SECONDS_P_MS }, { "seconds", SECONDS_P_MS }, { "min" , 60LL * SECONDS_P_MS }, { "minute", 60LL * SECONDS_P_MS }, { "minutes", 60LL * SECONDS_P_MS }, { "h", 60LL * 60LL * SECONDS_P_MS }, { "hour", 60LL * 60LL * SECONDS_P_MS }, { "hours", 60LL * 60LL * SECONDS_P_MS }, { "d", 24LL * 60LL * 60LL * SECONDS_P_MS }, { "day", 24LL * 60LL * 60LL * SECONDS_P_MS }, { "days", 24LL * 60LL * 60LL * SECONDS_P_MS }, { "week", 7LL * 24LL * 60LL * 60LL * SECONDS_P_MS }, { "weeks", 7LL * 24LL * 60LL * 60LL * SECONDS_P_MS }, { NULL, 0 } }; long long convert_time_units(long long value, long long base, const char *units) { struct time_units *ent; if (!units) /* default to base if no units */ return value; for (ent = time_units; ent->str; ent++) { if (strcmp(ent->str, units) == 0) { if (value * ent->value < base) return -1LL; return value * ent->value / base; } } return -2LL; } #ifdef UNIT_TEST #include "unit_test.h" int test_str_to_boolean(void) { int rc = 0; int retval; retval = str_to_boolean("TRUE"); MY_TEST(retval == 1, "str2bool for TRUE"); retval = str_to_boolean("TrUe"); MY_TEST(retval == 1, "str2bool for TrUe"); retval = str_to_boolean("false"); MY_TEST(retval == 0, "str2bool for false"); retval = str_to_boolean("flase"); MY_TEST(retval == -1, "str2bool for flase"); return rc; } #define MY_TEST_UNQUOTED(input, expected, description) \ do { \ char *result_str = NULL; \ char *output_str = NULL; \ \ result_str = processunquoted((input), strlen((input))); \ asprintf(&output_str, "processunquoted: %s\tinput = '%s'\texpected = '%s'\tresult = '%s'", \ (description), (input), (expected), result_str); \ MY_TEST(strcmp((expected), result_str) == 0, output_str); \ \ free(output_str); \ free(result_str); \ } \ while(0) int test_processunquoted(void) { int rc = 0; MY_TEST_UNQUOTED("", "", "empty string"); MY_TEST_UNQUOTED("\\1", "\001", "one digit octal"); MY_TEST_UNQUOTED("\\8", "\\8", "invalid octal digit \\8"); MY_TEST_UNQUOTED("\\18", "\0018", "one digit octal followed by invalid octal digit"); MY_TEST_UNQUOTED("\\1a", "\001a", "one digit octal followed by hex digit a"); MY_TEST_UNQUOTED("\\1z", "\001z", "one digit octal follow by char z"); MY_TEST_UNQUOTED("\\11", "\011", "two digit octal"); MY_TEST_UNQUOTED("\\118", "\0118", "two digit octal followed by invalid octal digit"); MY_TEST_UNQUOTED("\\11a", "\011a", "two digit octal followed by hex digit a"); MY_TEST_UNQUOTED("\\11z", "\011z", "two digit octal followed by char z"); MY_TEST_UNQUOTED("\\111", "\111", "three digit octal"); MY_TEST_UNQUOTED("\\378", "\0378", "three digit octal two large, taken as 2 digit octal plus trailing char"); MY_TEST_UNQUOTED("123\\421123", "123\0421123", "two character octal followed by valid octal digit \\421"); MY_TEST_UNQUOTED("123\\109123", "123\109123", "octal 109"); MY_TEST_UNQUOTED("123\\1089123", "123\1089123", "octal 108"); return rc; } int test_processquoted(void) { int rc = 0; const char *teststring, *processedstring; char *out; teststring = ""; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(teststring, out) == 0, "processquoted on empty string"); free(out); teststring = "\"abcdefg\""; processedstring = "abcdefg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on simple string"); free(out); teststring = "\"abcd\\tefg\""; processedstring = "abcd\tefg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on string with tab"); free(out); teststring = "\"abcdefg\\\""; processedstring = "abcdefg\\"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on trailing slash"); free(out); teststring = "\"a\\\\bcdefg\""; processedstring = "a\\\\bcdefg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on quoted slash"); free(out); teststring = "\"a\\\"bcde\\\"fg\""; processedstring = "a\"bcde\"fg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on quoted quotes"); free(out); teststring = "\"\\rabcdefg\""; processedstring = "\rabcdefg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on quoted \\r"); free(out); teststring = "\"abcdefg\\n\""; processedstring = "abcdefg\n"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on quoted \\n"); free(out); teststring = "\"\\Uabc\\Ndefg\\x\""; processedstring = "\\Uabc\\Ndefg\\x"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted passthrough on invalid quoted chars"); free(out); teststring = "\"abc\\042defg\""; processedstring = "abc\"defg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on quoted octal \\042"); free(out); teststring = "\"abcdefg\\176\""; processedstring = "abcdefg~"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted on quoted octal \\176"); free(out); teststring = "\"abc\\429defg\""; processedstring = "abc\0429defg"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted passthrough quoted invalid octal \\429"); free(out); teststring = "\"abcdefg\\4\""; processedstring = "abcdefg\004"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted passthrough quoted one digit trailing octal \\4"); free(out); teststring = "\"abcdefg\\04\""; processedstring = "abcdefg\004"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted passthrough quoted two digit trailing octal \\04"); free(out); teststring = "\"abcdefg\\004\""; processedstring = "abcdefg\004"; out = processquoted(teststring, strlen(teststring)); MY_TEST(strcmp(processedstring, out) == 0, "processquoted passthrough quoted three digit trailing octal \\004"); free(out); return rc; } #define TIME_TEST(V, B, U, R) \ MY_TEST(convert_time_units((V), (B), U) == (R), \ "convert " #V " with base of " #B ", " #U " units") int test_convert_time_units() { int rc = 0; TIME_TEST(1LL, 1LL, NULL, 1LL); TIME_TEST(12345LL, 1LL, NULL, 12345LL); TIME_TEST(10LL, 10LL, NULL, 10LL); TIME_TEST(123450LL, 10LL, NULL, 123450LL); TIME_TEST(12345LL, 1LL, "us", 12345LL); TIME_TEST(12345LL, 1LL, "microsecond", 12345LL); TIME_TEST(12345LL, 1LL, "microseconds", 12345LL); TIME_TEST(12345LL, 1LL, "ms", 12345LL*1000LL); TIME_TEST(12345LL, 1LL, "millisecond", 12345LL*1000LL); TIME_TEST(12345LL, 1LL, "milliseconds", 12345LL*1000LL); TIME_TEST(12345LL, 1LL, "s", 12345LL*1000LL*1000LL); TIME_TEST(12345LL, 1LL, "sec", 12345LL*1000LL*1000LL); TIME_TEST(12345LL, 1LL, "second", 12345LL*1000LL*1000LL); TIME_TEST(12345LL, 1LL, "seconds", 12345LL*1000LL*1000LL); TIME_TEST(12345LL, 1LL, "min", 12345LL*1000LL*1000LL*60LL); TIME_TEST(12345LL, 1LL, "minute", 12345LL*1000LL*1000LL*60LL); TIME_TEST(12345LL, 1LL, "minutes", 12345LL*1000LL*1000LL*60LL); TIME_TEST(12345LL, 1LL, "h", 12345LL*1000LL*1000LL*60LL*60LL); TIME_TEST(12345LL, 1LL, "hour", 12345LL*1000LL*1000LL*60LL*60LL); TIME_TEST(12345LL, 1LL, "hours", 12345LL*1000LL*1000LL*60LL*60LL); TIME_TEST(12345LL, 1LL, "d", 12345LL*1000LL*1000LL*60LL*60LL*24LL); TIME_TEST(12345LL, 1LL, "day", 12345LL*1000LL*1000LL*60LL*60LL*24LL); TIME_TEST(12345LL, 1LL, "days", 12345LL*1000LL*1000LL*60LL*60LL*24LL); TIME_TEST(12345LL, 1LL, "week", 12345LL*1000LL*1000LL*60LL*60LL*24LL*7LL); TIME_TEST(12345LL, 1LL, "weeks", 12345LL*1000LL*1000LL*60LL*60LL*24LL*7LL); return rc; } int main(void) { int rc = 0; int retval; retval = test_str_to_boolean(); if (retval != 0) rc = retval; retval = test_processunquoted(); if (retval != 0) rc = retval; retval = test_processquoted(); if (retval != 0) rc = retval; retval = test_convert_time_units(); if (retval != 0) rc = retval; return rc; } #endif /* UNIT_TEST */ apparmor-2.11.0/parser/parser_variable.c0000644000175000017500000003756312651500036016021 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. */ #include #include #include #include #include #include #include #include /* #define DEBUG */ #include "parser.h" #include "profile.h" #include "mount.h" #include "dbus.h" static inline const char *get_var_end(const char *var) { const char *eptr = var; while (*eptr) { if (*eptr == '}') return eptr; /* first character must be alpha */ if (eptr == var) { if (!isalpha(*eptr)) return NULL; /* invalid char */ } else { if (!(*eptr == '_' || isalnum(*eptr))) return NULL; /* invalid char */ } eptr++; } return NULL; /* no terminating '}' */ } static struct var_string *split_string(const char *string, const char *var_begin, const char *var_end) { struct var_string *n = (struct var_string *) calloc(1, sizeof(struct var_string)); unsigned int offset = strlen("@{"); if (!n) { PERROR("Memory allocation error\n"); return NULL; } if (var_begin != string) { n->prefix = strndup(string, var_begin - string); } n->var = strndup(var_begin + offset, var_end - (var_begin + offset)); if (strlen(var_end + 1) != 0) { n->suffix = strdup(var_end + 1); } return n; } struct var_string *split_out_var(const char *string) { struct var_string *n = NULL; const char *sptr; BOOL bEscape = 0; /* flag to indicate escape */ if (!string) /* shouldn't happen */ return NULL; sptr = string; while (!n && *sptr) { switch (*sptr) { case '\\': if (bEscape) { bEscape = FALSE; } else { bEscape = TRUE; } break; case '@': if (bEscape) { bEscape = FALSE; } else if (*(sptr + 1) == '{') { const char *eptr = get_var_end(sptr + 2); if (!eptr) break; /* no variable end found */ if (eptr == sptr + 2) { /* XXX - better diagnostics here, please */ PERROR("Empty variable name found!\n"); exit(1); } n = split_string(string, sptr, eptr); } break; default: if (bEscape) bEscape = FALSE; } sptr++; } return n; } void free_var_string(struct var_string *var) { if (!var) return; if (var->prefix) free(var->prefix); if (var->var) free(var->var); if (var->suffix) free(var->suffix); free(var); } static void trim_trailing_slash(std::string& str) { std::size_t found = str.find_last_not_of('/'); if (found != std::string::npos) str.erase(found + 1); else str.clear(); // str is all '/' } static void write_replacement(const char separator, const char* value, std::string& replacement, bool filter_leading_slash, bool filter_trailing_slash) { const char *p = value; replacement.append(1, separator); if (filter_leading_slash) while (*p == '/') p++; replacement.append(p); if (filter_trailing_slash) trim_trailing_slash(replacement); } static int expand_by_alternations(struct set_value **valuelist, struct var_string *split_var, char **name) { char *value, *first_value; std::string replacement; bool filter_leading_slash = false; bool filter_trailing_slash = false; first_value = get_next_set_value(valuelist); if (!first_value) { PERROR("ASSERT: set variable (%s) should always have at least one value assigned to it\n", split_var->var); exit(1); } free(*name); value = get_next_set_value(valuelist); if (!value) { /* only one entry for the variable, so just sub it in */ if (asprintf(name, "%s%s%s", split_var->prefix ? split_var->prefix : "", first_value, split_var->suffix ? split_var->suffix : "") == -1) return -1; return 0; } if (split_var->prefix && split_var->prefix[strlen(split_var->prefix) - 1] == '/') filter_leading_slash = true; if (split_var->suffix && *split_var->suffix == '/') filter_trailing_slash = true; write_replacement('{', first_value, replacement, filter_leading_slash, filter_trailing_slash); write_replacement(',', value, replacement, filter_leading_slash, filter_trailing_slash); while ((value = get_next_set_value(valuelist))) { write_replacement(',', value, replacement, filter_leading_slash, filter_trailing_slash); } if (asprintf(name, "%s%s}%s", split_var->prefix ? split_var->prefix : "", replacement.c_str(), split_var->suffix ? split_var->suffix : "") == -1) { return -1; } return 0; } /* doesn't handle variables in options atm */ int expand_entry_variables(char **name) { struct set_value *valuelist; struct var_string *split_var; int ret; assert(name); if (!*name) /* can happen when entry is optional */ return 0; while ((split_var = split_out_var(*name))) { valuelist = get_set_var(split_var->var); if (!valuelist) { int boolean = get_boolean_var(split_var->var); if (boolean == -1) PERROR("Found reference to variable %s, but is never declared\n", split_var->var); else PERROR("Found reference to set variable %s, but declared boolean\n", split_var->var); exit(1); } ret = expand_by_alternations(&valuelist, split_var, name); free_var_string(split_var); if (ret != 0) return -1; } return 0; } static int process_variables_in_entries(struct cod_entry *entry_list) { int error = 0; struct cod_entry *entry; list_for_each(entry_list, entry) { error = expand_entry_variables(&entry->name); if (error) return error; if (entry->link_name) { error = expand_entry_variables(&entry->link_name); if (error) return error; } } return 0; } static int process_variables_in_rules(Profile &prof) { for (RuleList::iterator i = prof.rule_ents.begin(); i != prof.rule_ents.end(); i++) { int error = (*i)->expand_variables(); if (error) return error; } return 0; } static int process_variables_in_name(Profile &prof) { /* this needs to be done before alias expansion, ie. altnames are * setup */ int error = expand_entry_variables(&prof.name); if (!error && prof.attachment) error = expand_entry_variables(&prof.attachment); return error; } static std::string escape_re(std::string str) { for (size_t i = 0; i < str.length(); i++) { if (str[i] == '\\') { /* skip \ and follow char. Skipping \ and first * char is enough for multichar escape sequence */ i++; continue; } if (strchr("{}[]*?", str[i]) != NULL) { str.insert(i++, "\\"); } } return str; } int process_profile_variables(Profile *prof) { int error = 0, rc; /* needs to be before PROFILE_NAME_VARIABLE so that variable will * have the correct name */ error = process_variables_in_name(*prof); if (!error) { /* escape profile name elements that could be interpreted * as regular expressions. */ error = new_set_var(PROFILE_NAME_VARIABLE, escape_re(prof->get_name(false)).c_str()); } if (!error) error = process_variables_in_entries(prof->entries); if (!error) error = process_variables_in_rules(*prof); rc = delete_set_var(PROFILE_NAME_VARIABLE); if (!error) error = rc; return error; } #ifdef UNIT_TEST #include "unit_test.h" int test_get_var_end(void) { int rc = 0; const char *retchar; const char *testchar; testchar = "TRUE}"; retchar = get_var_end(testchar); MY_TEST(retchar - testchar == strlen("TRUE"), "get var end for TRUE}"); testchar = "some_var}some other text"; retchar = get_var_end(testchar); MY_TEST(retchar - testchar == strlen("some_var"), "get var end for some_var}"); testchar = "some_var}some other} text"; retchar = get_var_end(testchar); MY_TEST(retchar - testchar == strlen("some_var"), "get var end for some_var} 2"); testchar = "FALSE"; retchar = get_var_end(testchar); MY_TEST(retchar == NULL, "get var end for FALSE"); testchar = "pah,pah}pah "; retchar = get_var_end(testchar); MY_TEST(retchar == NULL, "get var end for pah,pah}"); return rc; } int test_split_string(void) { int rc = 0; char *tst_string, *var_start, *var_end; struct var_string *ret_struct; const char *prefix = "abcdefg"; const char *var = "boogie"; const char *suffix = "suffixication"; asprintf(&tst_string, "%s@{%s}%s", prefix, var, suffix); var_start = tst_string + strlen(prefix); var_end = var_start + strlen(var) + strlen("@\{"); ret_struct = split_string(tst_string, var_start, var_end); MY_TEST(strcmp(ret_struct->prefix, prefix) == 0, "split string 1 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split string 1 var"); MY_TEST(strcmp(ret_struct->suffix, suffix) == 0, "split string 1 suffix"); free_var_string(ret_struct); free(tst_string); asprintf(&tst_string, "@{%s}%s", var, suffix); var_start = tst_string; var_end = var_start + strlen(var) + strlen("@\{"); ret_struct = split_string(tst_string, var_start, var_end); MY_TEST(ret_struct->prefix == NULL, "split string 2 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split string 2 var"); MY_TEST(strcmp(ret_struct->suffix, suffix) == 0, "split string 2 suffix"); free_var_string(ret_struct); free(tst_string); asprintf(&tst_string, "%s@{%s}", prefix, var); var_start = tst_string + strlen(prefix); var_end = var_start + strlen(var) + strlen("@\{"); ret_struct = split_string(tst_string, var_start, var_end); MY_TEST(strcmp(ret_struct->prefix, prefix) == 0, "split string 3 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split string 3 var"); MY_TEST(ret_struct->suffix == NULL, "split string 3 suffix"); free_var_string(ret_struct); free(tst_string); asprintf(&tst_string, "@{%s}", var); var_start = tst_string; var_end = var_start + strlen(var) + strlen("@\{"); ret_struct = split_string(tst_string, var_start, var_end); MY_TEST(ret_struct->prefix == NULL, "split string 4 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split string 4 var"); MY_TEST(ret_struct->suffix == NULL, "split string 4 suffix"); free_var_string(ret_struct); free(tst_string); return rc; } int test_split_out_var(void) { int rc = 0; char *tst_string, *tmp; struct var_string *ret_struct; const char *prefix = "abcdefg"; const char *var = "boogie"; const char *var2 = "V4rW1thNum5"; const char *var3 = "boogie_board"; const char *suffix = "suffixication"; /* simple case */ asprintf(&tst_string, "%s@{%s}%s", prefix, var, suffix); ret_struct = split_out_var(tst_string); MY_TEST(strcmp(ret_struct->prefix, prefix) == 0, "split out var 1 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 1 var"); MY_TEST(strcmp(ret_struct->suffix, suffix) == 0, "split out var 1 suffix"); free_var_string(ret_struct); free(tst_string); /* no prefix */ asprintf(&tst_string, "@{%s}%s", var, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct->prefix == NULL, "split out var 2 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 2 var"); MY_TEST(strcmp(ret_struct->suffix, suffix) == 0, "split out var 2 suffix"); free_var_string(ret_struct); free(tst_string); /* no suffix */ asprintf(&tst_string, "%s@{%s}", prefix, var); ret_struct = split_out_var(tst_string); MY_TEST(strcmp(ret_struct->prefix, prefix) == 0, "split out var 3 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 3 var"); MY_TEST(ret_struct->suffix == NULL, "split out var 3 suffix"); free_var_string(ret_struct); free(tst_string); /* var only */ asprintf(&tst_string, "@{%s}", var); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct->prefix == NULL, "split out var 4 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 4 var"); MY_TEST(ret_struct->suffix == NULL, "split out var 4 suffix"); free_var_string(ret_struct); free(tst_string); /* quoted var, shouldn't split */ asprintf(&tst_string, "%s\\@{%s}%s", prefix, var, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct == NULL, "split out var - quoted @"); free_var_string(ret_struct); free(tst_string); /* quoted \, split should succeed */ asprintf(&tst_string, "%s\\\\@{%s}%s", prefix, var, suffix); ret_struct = split_out_var(tst_string); tmp = strndup(tst_string, strlen(prefix) + 2); MY_TEST(strcmp(ret_struct->prefix, tmp) == 0, "split out var 5 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 5 var"); MY_TEST(strcmp(ret_struct->suffix, suffix) == 0, "split out var 5 suffix"); free_var_string(ret_struct); free(tst_string); free(tmp); /* un terminated var, should fail */ asprintf(&tst_string, "%s@{%s%s", prefix, var, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct == NULL, "split out var - un-terminated var"); free_var_string(ret_struct); free(tst_string); /* invalid char in var, should fail */ asprintf(&tst_string, "%s@{%s^%s}%s", prefix, var, var, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct == NULL, "split out var - invalid char in var"); free_var_string(ret_struct); free(tst_string); /* two vars, should only strip out first */ asprintf(&tmp, "@{%s}%s}", suffix, suffix); asprintf(&tst_string, "%s@{%s}%s", prefix, var, tmp); ret_struct = split_out_var(tst_string); MY_TEST(strcmp(ret_struct->prefix, prefix) == 0, "split out var 6 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 6 var"); MY_TEST(strcmp(ret_struct->suffix, tmp) == 0, "split out var 6 suffix"); free_var_string(ret_struct); free(tst_string); free(tmp); /* quoted @ followed by var, split should succeed */ asprintf(&tst_string, "%s\\@@{%s}%s", prefix, var, suffix); ret_struct = split_out_var(tst_string); tmp = strndup(tst_string, strlen(prefix) + 2); MY_TEST(strcmp(ret_struct->prefix, tmp) == 0, "split out var 7 prefix"); MY_TEST(strcmp(ret_struct->var, var) == 0, "split out var 7 var"); MY_TEST(strcmp(ret_struct->suffix, suffix) == 0, "split out var 7 suffix"); free_var_string(ret_struct); free(tst_string); free(tmp); /* numeric char in var, should succeed */ asprintf(&tst_string, "%s@{%s}%s", prefix, var2, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct && strcmp(ret_struct->prefix, prefix) == 0, "split out numeric var prefix"); MY_TEST(ret_struct && strcmp(ret_struct->var, var2) == 0, "split numeric var var"); MY_TEST(ret_struct && strcmp(ret_struct->suffix, suffix) == 0, "split out numeric var suffix"); free_var_string(ret_struct); free(tst_string); /* numeric first char in var, should fail */ asprintf(&tst_string, "%s@{6%s}%s", prefix, var2, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct == NULL, "split out var - numeric first char in var"); free_var_string(ret_struct); free(tst_string); /* underscore char in var, should succeed */ asprintf(&tst_string, "%s@{%s}%s", prefix, var3, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct && strcmp(ret_struct->prefix, prefix) == 0, "split out underscore var prefix"); MY_TEST(ret_struct && strcmp(ret_struct->var, var3) == 0, "split out underscore var"); MY_TEST(ret_struct && strcmp(ret_struct->suffix, suffix) == 0, "split out underscore var suffix"); free_var_string(ret_struct); free(tst_string); /* underscore first char in var, should fail */ asprintf(&tst_string, "%s@{_%s%s}%s", prefix, var2, var3, suffix); ret_struct = split_out_var(tst_string); MY_TEST(ret_struct == NULL, "split out var - underscore first char in var"); free_var_string(ret_struct); free(tst_string); return rc; } int main(void) { int rc = 0; int retval; retval = test_get_var_end(); if (retval != 0) rc = retval; retval = test_split_string(); if (retval != 0) rc = retval; retval = test_split_out_var(); if (retval != 0) rc = retval; return rc; } #endif /* UNIT_TEST */ apparmor-2.11.0/parser/policy_cache.h0000644000175000017500000000354412534526735015315 0ustar jjjj/* * Copyright (c) 2014 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_POLICY_CACHE_H #define __AA_POLICY_CACHE_H extern struct timespec cache_tstamp, mru_policy_tstamp; /* returns true if time is more recent than mru_tstamp */ #define tstamp_cmp(a, b) \ (((a).tv_sec == (b).tv_sec) ? \ ((a).tv_nsec - (b).tv_nsec) : \ ((a).tv_sec - (b).tv_sec)) #define tstamp_is_null(a) ((a).tv_sec == 0 && (a).tv_nsec == 0) extern int show_cache; extern int skip_cache; extern int skip_read_cache; extern int write_cache; extern int cond_clear_cache; /* only applies if write is set */ extern int force_clear_cache; /* force clearing regargless of state */ extern int create_cache_dir; /* create the cache dir if missing? */ extern int mru_skip_cache; extern int debug_cache; void set_cache_tstamp(struct timespec t); void update_mru_tstamp(FILE *file, const char *path); bool valid_cached_file_version(const char *cachename); char *cache_filename(const char *cachedir, const char *basename); void valid_read_cache(const char *cachename); int cache_hit(const char *cachename); int setup_cache_tmp(const char **cachetmpname, const char *cachename); void install_cache(const char *cachetmpname, const char *cachename); #endif /* __AA_POLICY_CACHE_H */ apparmor-2.11.0/parser/pod2htmd.tmp0000644000175000017500000000000313034613172014734 0ustar jjjj . apparmor-2.11.0/parser/policydb.h0000644000175000017500000000214012326003761014453 0ustar jjjj/* * Copyright 2012 Canonical Ltd. * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License as * published by the Free Software Foundation, version 2 of the * License. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * */ #ifndef __AA_POLICYDB_H #define __AA_POLICYDB_H /* * Class of private mediation types in the AppArmor policy db * * See libapparmor's apparmor.h for public mediation types */ #define AA_CLASS_COND 0 #define AA_CLASS_UNKNOWN 1 #define AA_CLASS_FILE 2 #define AA_CLASS_CAP 3 #define AA_CLASS_NET 4 #define AA_CLASS_RLIMITS 5 #define AA_CLASS_DOMAIN 6 #define AA_CLASS_MOUNT 7 #define AA_CLASS_NS_DOMAIN 8 #define AA_CLASS_PTRACE 9 #define AA_CLASS_SIGNAL 10 #define AA_CLASS_LABEL 16 /* defined in libapparmor's apparmor.h #define AA_CLASS_DBUS 32 */ #define AA_CLASS_X 33 #endif /* __AA_POLICYDB_H */ apparmor-2.11.0/parser/apparmor.d.50000644000175000017500000020713113034613172014635 0ustar jjjj.\" Automatically generated by Pod::Man 2.28 (Pod::Simple 3.29) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is turned on, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{ . if \nF \{ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "APPARMOR.D 5" .TH APPARMOR.D 5 "2016-11-16" "AppArmor 2.11.0" "AppArmor" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" apparmor.d \- syntax of security profiles for AppArmor. .SH "DESCRIPTION" .IX Header "DESCRIPTION" AppArmor profiles describe mandatory access rights granted to given programs and are fed to the AppArmor policy enforcement module using \&\fIapparmor_parser\fR\|(8). This man page describes the format of the AppArmor configuration files; see \fIapparmor\fR\|(7) for an overview of AppArmor. .SH "FORMAT" .IX Header "FORMAT" The following is a BNF-style description of AppArmor policy configuration files; see below for an example AppArmor policy file. AppArmor configuration files are line-oriented; \fB#\fR introduces a comment, similar to shell scripting languages. The exception to this rule is that \fB#include\fR will \fIinclude\fR the contents of a file inline to the policy; this behaviour is modelled after \fIcpp\fR\|(1). .Sp .RS 4 \&\fB\s-1PROFILE FILE\s0\fR = ( [ \fI\s-1PREAMBLE\s0\fR ] [ \fI\s-1PROFILE\s0\fR ] )* .Sp \&\fB\s-1PREAMBLE\s0\fR = ( \fI\s-1COMMENT\s0\fR | \fI\s-1VARIABLE ASSIGNMENT\s0\fR | \fI\s-1ALIAS RULE\s0\fR | \fI\s-1INCLUDE\s0\fR )* Variable assignment and alias rules must come before the profile. .Sp \&\fB\s-1VARIABLE ASSIGNMENT\s0\fR = \fI\s-1VARIABLE\s0\fR ('=' | '+=') (space separated values) .Sp \&\fB\s-1VARIABLE\s0\fR = '@{' \fI\s-1ALPHA\s0\fR [ ( \fI\s-1ALPHANUMERIC\s0\fR | '_' ) ... ] '}' .Sp \&\fB\s-1ALIAS RULE\s0\fR = 'alias' \fI\s-1ABS PATH\s0\fR '\->' \fI\s-1REWRITTEN ABS PATH\s0\fR ',' .Sp \&\fB\s-1INCLUDE\s0\fR = '#include' ( \fI\s-1ABS PATH\s0\fR | \fI\s-1MAGIC PATH\s0\fR ) .Sp \&\fB\s-1ABS PATH\s0\fR = '\*(L"' path '\*(R"' (the path is passed to \fIopen\fR\|(2)) .Sp \&\fB\s-1MAGIC PATH\s0\fR = '<' relative path '>' The path is relative to \fI/etc/apparmor.d/\fR. .Sp \&\fB\s-1COMMENT\s0\fR = '#' \fI\s-1TEXT\s0\fR [ '\er' ] '\en' .Sp \&\fB\s-1TEXT\s0\fR = any characters .Sp \&\fB\s-1PROFILE\s0\fR = ( \fI\s-1PROFILE HEAD\s0\fR ) [ \fI\s-1ATTACHMENT SPECIFICATION\s0\fR ] [ \fI\s-1PROFILE FLAG CONDS\s0\fR ] '{' ( \fI\s-1RULES\s0\fR )* '}' .Sp \&\fB\s-1PROFILE HEAD\s0\fR = [ 'profile' ] \fI\s-1FILEGLOB\s0\fR | 'profile' \fI\s-1PROFILE NAME\s0\fR .Sp \&\fB\s-1PROFILE NAME\s0\fR ( \fI\s-1UNQUOTED PROFILE NAME\s0\fR | \fI\s-1QUOTED PROFILE NAME\s0\fR ) .Sp \&\fB\s-1QUOTED PROFILE NAME\s0\fR = '"' \fI\s-1UNQUOTED PROFILE NAME\s0\fR '"' .Sp \&\fB\s-1UNQUOTED PROFILE NAME\s0\fR = (must start with alphanumeric character (after variable expansion), or '/' \fB\s-1AARE\s0\fR have special meanings; see below. May include \fI\s-1VARIABLE\s0\fR. Rules with embedded spaces or tabs must be quoted.) .Sp \&\fB\s-1ATTACHMENT SPECIFICATION\s0\fR = \fI\s-1FILEGLOB\s0\fR .Sp \&\fB\s-1PROFILE FLAG CONDS\s0\fR = [ 'flags=' ] '(' comma or white space separated list of \fI\s-1PROFILE FLAGS\s0\fR ')' .Sp \&\fB\s-1PROFILE FLAGS\s0\fR = 'complain' | 'audit' | 'enforce' | 'mediate_deleted' | 'attach_disconnected' | 'chroot_relative' .Sp \&\fB\s-1RULES\s0\fR = [ ( \fI\s-1LINE RULES\s0\fR | \fI\s-1COMMA RULES\s0\fR ',' | \fI\s-1BLOCK RULES\s0\fR ) .Sp \&\fB\s-1LINE RULES\s0\fR = ( \fI\s-1COMMENT\s0\fR | \fI\s-1INCLUDE\s0\fR ) [ '\er' ] '\en' .Sp \&\fB\s-1COMMA RULES\s0\fR = ( \fI\s-1CAPABILITY RULE\s0\fR | \fI\s-1NETWORK RULE\s0\fR | \fI\s-1MOUNT RULE\s0\fR | \fI\s-1PIVOT ROOT RULE\s0\fR | \fI\s-1UNIX RULE\s0\fR | \fI\s-1FILE RULE\s0\fR | \fI\s-1LINK RULE\s0\fR | \fI\s-1CHANGE_PROFILE RULE\s0\fR | \fI\s-1RLIMIT RULE\s0\fR | \fI\s-1DBUS RULE\s0\fR ) .Sp \&\fB\s-1BLOCK RULES\s0\fR = ( \fI\s-1SUBPROFILE\s0\fR | \fI\s-1HAT\s0\fR | \fI\s-1QUALIFIER BLOCK\s0\fR ) .Sp \&\fB\s-1SUBPROFILE\s0\fR = 'profile' \fI\s-1PROFILE NAME\s0\fR [ \fI\s-1ATTACHMENT SPECIFICATION\s0\fR ] [ \fI\s-1PROFILE FLAG CONDS\s0\fR ] '{' ( \fI\s-1RULES\s0\fR )* '}' .Sp \&\fB\s-1HAT\s0\fR = ('hat' | '^') \fI\s-1HATNAME\s0\fR [ \fI\s-1PROFILE FLAG CONDS\s0\fR ] '{' ( \fI\s-1RULES\s0\fR )* '}' .Sp \&\fB\s-1HATNAME\s0\fR = (must start with alphanumeric character. See \fIaa_change_hat\fR\|(2) for a description of how this \*(L"hat\*(R" is used. If '^' is used to start a hat then there is no space between the '^' and \fI\s-1HATNAME\s0\fR) .Sp \&\fB\s-1QUALIFIER BLOCK\s0\fR = \fI\s-1QUALIFIERS\s0\fR \fI\s-1BLOCK\s0\fR .Sp \&\fB\s-1ACCESS TYPE\s0\fR = ( 'allow' | 'deny' ) .Sp \&\fB\s-1QUALIFIERS\s0\fR = [ 'audit' ] [ \fI\s-1ACCESS TYPE\s0\fR ] .Sp \&\fB\s-1CAPABILITY RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'capability' [ \fI\s-1CAPABILITY LIST\s0\fR ] .Sp \&\fB\s-1CAPABILITY LIST\s0\fR = ( \fI\s-1CAPABILITY\s0\fR )+ .Sp \&\fB\s-1CAPABILITY\s0\fR = (lowercase capability name without '\s-1CAP_\s0' prefix; see \&\fIcapabilities\fR\|(7)) .Sp \&\fB\s-1NETWORK RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'network' [ \fI\s-1DOMAIN\s0\fR ] [ \fI\s-1TYPE\s0\fR | \fI\s-1PROTOCOL\s0\fR ] .Sp \&\fB\s-1DOMAIN\s0\fR = ( 'inet' | 'ax25' | 'ipx' | 'appletalk' | 'netrom' | 'bridge' | 'atmpvc' | 'x25' | 'inet6' | 'rose' | 'netbeui' | 'security' | 'key' | 'packet' | 'ash' | 'econet' | 'atmsvc' | 'sna' | 'irda' | 'pppox' | 'wanpipe' | 'bluetooth' | 'netlink' | 'unix' | 'rds' | 'llc' | 'can' | 'tipc' | 'iucv' | 'rxrpc' | 'isdn' | 'phonet' | 'ieee802154' | 'caif' | 'alg' | 'nfc' | 'vsock' | 'mpls' | 'ib' | 'kcm' ) ',' .Sp \&\fB\s-1TYPE\s0\fR = ( 'stream' | 'dgram' | 'seqpacket' | 'rdm' | 'raw' | 'packet' ) .Sp \&\fB\s-1PROTOCOL\s0\fR = ( 'tcp' | 'udp' | 'icmp' ) .Sp \&\fB\s-1MOUNT RULE\s0\fR = ( \fI\s-1MOUNT\s0\fR | \fI\s-1REMOUNT\s0\fR | \fI\s-1UMOUNT\s0\fR ) .Sp \&\fB\s-1MOUNT\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'mount' [ \fI\s-1MOUNT CONDITIONS\s0\fR ] [ \fI\s-1SOURCE FILEGLOB\s0\fR ] [ '\->' [ \fI\s-1MOUNTPOINT FILEGLOB\s0\fR ] .Sp \&\fB\s-1REMOUNT\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'remount' [ \fI\s-1MOUNT CONDITIONS\s0\fR ] \fI\s-1MOUNTPOINT FILEGLOB\s0\fR .Sp \&\fB\s-1UMOUNT\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'umount' [ \fI\s-1MOUNT CONDITIONS\s0\fR ] \fI\s-1MOUNTPOINT FILEGLOB\s0\fR .Sp \&\fB\s-1MOUNT CONDITIONS\s0\fR = [ ( 'fstype' | 'vfstype' ) ( '=' | 'in' ) \fI\s-1MOUNT FSTYPE EXPRESSION\s0\fR ] [ 'options' ( '=' | 'in' ) \fI\s-1MOUNT FLAGS EXPRESSION\s0\fR ] .Sp \&\fB\s-1MOUNT FSTYPE EXPRESSION\s0\fR = ( \fI\s-1MOUNT FSTYPE LIST\s0\fR | \fI\s-1MOUNT EXPRESSION\s0\fR ) .Sp \&\fB\s-1MOUNT FSTYPE LIST\s0\fR = Comma separated list of valid filesystem and virtual filesystem types (eg ext4, debugfs, devfs, etc) .Sp \&\fB\s-1MOUNT FLAGS EXPRESSION\s0\fR = ( \fI\s-1MOUNT FLAGS LIST\s0\fR | \fI\s-1MOUNT EXPRESSION\s0\fR ) .Sp \&\fB\s-1MOUNT FLAGS LIST\s0\fR = Comma separated list of \fI\s-1MOUNT FLAGS\s0\fR. .Sp \&\fB\s-1MOUNT FLAGS\s0\fR = ( 'ro' | 'rw' | 'nosuid' | 'suid' | 'nodev' | 'dev' | 'noexec' | 'exec' | 'sync' | 'async' | 'remount' | 'mand' | 'nomand' | 'dirsync' | 'noatime' | 'atime' | 'nodiratime' | 'diratime' | 'bind' | 'rbind' | 'move' | 'verbose' | 'silent' | 'loud' | 'acl' | 'noacl' | 'unbindable' | 'runbindable' | 'private' | 'rprivate' | 'slave' | 'rslave' | 'shared' | 'rshared' | 'relatime' | 'norelatime' | 'iversion' | 'noiversion' | 'strictatime' | 'nouser' | 'user' ) .Sp \&\fB\s-1MOUNT EXPRESSION\s0\fR = ( \fI\s-1ALPHANUMERIC\s0\fR | \fI\s-1AARE\s0\fR ) ... .Sp \&\fB\s-1PIVOT ROOT RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] pivot_root [ oldroot=\fI\s-1OLD PUT FILEGLOB\s0\fR ] [ \fI\s-1NEW ROOT FILEGLOB\s0\fR ] [ '\->' \fI\s-1PROFILE NAME\s0\fR ] .Sp \&\fB\s-1SOURCE FILEGLOB\s0\fR = \fI\s-1FILEGLOB\s0\fR .Sp \&\fB\s-1MOUNTPOINT FILEGLOB\s0\fR = \fI\s-1FILEGLOB\s0\fR .Sp \&\fB\s-1OLD PUT FILEGLOB\s0\fR = \fI\s-1FILEGLOB\s0\fR .Sp \&\fB\s-1PTRACE_RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'ptrace' [ \fI\s-1PTRACE ACCESS PERMISSIONS\s0\fR ] [ \fI\s-1PTRACE PEER\s0\fR ] .Sp \&\fB\s-1PTRACE ACCESS PERMISSIONS\s0\fR = \fI\s-1PTRACE ACCESS\s0\fR | \fI\s-1PTRACE ACCESS LIST\s0\fR .Sp \&\fB\s-1PTRACE ACCESS LIST\s0\fR = '(' Comma or space separated list of \fI\s-1PTRACE ACCESS\s0\fR ')' .Sp \&\fB\s-1PTRACE ACCESS\s0\fR = ( 'r' | 'w' | 'rw' | 'read' | 'readby' | 'trace' | 'tracedby' ) .Sp \&\fB\s-1PTRACE PEER\s0\fR = 'peer' '=' \fI\s-1AARE\s0\fR .Sp \&\fB\s-1SIGNAL_RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'signal' [ \fI\s-1SIGNAL ACCESS PERMISSIONS\s0\fR ] [ \fI\s-1SIGNAL SET\s0\fR ] [ \fI\s-1SIGNAL PEER\s0\fR ] .Sp \&\fB\s-1SIGNAL ACCESS PERMISSIONS\s0\fR = \fI\s-1SIGNAL ACCESS\s0\fR | \fI\s-1SIGNAL ACCESS LIST\s0\fR .Sp \&\fB\s-1SIGNAL ACCESS LIST\s0\fR = '(' Comma or space separated list of \fI\s-1SIGNAL ACCESS\s0\fR ')' .Sp \&\fB\s-1SIGNAL ACCESS\s0\fR = ( 'r' | 'w' | 'rw' | 'read' | 'write' | 'send' | 'receive' ) .Sp \&\fB\s-1SIGNAL SET\s0\fR = 'set' '=' '(' \fI\s-1SIGNAL LIST\s0\fR ')' .Sp \&\fB\s-1SIGNAL LIST\s0\fR = Comma or space separated list of \fI\s-1SIGNALS\s0\fR .Sp \&\fB\s-1SIGNALS\s0\fR = ( 'hup' | 'int' | 'quit' | 'ill' | 'trap' | 'abrt' | 'bus' | 'fpe' | 'kill' | 'usr1' | 'segv' | 'usr2' | 'pipe' | 'alrm' | 'term' | 'stkflt' | 'chld' | 'cont' | 'stop' | 'stp' | 'ttin' | 'ttou' | 'urg' | 'xcpu' | 'xfsz' | 'vtalrm' | 'prof' | 'winch' | 'io' | 'pwr' | 'sys' | 'emt' | 'exists' | 'rtmin+0' ... 'rtmin+32' ) .Sp \&\fB\s-1SIGNAL PEER\s0\fR = 'peer' '=' \fI\s-1AARE\s0\fR .Sp \&\fB\s-1DBUS RULE\s0\fR = ( \fI\s-1DBUS MESSAGE RULE\s0\fR | \fI\s-1DBUS SERVICE RULE\s0\fR | \fI\s-1DBUS EAVESDROP RULE\s0\fR | \fI\s-1DBUS COMBINED RULE\s0\fR ) .Sp \&\fB\s-1DBUS MESSAGE RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'dbus' [ \fI\s-1DBUS ACCESS EXPRESSION\s0\fR ] [ \fI\s-1DBUS BUS\s0\fR ] [ \fI\s-1DBUS PATH\s0\fR ] [ \fI\s-1DBUS INTERFACE\s0\fR ] [ \fI\s-1DBUS MEMBER\s0\fR ] [ \fI\s-1DBUS PEER\s0\fR ] .Sp \&\fB\s-1DBUS SERVICE RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'dbus' [ \fI\s-1DBUS ACCESS EXPRESSION\s0\fR ] [ \fI\s-1DBUS BUS\s0\fR ] [ \fI\s-1DBUS NAME\s0\fR ] .Sp \&\fB\s-1DBUS EAVESDROP RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'dbus' [ \fI\s-1DBUS ACCESS EXPRESSION\s0\fR ] [ \fI\s-1DBUS BUS\s0\fR ] .Sp \&\fB\s-1DBUS COMBINED RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'dbus' [ \fI\s-1DBUS ACCESS EXPRESSION\s0\fR ] [ \fI\s-1DBUS BUS\s0\fR ] .Sp \&\fB\s-1DBUS ACCESS EXPRESSION\s0\fR = ( \fI\s-1DBUS ACCESS\s0\fR | '(' \fI\s-1DBUS ACCESS LIST\s0\fR ')' ) .Sp \&\fB\s-1DBUS BUS\s0\fR = 'bus' '=' '(' 'system' | 'session' | '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' .Sp \&\fB\s-1DBUS PATH\s0\fR = 'path' '=' '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' .Sp \&\fB\s-1DBUS INTERFACE\s0\fR = 'interface' '=' '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' .Sp \&\fB\s-1DBUS MEMBER\s0\fR = 'member' '=' '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' .Sp \&\fB\s-1DBUS PEER\s0\fR = 'peer' '=' '(' [ \fI\s-1DBUS NAME\s0\fR ] [ \fI\s-1DBUS LABEL\s0\fR ] ')' .Sp \&\fB\s-1DBUS NAME\s0\fR = 'name' '=' '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' .Sp \&\fB\s-1DBUS LABEL\s0\fR = 'label' '=' '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' .Sp \&\fB\s-1DBUS ACCESS LIST\s0\fR = Comma separated list of \fI\s-1DBUS ACCESS\s0\fR .Sp \&\fB\s-1DBUS ACCESS\s0\fR = ( 'send' | 'receive' | 'bind' | 'eavesdrop' | 'r' | 'read' | 'w' | 'write' | 'rw' ) Some accesses are incompatible with some rules; see below. .Sp \&\fB\s-1AARE\s0\fR = \fB?*[]{}^\fR See below for meanings. .Sp \&\fB\s-1UNIX RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] 'unix' [ \fI\s-1UNIX ACCESS EXPR\s0\fR ] [ \fI\s-1UNIX RULE CONDS\s0\fR ] [ \fI\s-1UNIX LOCAL EXPR\s0\fR ] [ \fI\s-1UNIX PEER EXPR\s0\fR ] .Sp \&\fB\s-1UNIX ACCESS EXPR\s0\fR = ( \fI\s-1UNIX ACCESS\s0\fR | \fI\s-1UNIX ACCESS LIST\s0\fR ) .Sp \&\fB\s-1UNIX ACCESS\s0\fR = ( 'create' | 'bind' | 'listen' | 'accept' | 'connect' | 'shutdown' | 'getattr' | 'setattr' | 'getopt' | 'setopt' | 'send' | 'receive' | 'r' | 'w' | 'rw' ) Some access modes are incompatible with some rules or require additional parameters. .Sp \&\fB\s-1UNIX ACCESS LIST\s0\fR = '(' \fI\s-1UNIX ACCESS\s0\fR ( [','] \fI\s-1UNIX ACCESS\s0\fR )* ')' .Sp \&\fB\s-1UNIX RULE CONDS\s0\fR = ( \fI\s-1TYPE COND\s0\fR | \fI\s-1PROTO COND\s0\fR ) Each cond can appear at most once. .Sp \&\fB\s-1TYPE COND\s0\fR = 'type' '=' ( \fI\s-1AARE\s0\fR | '(' ( '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR )+ ')' ) .Sp \&\fB\s-1PROTO COND\s0\fR = 'protocol' '=' ( \fI\s-1AARE\s0\fR | '(' ( '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR )+ ')' ) .Sp \&\fB\s-1UNIX LOCAL EXPR\s0\fR = ( \fI\s-1UNIX ADDRESS COND\s0\fR | \fI\s-1UNIX LABEL COND\s0\fR | \fI\s-1UNIX ATTR COND\s0\fR | \fI\s-1UNIX OPT COND\s0\fR )* Each cond can appear at most once. .Sp \&\fB\s-1UNIX PEER EXPR\s0\fR = 'peer' '=' ( \fI\s-1UNIX ADDRESS COND\s0\fR | \fI\s-1UNIX LABEL COND\s0\fR )+ Each cond can appear at most once. .Sp \&\fB\s-1UNIX ADDRESS COND\s0\fR 'addr' '=' ( \fI\s-1AARE\s0\fR | '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' ) .Sp \&\fB\s-1UNIX LABEL COND\s0\fR 'label' '=' ( \fI\s-1AARE\s0\fR | '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' ) .Sp \&\fB\s-1UNIX ATTR COND\s0\fR 'attr' '=' ( \fI\s-1AARE\s0\fR | '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' ) .Sp \&\fB\s-1UNIX OPT COND\s0\fR 'opt' '=' ( \fI\s-1AARE\s0\fR | '(' '"' \fI\s-1AARE\s0\fR '"' | \fI\s-1AARE\s0\fR ')' ) .Sp \&\fB\s-1RLIMIT RULE\s0\fR = 'set' 'rlimit' [\fI\s-1RLIMIT\s0\fR '<=' \fI\s-1RLIMIT VALUE\s0\fR ] .Sp \&\fB\s-1RLIMIT\s0\fR = ( 'cpu' | 'fsize' | 'data' | 'stack' | 'core' | 'rss' | 'nofile' | 'ofile' | 'as' | 'nproc' | 'memlock' | 'locks' | 'sigpending' | 'msgqueue' | 'nice' | 'rtprio' | 'rttime' ) .Sp \&\fB\s-1RLIMIT VALUE\s0\fR = ( \fI\s-1RLIMIT SIZE\s0\fR | \fI\s-1RLIMIT NUMBER\s0\fR | \fI\s-1RLIMIT TIME\s0\fR | \fI\s-1RLIMIT NICE\s0\fR ) .Sp \&\fB\s-1RLIMIT SIZE\s0\fR = \fI\s-1NUMBER\s0\fR ( 'K' | 'M' | 'G' ) Only applies to \s-1RLIMIT\s0 of 'fsize', 'data', 'stack', 'core', 'rss', 'as', 'memlock', 'msgqueue'. .Sp \&\fB\s-1RLIMIT NUMBER\s0\fR = number from 0 to max rlimit value. Only applies to \s-1RLIMIT\s0 of 'ofile', 'nofile', 'locks', 'sigpending', 'nproc', 'rtprio'. .Sp \&\fB\s-1RLIMIT TIME\s0\fR = \fI\s-1NUMBER\s0\fR ( 'us' | 'microsecond' | 'microseconds' | 'ms' | 'millisecond' | 'milliseconds' | 's' | 'sec' | 'second' | 'seconds' | 'min' | 'minute' | 'minutes' | 'h' | 'hour' | 'hours' | 'd' | 'day' | 'days' | 'week' | 'weeks' ) Only applies to \s-1RLIMIT\s0 of 'cpu' and 'rttime'. \s-1RLIMIT \s0'cpu' only allows units >= 'seconds'. .Sp \&\fB\s-1RLIMIT NICE\s0\fR = a number between \-20 and 19. Only applies to \s-1RLIMIT\s0 of 'nice'. .Sp \&\fB\s-1FILE RULE\s0\fR = [ \fI\s-1QUALIFIERS\s0\fR ] [ 'owner' ] ( 'file' | [ 'file' ] ( \fI\s-1FILEGLOB\s0\fR \fI\s-1ACCESS\s0\fR | \fI\s-1ACCESS\s0\fR \fI\s-1FILEGLOB\s0\fR ) [ '\->' \fI\s-1EXEC TARGET\s0\fR ] ) .Sp \&\fB\s-1FILEGLOB\s0\fR = ( \fI\s-1QUOTED FILEGLOB\s0\fR | \fI\s-1UNQUOTED FILEGLOB\s0\fR ) .Sp \&\fB\s-1QUOTED FILEGLOB\s0\fR = '"' \fI\s-1UNQUOTED FILEGLOB\s0\fR '"' .Sp \&\fB\s-1UNQUOTED FILEGLOB\s0\fR = (must start with '/' (after variable expansion), \fB\s-1AARE\s0\fR have special meanings; see below. May include \fI\s-1VARIABLE\s0\fR. Rules with embedded spaces or tabs must be quoted. Rules must end with '/' to apply to directories.) .Sp \&\fB\s-1ACCESS\s0\fR = ( 'r' | 'w' | 'a' | 'l' | 'k' | 'm' | \fI\s-1EXEC TRANSITION\s0\fR )+ (not all combinations are allowed; see below.) .Sp \&\fB\s-1EXEC TRANSITION\s0\fR = ( 'ix' | 'ux' | 'Ux' | 'px' | 'Px' | 'cx' | 'Cx' | 'pix' | 'Pix' | 'cix' | 'Cix' | 'pux' | 'PUx' | 'cux' | 'CUx' | 'x' ) A bare 'x' is only allowed in rules with the deny qualifier, everything else only without the deny qualifier. .Sp \&\fB\s-1EXEC TARGET\s0\fR = name Requires \fI\s-1EXEC TRANSITION\s0\fR specified. .Sp \&\fB\s-1LINK RULE\s0\fR = \fI\s-1QUALIFIERS\s0\fR [ 'owner' ] 'link' [ 'subset' ] \fI\s-1FILEGLOB\s0\fR ( 'to' | '\->' ) \fI\s-1FILEGLOB\s0\fR .Sp \&\fB\s-1ALPHA\s0\fR = ('a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z') .Sp \&\fB\s-1ALPHANUMERIC\s0\fR = ('0', '1', '2', ... '9', 'a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z') .Sp \&\fB\s-1CHANGE_PROFILE RULE\s0\fR = 'change_profile' [ [ \fI\s-1EXEC MODE\s0\fR ] \fI\s-1EXEC COND\s0\fR ] [ '\->' \fI\s-1PROFILE NAME\s0\fR ] .Sp \&\fB\s-1EXEC_MODE\s0\fR = ( 'safe' | 'unsafe' ) .Sp \&\fB\s-1EXEC COND\s0\fR = \fI\s-1FILEGLOB\s0\fR .RE .PP All resources and programs need a full path. There may be any number of subprofiles (aka child profiles) in a profile, limited only by kernel memory. Subprofile names are limited to 974 characters. Child profiles can be used to confine an application in a special way, or when you want the child to be unconfined on the system, but confined when called from the parent. Hats are a special child profile that can be used with the \&\fIaa_change_hat\fR\|(2) \s-1API\s0 call. Applications written or modified to use \&\fIaa_change_hat\fR\|(2) can take advantage of subprofiles to run under different confinements, dependent on program logic. Several \fIaa_change_hat\fR\|(2)\-aware applications exist, including an Apache module, \fImod_apparmor\fR\|(5); a \s-1PAM\s0 module, pam_apparmor; and a Tomcat valve, tomcat_apparmor. Applications written or modified to use \fIchange_profile\fR\|(2) transition permanently to the specified profile. libvirt is one such application. .SS "Access Modes" .IX Subsection "Access Modes" File permission access modes consists of combinations of the following modes: .IP "\fBr\fR" 8 .IX Item "r" \&\- read .IP "\fBw\fR" 8 .IX Item "w" \&\- write \*(-- conflicts with append .IP "\fBa\fR" 8 .IX Item "a" \&\- append \*(-- conflicts with write .IP "\fBux\fR" 8 .IX Item "ux" \&\- unconfined execute .IP "\fBUx\fR" 8 .IX Item "Ux" \&\- unconfined execute \*(-- scrub the environment .IP "\fBpx\fR" 8 .IX Item "px" \&\- discrete profile execute .IP "\fBPx\fR" 8 .IX Item "Px" \&\- discrete profile execute \*(-- scrub the environment .IP "\fBcx\fR" 8 .IX Item "cx" \&\- transition to subprofile on execute .IP "\fBCx\fR" 8 .IX Item "Cx" \&\- transition to subprofile on execute \*(-- scrub the environment .IP "\fBix\fR" 8 .IX Item "ix" \&\- inherit execute .IP "\fBpix\fR" 8 .IX Item "pix" \&\- discrete profile execute with inherit fallback .IP "\fBPix\fR" 8 .IX Item "Pix" \&\- discrete profile execute with inherit fallback \*(-- scrub the environment .IP "\fBcix\fR" 8 .IX Item "cix" \&\- transition to subprofile on execute with inherit fallback .IP "\fBCix\fR" 8 .IX Item "Cix" \&\- transition to subprofile on execute with inherit fallback \*(-- scrub the environment .IP "\fBpux\fR" 8 .IX Item "pux" \&\- discrete profile execute with fallback to unconfined .IP "\fBPUx\fR" 8 .IX Item "PUx" \&\- discrete profile execute with fallback to unconfined \*(-- scrub the environment .IP "\fBcux\fR" 8 .IX Item "cux" \&\- transition to subprofile on execute with fallback to unconfined .IP "\fBCUx\fR" 8 .IX Item "CUx" \&\- transition to subprofile on execute with fallback to unconfined \*(-- scrub the environment .IP "\fBdeny x\fR" 8 .IX Item "deny x" \&\- disallow execute (in rules with the deny qualifier) .IP "\fBm\fR" 8 .IX Item "m" \&\- allow \s-1PROT_EXEC\s0 with \fImmap\fR\|(2) calls .IP "\fBl\fR" 8 .IX Item "l" \&\- link .IP "\fBk\fR" 8 .IX Item "k" \&\- lock .SS "Access Modes Details" .IX Subsection "Access Modes Details" .IP "\fBr \- Read mode\fR" 4 .IX Item "r - Read mode" Allows the program to have read access to the file or directory listing. Read access is required for shell scripts and other interpreted content. .IP "\fBw \- Write mode\fR" 4 .IX Item "w - Write mode" Allows the program to have write access to the file. Files and directories must have this permission if they are to be unlinked (removed.) Write mode is not required on a directory to rename or create files within the directory. .Sp This mode conflicts with append mode. .IP "\fBa \- Append mode\fR" 4 .IX Item "a - Append mode" Allows the program to have a limited appending only write access to the file. Append mode will prevent an application from opening the file for write unless it passes the O_APPEND parameter flag on open. .Sp The mode conflicts with Write mode. .IP "\fBux \- Unconfined execute mode\fR" 4 .IX Item "ux - Unconfined execute mode" Allows the program to execute the program without any AppArmor profile being applied to the program. .Sp This mode is useful when a confined program needs to be able to perform a privileged operation, such as rebooting the machine. By placing the privileged section in another executable and granting unconfined execution rights, it is possible to bypass the mandatory constraints imposed on all confined processes. For more information on what is constrained, see the \fIapparmor\fR\|(7) man page. .Sp \&\fB\s-1WARNING\s0\fR 'ux' should only be used in very special cases. It enables the designated child processes to be run without any AppArmor protection. \&'ux' does not scrub the environment of variables such as \s-1LD_PRELOAD\s0; as a result, the calling domain may have an undue amount of influence over the callee. Use this mode only if the child absolutely must be run unconfined and \s-1LD_PRELOAD\s0 must be used. Any profile using this mode provides negligible security. Use at your own risk. .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBUx \- unconfined execute \*(-- scrub the environment\fR" 4 .IX Item "Ux - unconfined execute scrub the environment" \&'Ux' allows the named program to run in 'ux' mode, but AppArmor will invoke the Linux Kernel's \fBunsafe_exec\fR routines to scrub the environment, similar to setuid programs. (See \fIld.so\fR\|(8) for some information on setuid/setgid environment scrubbing.) .Sp \&\fB\s-1WARNING\s0\fR 'Ux' should only be used in very special cases. It enables the designated child processes to be run without any AppArmor protection. Use this mode only if the child absolutely must be run unconfined. Use at your own risk. .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBpx \- Discrete Profile execute mode\fR" 4 .IX Item "px - Discrete Profile execute mode" This mode requires that a discrete security profile is defined for a program executed and forces an AppArmor domain transition. If there is no profile defined then the access will be denied. .Sp \&\fB\s-1WARNING\s0\fR 'px' does not scrub the environment of variables such as \&\s-1LD_PRELOAD\s0; as a result, the calling domain may have an undue amount of influence over the callee. .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBPx \- Discrete Profile execute mode \*(-- scrub the environment\fR" 4 .IX Item "Px - Discrete Profile execute mode scrub the environment" \&'Px' allows the named program to run in 'px' mode, but AppArmor will invoke the Linux Kernel's \fBunsafe_exec\fR routines to scrub the environment, similar to setuid programs. (See \fIld.so\fR\|(8) for some information on setuid/setgid environment scrubbing.) .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBcx \- Transition to Subprofile execute mode\fR" 4 .IX Item "cx - Transition to Subprofile execute mode" This mode requires that a local security profile is defined and forces an AppArmor domain transition to the named profile. If there is no profile defined then the access will be denied. .Sp \&\fB\s-1WARNING\s0\fR 'cx' does not scrub the environment of variables such as \&\s-1LD_PRELOAD\s0; as a result, the calling domain may have an undue amount of influence over the callee. .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBCx \- Transition to Subprofile execute mode \*(-- scrub the environment\fR" 4 .IX Item "Cx - Transition to Subprofile execute mode scrub the environment" \&'Cx' allows the named program to run in 'cx' mode, but AppArmor will invoke the Linux Kernel's \fBunsafe_exec\fR routines to scrub the environment, similar to setuid programs. (See \fIld.so\fR\|(8) for some information on setuid/setgid environment scrubbing.) .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBix \- Inherit execute mode\fR" 4 .IX Item "ix - Inherit execute mode" Prevent the normal AppArmor domain transition on \fIexecve\fR\|(2) when the profiled program executes the named program. Instead, the executed resource will inherit the current profile. .Sp This mode is useful when a confined program needs to call another confined program without gaining the permissions of the target's profile, or losing the permissions of the current profile. There is no version to scrub the environment because 'ix' executions don't change privileges. .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBProfile transition with inheritance fallback execute mode\fR" 4 .IX Item "Profile transition with inheritance fallback execute mode" These modes attempt to perform a domain transition as specified by the matching permission (shown below) and if that transition fails to find the matching profile the domain transition proceeds using the 'ix' transition mode. .Sp .Vb 4 \& \*(AqPix\*(Aq == \*(AqPx\*(Aq with fallback to \*(Aqix\*(Aq \& \*(Aqpix\*(Aq == \*(Aqpx\*(Aq with fallback to \*(Aqix\*(Aq \& \*(AqCix\*(Aq == \*(AqCx\*(Aq with fallback to \*(Aqix\*(Aq \& \*(Aqcix\*(Aq == \*(Aqcx\*(Aq with fallback to \*(Aqix\*(Aq .Ve .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBProfile transition with unconfined fallback execute mode\fR" 4 .IX Item "Profile transition with unconfined fallback execute mode" These modes attempt to perform a domain transition as specified by the matching permission (shown below) and if that transition fails to find the matching profile the domain transition proceeds using the 'ux' transition mode if 'pux', 'cux' or the 'Ux' transition mode if 'PUx', 'CUx' is used. .Sp .Vb 4 \& \*(AqPUx\*(Aq == \*(AqPx\*(Aq with fallback to \*(AqUx\*(Aq \& \*(Aqpux\*(Aq == \*(Aqpx\*(Aq with fallback to \*(Aqux\*(Aq \& \*(AqCUx\*(Aq == \*(AqCx\*(Aq with fallback to \*(AqUx\*(Aq \& \*(Aqcux\*(Aq == \*(Aqcx\*(Aq with fallback to \*(Aqux\*(Aq .Ve .Sp Incompatible with other exec transition modes and the deny qualifier. .IP "\fBdeny x \- Deny execute\fR" 4 .IX Item "deny x - Deny execute" For rules including the deny modifier, only 'x' is allowed to deny execute. .Sp The 'ix', 'Px', 'px', 'Cx', 'cx' and the fallback modes conflict with the deny modifier. .IP "\fBDirected profile transitions\fR" 4 .IX Item "Directed profile transitions" The directed ('px', 'Px', 'pix', 'Pix', 'pux', 'PUx') profile and subprofile ('cx', 'Cx', 'cix', 'Cix', 'cux', 'CUx') transitions normally determine the profile to transition to from the executable name. It is however possible to specify the name of the profile that the transition should use. .Sp The name of the profile to transition to is specified using the '\->' followed by the name of the profile to transition to. Eg. .Sp .Vb 1 \& /bin/** px \-> profile, .Ve .Sp Incompatible with other exec transition modes. .IP "\fBm \- Allow executable mapping\fR" 4 .IX Item "m - Allow executable mapping" This mode allows a file to be mapped into memory using \fImmap\fR\|(2)'s \&\s-1PROT_EXEC\s0 flag. This flag marks the pages executable; it is used on some architectures to provide non-executable data pages, which can complicate exploit attempts. AppArmor uses this mode to limit which files a well-behaved program (or all programs on architectures that enforce non-executable memory access controls) may use as libraries, to limit the effect of invalid \fB\-L\fR flags given to \fIld\fR\|(1) and \fB\s-1LD_PRELOAD\s0\fR, \&\fB\s-1LD_LIBRARY_PATH\s0\fR, given to \fIld.so\fR\|(8). .IP "\fBl \- Link mode\fR" 4 .IX Item "l - Link mode" Allows the program to be able to create a link with this name. When a link is created, the new link \fB\s-1MUST\s0\fR have a subset of permissions as the original file (with the exception that the destination does not have to have link access.) If there is an 'x' rule on the new link, it must match the original file exactly. .IP "\fBk \- lock mode\fR" 4 .IX Item "k - lock mode" Allows the program to be able lock a file with this name. This permission covers both advisory and mandatory locking. .IP "\fBleading \s-1OR\s0 trailing access permissions\fR" 4 .IX Item "leading OR trailing access permissions" File rules can be specified with the access permission either leading or trailing the file glob. Eg. .Sp .Vb 1 \& rw /**, # leading permissions \& \& /** rw, # trailing permissions .Ve .Sp When leading permissions are used further rule options and context may be allowed, Eg. .Sp .Vb 1 \& l /foo \-> /bar, # lead \*(Aql\*(Aq link permission is equivalent to link rules .Ve .SS "Link rules" .IX Subsection "Link rules" Link rules allow specifying permission to form a hard link as a link target pair. If the subset condition is specified then the permissions to access the link file must be a subset of the profiles permissions to access the target file. If there is an 'x' rule on the new link, it must match the original file exactly. .PP Eg. .PP .Vb 4 \& /file1 r, \& /file2 rwk, \& /link* rw, \& link subset /link* \-> /**, .Ve .PP The link rule allows linking of /link to both /file1 or /file2 by name however because the /link file has 'rw' permissions it is not allowed to link to /file1 because that would grant an access path to /file1 with more permissions than the 'r' permissions the profile specifies. .PP A link of /link to /file2 would be allowed because the 'rw' permissions of /link are a subset of the 'rwk' permissions for /file1. .PP The link rule is equivalent to specifying the 'l' link permission as a leading permission with no other file access permissions. When this is done the link rule options can be specified. .PP The following link rule is equivalent to the 'l' permission file rule .PP .Vb 2 \& link /foo \-> bar, \& l /foo \-> /bar, .Ve .PP File rules that specify the 'l' permission and don't specify the extend link permissions map to link rules as follows. .PP .Vb 3 \& /foo l, \& l /foo, \& link subset /foo \-> /**, .Ve .SS "Comments" .IX Subsection "Comments" Comments start with # and may begin at any place within a line. The comment ends when the line ends. This is the same comment style as shell scripts. .SS "Capabilities" .IX Subsection "Capabilities" The only capabilities a confined process may use may be enumerated; for the complete list, please refer to \fIcapabilities\fR\|(7). Note that granting some capabilities renders AppArmor confinement for that domain advisory; while \fIopen\fR\|(2), \fIread\fR\|(2), \fIwrite\fR\|(2), etc., will still return error when access is not granted, some capabilities allow loading kernel modules, arbitrary access to \s-1IPC,\s0 ability to bypass discretionary access controls, and other operations that are typically reserved for the root user. .SS "Network Rules" .IX Subsection "Network Rules" AppArmor supports simple coarse grained network mediation. The network rule restrict all \fIsocket\fR\|(2) based operations. The mediation done is a course grained check on whether a socket of a given type and family can be created, read, or written. There is no mediation based of port number or protocol beyond tcp, udp, and raw. Network \fInetlink\fR\|(7) rules may only specify type 'dgram' and 'raw'. .PP AppArmor network rules are accumulated so that the granted network permissions are the union of all the listed network rule permissions. .PP AppArmor network rules are broad and general and become more restrictive as further information is specified. .PP eg. .PP .Vb 5 \& network, #allow access to all networking \& network tcp, #allow access to tcp \& network inet tcp, #allow access to tcp only for inet4 addresses \& network inet6 tcp, #allow access to tcp only for inet6 addresses \& network netlink raw, #allow access to AF_NETLINK SOCK_RAW .Ve .SS "Mount Rules" .IX Subsection "Mount Rules" AppArmor supports mount mediation and allows specifying filesystem types and mount flags. The syntax of mount rules in AppArmor is based on the \fImount\fR\|(8) command syntax. Mount rules must contain one of the mount, remount or umount keywords, but all mount conditions are optional. Unspecified optional conditionals are assumed to match all entries (eg, not specifying fstype means all fstypes are matched). Due to the complexity of the mount command and how options may be specified, AppArmor allows specifying conditionals three different ways: .IP "1." 4 If a conditional is specified using '=', then the rule only grants permission for mounts matching the exactly specified options. For example, an AppArmor policy with the following rule: .Sp .Vb 1 \& mount options=ro /dev/foo \-E /mnt/, .Ve .Sp Would match: .Sp .Vb 1 \& $ mount \-o ro /dev/foo /mnt .Ve .Sp but not either of these: .Sp .Vb 1 \& $ mount \-o ro,atime /dev/foo /mnt \& \& $ mount \-o rw /dev/foo /mnt .Ve .IP "2." 4 If a conditional is specified using 'in', then the rule grants permission for mounts matching any combination of the specified options. For example, if an AppArmor policy has the following rule: .Sp .Vb 1 \& mount options in (ro,atime) /dev/foo \-> /mnt/, .Ve .Sp all of these mount commands will match: .Sp .Vb 1 \& $ mount \-o ro /dev/foo /mnt \& \& $ mount \-o ro,atime /dev/foo /mnt \& \& $ mount \-o atime /dev/foo /mnt .Ve .Sp but none of these will: .Sp .Vb 1 \& $ mount \-o ro,sync /dev/foo /mnt \& \& $ mount \-o ro,atime,sync /dev/foo /mnt \& \& $ mount \-o rw /dev/foo /mnt \& \& $ mount \-o rw,noatime /dev/foo /mnt \& \& $ mount /dev/foo /mnt .Ve .IP "3." 4 If multiple conditionals are specified in a single mount rule, then the rule grants permission for each set of options. This provides a shorthand when writing mount rules which might help to logically break up a conditional. For example, if an AppArmor policy has the following rule: .Sp .Vb 1 \& mount options=ro options=atime .Ve .Sp both of these mount commands will match: .Sp .Vb 1 \& $ mount \-o ro /dev/foo /mnt \& \& $ mount \-o atime /dev/foo /mnt .Ve .Sp but this one will not: .Sp .Vb 1 \& $ mount \-o ro,atime /dev/foo /mnt .Ve .PP Note that separate mount rules are distinct and the options do not accumulate. For example, these AppArmor mount rules: .PP .Vb 1 \& mount options=ro, \& \& mount options=atime, .Ve .PP are not equivalent to either of these mount rules: .PP .Vb 1 \& mount options=(ro,atime), \& \& mount options in (ro,atime), .Ve .PP To help clarify the flexibility and complexity of mount rules, here are some example rules with accompanying matching commands: .IP "\fBmount,\fR" 4 .IX Item "mount," the 'mount' rule without any conditionals is the most generic and allows any mount. Equivalent to 'mount fstype=** options=** ** \-> /**'. .IP "\fBmount /dev/foo,\fR" 4 .IX Item "mount /dev/foo," allow mounting of /dev/foo anywhere with any options. Some matching mount commands: .Sp .Vb 1 \& $ mount /dev/foo /mnt \& \& $ mount \-t ext3 /dev/foo /mnt \& \& $ mount \-t vfat /dev/foo /mnt \& \& $ mount \-o ro,atime,noexec,nodiratime /dev/foo /srv/some/mountpoint .Ve .IP "\fBmount options=ro /dev/foo,\fR" 4 .IX Item "mount options=ro /dev/foo," allow mounting of /dev/foo anywhere, as read only. Some matching mount commands: .Sp .Vb 1 \& $ mount \-o ro /dev/foo /mnt \& \& $ mount \-o ro /dev/foo /some/where/else .Ve .IP "\fBmount options=(ro,atime) /dev/foo,\fR" 4 .IX Item "mount options=(ro,atime) /dev/foo," allow mount of /dev/foo anywhere, as read only and using inode access times. Some matching mount commands: .Sp .Vb 1 \& $ mount \-o ro,atime /dev/foo /mnt \& \& $ mount \-o ro,atime /dev/foo /some/where/else .Ve .IP "\fBmount options in (ro,atime) /dev/foo,\fR" 4 .IX Item "mount options in (ro,atime) /dev/foo," allow mount of /dev/foo anywhere using some combination of 'ro' and 'atime' (see above). Some matching mount commands: .Sp .Vb 1 \& $ mount \-o ro /dev/foo /mnt \& \& $ mount \-o atime /dev/foo /some/where/else \& \& $ mount \-o ro,atime /dev/foo /some/other/place .Ve .IP "\fBmount options=ro /dev/foo, mount options=atime /dev/foo,\fR" 4 .IX Item "mount options=ro /dev/foo, mount options=atime /dev/foo," allow mount of /dev/foo anywhere as read only, and allow mount of /dev/foo anywhere using inode access times. Note this is expressed as two different rules. Matches: .Sp .Vb 1 \& $ mount \-o ro /dev/foo /mnt/1 \& \& $ mount \-o atime /dev/foo /mnt/2 .Ve .IP "\fBmount \-> /mnt/**,\fR" 4 .IX Item "mount -> /mnt/**," allow mounting anything under a directory in /mnt/**. Some matching mount commands: .Sp .Vb 1 \& $ mount /dev/foo1 /mnt/1 \& \& $ mount \-o ro,atime,noexec,nodiratime /dev/foo2 /mnt/deep/path/foo2 .Ve .IP "\fBmount options=ro \-> /mnt/**,\fR" 4 .IX Item "mount options=ro -> /mnt/**," allow mounting anything under /mnt/**, as read only. Some matching mount commands: .Sp .Vb 1 \& $ mount \-o ro /dev/foo1 /mnt/1 \& \& $ mount \-o ro /dev/foo2 /mnt/deep/path/foo2 .Ve .IP "\fBmount fstype=ext3 options=(rw,atime) /dev/sdb1 \-> /mnt/stick/,\fR" 4 .IX Item "mount fstype=ext3 options=(rw,atime) /dev/sdb1 -> /mnt/stick/," allow mounting an ext3 filesystem in /dev/sdb1 on /mnt/stick as read/write and using inode access times. Matches only: .Sp .Vb 1 \& $ mount \-o rw,atime /dev/sdb1 /mnt/stick .Ve .IP "\fBmount options=(ro, atime) options in (nodev, user) /dev/foo \-> /mnt/,\fR" 4 .IX Item "mount options=(ro, atime) options in (nodev, user) /dev/foo -> /mnt/," allow mounting /dev/foo on /mmt/ read only and using inode access times or allow mounting /dev/foo on /mnt/ with some combination of 'nodev' and 'user'. Matches only: .Sp .Vb 1 \& $ mount \-o ro,atime /dev/foo /mnt \& \& $ mount \-o nodev /dev/foo /mnt \& \& $ mount \-o user /dev/foo /mnt \& \& $ mount \-o nodev,user /dev/foo /mnt .Ve .SS "Pivot Root Rules" .IX Subsection "Pivot Root Rules" AppArmor mediates changing of the root filesystem through the \fIpivot_root\fR\|(2) system call. The syntax of 'pivot_root' rules in AppArmor is based on the \&\fIpivot_root\fR\|(2) system call parameters with the notable exception that the ordering is reversed. The path corresponding to the put_old parameter of \&\fIpivot_root\fR\|(2) is optionally specified in the 'pivot_root' rule using the \&'oldroot=' prefix. .PP AppArmor 'pivot_root' rules can specify a profile transition to occur during the \fIpivot_root\fR\|(2) system call. Note that AppArmor will only transition the process calling \fIpivot_root\fR\|(2) to the new profile. .PP The paths specified in 'pivot_root' rules must end with '/' since they are directories. .PP Here are some example 'pivot_root' rules: .PP .Vb 2 \& # Allow any pivot \& pivot_root, \& \& # Allow pivoting to any new root directory and putting the old root \& # directory at /mnt/root/old/ \& pivot_root oldroot=/mnt/root/old/, \& \& # Allow pivoting the root directory to /mnt/root/ \& pivot_root /mnt/root/, \& \& # Allow pivoting to /mnt/root/ and putting the old root directory at \& # /mnt/root/old/ \& pivot_root oldroot=/mnt/root/old/ /mnt/root/, \& \& # Allow pivoting to /mnt/root/, putting the old root directory at \& # /mnt/root/old/ and transition to the /mnt/root/sbin/init profile \& pivot_root oldroot=/mnt/root/old/ /mnt/root/ \-> /mnt/root/sbin/init, .Ve .SS "PTrace rules" .IX Subsection "PTrace rules" AppArmor supports mediation of \fIptrace\fR\|(2). AppArmor PTrace rules are accumulated so that the granted PTrace permissions are the union of all the listed PTrace rule permissions. .PP AppArmor PTrace permissions are implied when a rule does not explicitly state an access list. By default, all PTrace permissions are implied. .PP The trace and tracedby permissions govern \fIptrace\fR\|(2) while read and readby govern certain \fIproc\fR\|(5) filesystem accesses, \fIkcmp\fR\|(2), futexes (\fIget_robust_list\fR\|(2)) and perf trace events. .PP For a ptrace operation to be allowed the profile of the tracing process and the profile of the target task must both have the correct permissions. For example, the profile of the process attaching to another task must have the trace permission for the target task's profile, and the task being traced must have the tracedby permission for the tracing process' profile. .PP Example AppArmor PTrace rules: .PP .Vb 2 \& # Allow all PTrace access \& ptrace, \& \& # Explicitly allow all PTrace access, \& ptrace (read, readby, trace, tracedby), \& \& # Explicitly deny use of ptrace(2) \& deny ptrace (trace), \& \& # Allow unconfined processes (eg, a debugger) to ptrace us \& ptrace (readby, tracedby) peer=unconfined, \& \& # Allow ptrace of a process running under the /usr/bin/foo profile \& ptrace (trace) peer=/usr/bin/foo, .Ve .SS "Signal rules" .IX Subsection "Signal rules" AppArmor supports mediation of \fIsignal\fR\|(7). AppArmor signal rules are accumulated so that the granted signal permissions are the union of all the listed signal rule permissions. .PP AppArmor signal permissions are implied when a rule does not explicitly state an access list. By default, all signal permissions are implied. .PP For the sending of a signal to be allowed, the profile of the sending process and the profile of the target task must both have the correct permissions. For example, the profile of a process sending a signal to another task must have the send permission for the target task's profile, and the task receiving the signal must have a receive permission for the sending process' profile. .PP Example AppArmor signal rules: .PP .Vb 2 \& # Allow all signal access \& signal, \& \& # Explicitly deny sending the HUP and INT signals \& deny signal (send) set=(hup, int), \& \& # Allow unconfined processes to send us signals \& signal (receive) peer=unconfined, \& \& # Allow sending of signals to a process running under the /usr/bin/foo \& # profile \& signal (send) peer=/usr/bin/foo, \& \& # Allow checking for PID existence \& signal (receive, send) set=("exists"), \& \& # Allow us to signal ourselves using the built\-in @{profile_name} variable \& signal peer=@{profile_name}, \& \& # Allow two real\-time signals \& signal set=(rtmin+0 rtmin+32), .Ve .SS "DBus rules" .IX Subsection "DBus rules" AppArmor supports DBus mediation. The mediation is performed in conjunction with the DBus daemon. The DBus daemon verifies that communications over the bus are permitted by AppArmor policy. .PP AppArmor DBus rules are accumulated so that the granted DBus permissions are the union of all the listed DBus rule permissions. .PP AppArmor DBus rules are broad and general and become more restrictive as further information is specified. Policy may be specified down to the interface member level (method or signal name), however the contents of messages are not examined. .PP Some AppArmor DBus permissions are not compatible with all AppArmor DBus rules. The 'bind' permission cannot be used in message rules. The 'send' and 'receive' permissions cannot be used in service rules. The 'eavesdrop' permission cannot be used in rules containing any conditionals outside of the 'bus' conditional. .PP \&'r' and 'read' are synonyms for 'receive'. 'w' and 'write' are synonyms for \&'send'. 'rw' is a synonym for both 'send' and 'receive'. .PP AppArmor DBus permissions are implied when a rule does not explicitly state an access list. By default, all DBus permissions are implied. Only message permissions are implied for message rules and only service permissions are implied for service rules. .PP Example AppArmor DBus rules: .PP .Vb 2 \& # Allow all DBus access \& dbus, \& \& # Explicitly allow all DBus access, \& dbus (send, receive, bind), \& \& # Deny send/receive/bind access to the session bus \& deny dbus bus=session, \& \& # Allow bind access for a particular name on any bus \& dbus bind name=com.example.ExampleName, \& \& # Allow receive access for a particular path and interface \& dbus receive path=/com/example/path interface=com.example.Interface, \& \& # Deny send/receive access to the system bus for a particular interface \& deny dbus bus=system interface=com.example.ExampleInterface, \& \& # Allow send access for a particular path, interface, member, and pair of \& # peer names: \& dbus send \& bus=session \& path=/com/example/path \& interface=com.example.Interface \& member=ExampleMethod \& peer=(name=(com.example.ExampleName1|com.example.ExampleName2)), \& \& # Allow receive access for all unconfined peers \& dbus receive peer=(label=unconfined)), \& \& # Allow eavesdropping on the system bus \& dbus eavesdrop bus=system, \& \& # Allow and audit all eavesdropping \& audit dbus eavesdrop, .Ve .SS "Unix socket rules" .IX Subsection "Unix socket rules" AppArmor supports fine grained mediation of unix domain abstract and anonymous sockets. Unix domain sockets with file system paths are mediated via file access rules. .PP Abstract unix domain sockets is a nonportable Linux extension of unix domain sockets, see \fIunix\fR\|(7) for more information. .PP \fIUnix socket address paths\fR .IX Subsection "Unix socket address paths" .PP The sun_path component (aka the socket address) of a unix domain socket is specified by the .PP .Vb 1 \& addr= .Ve .PP conditional. If an address conditional is not specified as part of a rule then the rule matches both abstract and anonymous sockets. .PP In apparmor the address of an abstract unix domain socket begins with the \fI@\fR character, similar to how they are reported (as paths) by netstat \-x. The address then follows and may contain pattern matching and any characters including the null character. In apparmor null characters must be specified by using an escape sequence \fI\e000\fR or \&\fI\ex00\fR. The pattern matching is the same as is used by file path matching so * will not match \fI/\fR even though it has no special meaning with in an abstract socket name. Eg. .PP .Vb 1 \& unix addr=@*, .Ve .PP Anonymous unix domain sockets have no sun_path associated with the socket address, however it can be specified with the special \fInone\fR keyword to indicate the rule only applies to anonymous unix domain sockets. Eg. .PP .Vb 1 \& unix addr=none, .Ve .PP If the address component of a rule is not specified then the rule applies to both abstract and anonymous sockets. .PP \fIUnix socket permissions\fR .IX Subsection "Unix socket permissions" .PP Unix domain socket rules are accumulated so that the granted unix socket permissions are the union of all the listed unix rule permissions. .PP Unix domain socket rules are broad and general and become more restrictive as further information is specified. Policy may be specified down to the socket address (aka sun_path) and label level. The content of the communication is not examined. .PP Unix socket rule permissions are implied when a rule does not explicitly state an access list. By default if a rule does not have an access list all permissions that are compatible with the specified set of local and peer conditionals are implied. .PP The create, bind, listen, shutdown, getattr, setattr, getopt, and setopt permissions are local socket permissions. They are only applied to the local socket and can't be specified in rules that have a peer component. The accept permission applies to the combination of a local and peer socket. The connect, send, and receive permissions are peer socket permissions. .PP Only the peer socket permissions will be applied to rules that don't specify permissions and contain a peer component. .PP \fIExample Unix domain socket rules:\fR .IX Subsection "Example Unix domain socket rules:" .PP .Vb 2 \& # Allow all permissions to unix sockets \& unix, \& \& # Explicitly allow all unix permissions \& unix (create, listen, accept, connect, send, receive, getattr, setattr, setopt, getopt), \& \& # Explicitly deny unix socket access \& deny unix, \& \& # Allow create and use of abstract and anonymous sockets for profile_name \& unix peer=(label=@{profile_name}), \& \& # Allow receiving via unix sockets from unconfined \& unix (receive) peer=(label=unconfined), \& \& # Allow getattr and shutdown on anonymous sockets \& unix (getattr, shutdown) addr=none, \& \& # Allow SOCK_STREAM connect, receive and send on an abstract socket @bar \& # with peer running under profile \*(Aq/foo\*(Aq \& unix (connect, receive, send) type=stream peer=(label=/foo,addr="@bar"), \& \& # Allow accepting connections from and receiving from peer running under \& # profile \*(Aq/bar\*(Aq on abstract socket \*(Aq@foo\*(Aq \& unix (accept, receive) addr=@foo peer=(label=/bar), .Ve .PP \fIAbstract unix domain sockets autobind\fR .IX Subsection "Abstract unix domain sockets autobind" .PP Abstract unix domain sockets can autobind to an address. The autobind address is a unique 5 digit string of decimal numbers, eg. \f(CW@00001\fR. There is nothing that prevents a task from manually binding to addresses with a similar pattern so it is impossible to reliably identify autobind addresses from a regular address. .PP \fIInteraction of network rules and fine grained unix domain socket rules\fR .IX Subsection "Interaction of network rules and fine grained unix domain socket rules" .PP The coarse grained networking rules can be used to control unix domain sockets as well. When fine grained unix domain socket mediation is available the coarse grained network rule is mapped into the equivalent unix socket rule. .PP E.G. .PP .Vb 1 \& network unix, => unix, \& \& network unix stream, => unix stream, .Ve .PP Fine grained mediation rules however can not be lossly converted back to the coarse grained network rule; e.g. .PP .Vb 1 \& unix bind addr=@example, .Ve .PP Has no exact match under coarse grained network rules, the closest match is the much wider permission rule of .PP .Vb 1 \& network unix, .Ve .SS "change_profile rules" .IX Subsection "change_profile rules" AppArmor supports self directed profile transitions via the change_profile api. Change_profile rules control which permissions for which profiles a confined task can transition to. The profile name can contain apparmor pattern matching to specify different profiles. .PP .Vb 1 \& change_profile \-> **, .Ve .PP The change_profile api allows the transition to be delayed until when a task executes another application. If an exec rule transition is specified for the application and the change_profile api is used to make a transition at exec time, the transition specified by the change_profile api takes precedence. .PP The Change_profile permission can restrict which profiles can be transitioned to based off of the executable name by specifying the exec condition. .PP .Vb 1 \& change_profile /bin/bash \-> new_profile, .Ve .PP The restricting of the transition profile to a given executable at exec time is only useful when then current task is allowed to make dynamic decisions about what confinement should be, but the decision set needs to be controlled. A list of profiles or multiple rules can be used to specify the profiles in the set. Eg. .PP .Vb 1 \& change_profile /bin/bash \-> {new_profile1,new_profile2,new_profile3}, .Ve .PP An exec rule can be used to specify a transition for the executable, if the transition should be allowed even if the change_profile api has not been used to select a transition for those available in the change_profile rule set. Eg. .PP .Vb 2 \& /bin/bash Px \-> new_profile1, \& change_profile /bin/bash \-> {new_profile1,new_profile2,new_profile3}, .Ve .PP The exec mode dictates whether or not the Linux Kernel's \fBunsafe_exec\fR routines should be used to scrub the environment, similar to setuid programs. (See \fIld.so\fR\|(8) for some information on setuid/setgid environment scrubbing.) The \&\fBsafe\fR mode sets up environment scrubbing to occur when the new application is executed and \fBunsafe\fR mode disables AppArmor's requirement for environment scrubbing (the kernel and/or libc may still require environment scrubbing). An exec mode can only be specified when an exec condition is present. .PP .Vb 1 \& change_profile safe /bin/bash \-> new_profile, .Ve .PP Not all kernels support \fBsafe\fR mode and the parser will downgrade rules to \&\fBunsafe\fR mode in that situation. If no exec mode is specified, the default is \&\fBsafe\fR mode in kernels that support it. .SS "rlimit rules" .IX Subsection "rlimit rules" AppArmor can set and control the resource limits associated with a profile as described in the \fIsetrlimit\fR\|(2) man page. .PP The AppArmor rlimit controls allow setting of limits and restricting changes of them and these actions can be audited. Enforcement of the set limits is handled by the standard kernel enforcement mechanism for rlimits and will not result in an audited apparmor message if the limit is enforced. .PP If a profile does not have an rlimit rule associated with a given rlimit then the rlimit is left alone and regular access, including changing the limit, is allowed. However if the profile sets an rlimit then the current limit is checked and if greater than the limit specified in the rule it will be changed to the specified limit. .PP AppArmor rlimit rules control the hard limit of an application and ensure that if the hard limit is lowered that the soft limit does not exceed the hard limit value. .PP Eg. .PP .Vb 3 \& set rlimit data <= 100M, \& set rlimit nproc <= 10, \& set rlimit nice <= 5, .Ve .SS "Variables" .IX Subsection "Variables" AppArmor's policy language allows embedding variables into file rules to enable easier configuration for some common (and pervasive) setups. Variables may have multiple values assigned, but any variable assignments must be made before the start of the profile. .PP The parser will automatically expand variables to include all values that they have been assigned; it is an error to reference a variable without setting at least one value. You can use empty quotes ("") to explicitly add an empty value. .PP At the time of this writing, the following variables are defined in the provided AppArmor policy: .PP .Vb 10 \& @{HOME} \& @{HOMEDIRS} \& @{multiarch} \& @{pid} \& @{pids} \& @{PROC} \& @{securityfs} \& @{apparmorfs} \& @{sys} \& @{tid} \& @{XDG_DESKTOP_DIR} \& @{XDG_DOWNLOAD_DIR} \& @{XDG_TEMPLATES_DIR} \& @{XDG_PUBLICSHARE_DIR} \& @{XDG_DOCUMENTS_DIR} \& @{XDG_MUSIC_DIR} \& @{XDG_PICTURES_DIR} \& @{XDG_VIDEOS_DIR} .Ve .PP These are defined in files in \fI/etc/apparmor.d/tunables\fR and are used in many of the abstractions described later. .PP You may also add files in \fI/etc/apparmor.d/tunables/home.d\fR for site-specific customization of \fB@{\s-1HOMEDIRS\s0}\fR, \&\fI/etc/apparmor.d/tunables/multiarch.d\fR for \fB@{multiarch}\fR and \&\fI/etc/apparmor.d/tunables/xdg\-user\-dirs.d\fR for \fB@{XDG_*}\fR. .PP The special \fB@{profile_name}\fR variable is set to the profile name and may be used in all policy. .SS "Alias rules" .IX Subsection "Alias rules" AppArmor also provides alias rules for remapping paths for site-specific layouts. They are an alternative form of path rewriting to using variables, and are done after variable resolution. Alias rules must occur within the preamble of the profile. System-wide aliases are found in \&\fI/etc/apparmor.d/tunables/alias\fR, which is included by \&\fI/etc/apparmor.d/tunables/global\fR. \fI/etc/apparmor.d/tunables/global\fR is typically included at the beginning of an AppArmor profile. .SS "Globbing" .IX Subsection "Globbing" File resources may be specified with a globbing syntax similar to that used by popular shells, such as \fIcsh\fR\|(1), \fIbash\fR\|(1), \fIzsh\fR\|(1). .IP "\fB*\fR" 4 .IX Item "*" can substitute for any number of characters, excepting '/' .IP "\fB**\fR" 4 .IX Item "**" can substitute for any number of characters, including '/' .IP "\fB?\fR" 4 .IX Item "?" can substitute for any single character excepting '/' .IP "\fB[abc]\fR" 4 .IX Item "[abc]" will substitute for the single character a, b, or c .IP "\fB[a\-c]\fR" 4 .IX Item "[a-c]" will substitute for the single character a, b, or c .IP "\fB[^a\-c]\fR" 4 .IX Item "[^a-c]" will substitute for any single character not matching a, b or c .IP "\fB{ab,cd}\fR" 4 .IX Item "{ab,cd}" will expand to one rule to match ab, one rule to match cd .PP When AppArmor looks up a directory the pathname being looked up will end with a slash (e.g., \fI/var/tmp/\fR); otherwise it will not end with a slash. Only rules that match a trailing slash will match directories. Some examples, none matching the \fI/tmp/\fR directory itself, are: .IP "\fB/tmp/*\fR" 4 .IX Item "/tmp/*" Files directly in \fI/tmp\fR. .IP "\fB/tmp/*/\fR" 4 .IX Item "/tmp/*/" Directories directly in \fI/tmp\fR. .IP "\fB/tmp/**\fR" 4 .IX Item "/tmp/**" Files and directories anywhere underneath \fI/tmp\fR. .IP "\fB/tmp/**/\fR" 4 .IX Item "/tmp/**/" Directories anywhere underneath \fI/tmp\fR. .SS "Rule Qualifiers" .IX Subsection "Rule Qualifiers" There are several rule qualifiers that can be applied to permission rules. Rule qualifiers can modify the rule and/or permissions within the rule. .IP "\fBallow\fR" 4 .IX Item "allow" Specifies that permissions requests that match the rule are allowed. This is the default value for rules and does not need to be specified. Conflicts with the \fIdeny\fR qualifier. .IP "\fBaudit\fR" 4 .IX Item "audit" Specifies that permissions requests that match the rule should be recorded to the audit log. .IP "\fBdeny\fR" 4 .IX Item "deny" Specifies that permissions requests that match the rule should be denied without logging. Can be combined with 'audit' to enable logging. Conflicts with the \fIallow\fR qualifier. .IP "\fBowner\fR" 4 .IX Item "owner" Specifies that the task must have the same euid/fsuid as the object being referenced by the permission check. .PP \fIQualifier Blocks\fR .IX Subsection "Qualifier Blocks" .PP Rule Qualifiers can be applied to multiple rules at a time by grouping the rules into a rule block. .PP .Vb 4 \& audit { \& /foo r, \& network, \& } .Ve .SS "#include mechanism" .IX Subsection "#include mechanism" AppArmor provides an easy abstraction mechanism to group common file access requirements; this abstraction is an extremely flexible way to grant site-specific rights and makes writing new AppArmor profiles very simple by assembling the needed building blocks for any given program. .PP The use of '#include' is modelled directly after \fIcpp\fR\|(1); its use will replace the '#include' statement with the specified file's contents. \&\fB#include \*(L"/absolute/path\*(R"\fR specifies that \fI/absolute/path\fR should be used. \fB#include \*(L"relative/path\*(R"\fR specifies that \fIrelative/path\fR should be used, where the path is relative to the current working directory. \&\fB#include \fR is the most common usage; it will load \&\fImagic/path\fR relative to a directory specified to \fIapparmor_parser\fR\|(8). \&\fI/etc/apparmor.d/\fR is the AppArmor default. .PP The supplied AppArmor profiles follow several conventions; the abstractions stored in \fI/etc/apparmor.d/abstractions/\fR are some large clusters that are used in most profiles. What follows are short descriptions of how some of the abstractions are used. .IP "\fIabstractions/audio\fR" 4 .IX Item "abstractions/audio" Includes accesses to device files used for audio applications. .IP "\fIabstractions/authentication\fR" 4 .IX Item "abstractions/authentication" Includes access to files and services typically necessary for services that perform user authentication. .IP "\fIabstractions/base\fR" 4 .IX Item "abstractions/base" Includes files that should be readable and writable in all profiles. .IP "\fIabstractions/bash\fR" 4 .IX Item "abstractions/bash" Includes many files used by bash; useful for interactive shells and programs that call \fIsystem\fR\|(3). .IP "\fIabstractions/consoles\fR" 4 .IX Item "abstractions/consoles" Includes read and write access to the device files controlling the virtual console, \fIsshd\fR\|(8), \fIxterm\fR\|(1), etc. This abstraction is needed for many programs that interact with users. .IP "\fIabstractions/fonts\fR" 4 .IX Item "abstractions/fonts" Includes access to fonts and the font libraries. .IP "\fIabstractions/gnome\fR" 4 .IX Item "abstractions/gnome" Includes read and write access to \s-1GNOME\s0 configuration files, as well as read access to \s-1GNOME\s0 libraries. .IP "\fIabstractions/kde\fR" 4 .IX Item "abstractions/kde" Includes read and write access to \s-1KDE\s0 configuration files, as well as read access to \s-1KDE\s0 libraries. .IP "\fIabstractions/kerberosclient\fR" 4 .IX Item "abstractions/kerberosclient" Includes file access rules needed for common kerberos clients. .IP "\fIabstractions/nameservice\fR" 4 .IX Item "abstractions/nameservice" Includes file rules to allow \s-1DNS, LDAP, NIS, SMB,\s0 user and group password databases, services, and protocols lookups. .IP "\fIabstractions/perl\fR" 4 .IX Item "abstractions/perl" Includes read access to perl modules. .IP "\fIabstractions/user\-download\fR" 4 .IX Item "abstractions/user-download" .PD 0 .IP "\fIabstractions/user\-mail\fR" 4 .IX Item "abstractions/user-mail" .IP "\fIabstractions/user\-manpages\fR" 4 .IX Item "abstractions/user-manpages" .IP "\fIabstractions/user\-tmp\fR" 4 .IX Item "abstractions/user-tmp" .IP "\fIabstractions/user\-write\fR" 4 .IX Item "abstractions/user-write" .PD Some profiles for typical \*(L"user\*(R" programs will use these include files to describe rights that users have in the system. .IP "\fIabstractions/wutmp\fR" 4 .IX Item "abstractions/wutmp" Includes write access to files used to maintain \fIwtmp\fR\|(5) and \fIutmp\fR\|(5) databases, used with the w(1) and associated commands. .IP "\fIabstractions/X\fR" 4 .IX Item "abstractions/X" Includes read access to libraries, configuration files, X authentication files, and the X socket. .PP Some of the abstractions rely on variables that are set in files in the \&\fI/etc/apparmor.d/tunables/\fR directory. These variables are currently \&\fB@{\s-1HOME\s0}\fR and \fB@{\s-1HOMEDIRS\s0}\fR. Variables cannot be set in profile scope; they can only be set before the profile. Therefore, any profiles that use abstractions should either \fB#include \fR or otherwise ensure that \fB@{\s-1HOME\s0}\fR and \fB@{\s-1HOMEDIRS\s0}\fR are set before starting the profile definition. The \fIaa\-autodep\fR\|(8) and \fIaa\-genprof\fR\|(8) utilities will automatically emit \fB#include \fR in generated profiles. .SH "EXAMPLE" .IX Header "EXAMPLE" An example AppArmor profile: .PP .Vb 2 \& # a variable definition in the preamble \& @{HOME} = /home/*/ /root/ \& \& # a comment about foo. \& /usr/bin/foo { \& /bin/mount ux, \& /dev/{,u}random r, \& /etc/ld.so.cache r, \& /etc/foo.conf r, \& /etc/foo/* r, \& /lib/ld\-*.so* rmix, \& /lib/lib*.so* r, \& /proc/[0\-9]** r, \& /usr/lib/** r, \& /tmp/foo.pid wr, \& /tmp/foo.* lrw, \& /@{HOME}/.foo_file rw, \& /usr/bin/baz Cx \-> baz, \& \& # a comment about foo\*(Aqs hat (subprofile), bar. \& ^bar { \& /lib/ld\-*.so* rmix, \& /usr/bin/bar rmix, \& /var/spool/* rwl, \& } \& \& # a comment about foo\*(Aqs subprofile, baz. \& profile baz { \& #include \& owner /proc/[0\-9]*/stat r, \& /bin/bash ixr, \& /var/lib/baz/ r, \& owner /var/lib/baz/* rw, \& } \& } .Ve .SH "FILES" .IX Header "FILES" .IP "\fI/etc/init.d/boot.apparmor\fR" 4 .IX Item "/etc/init.d/boot.apparmor" .PD 0 .IP "\fI/etc/apparmor.d/\fR" 4 .IX Item "/etc/apparmor.d/" .PD .SH "KNOWN BUGS" .IX Header "KNOWN BUGS" .IP "\(bu" 4 Mount options support the use of pattern matching but mount flags are not correctly intersected against specified patterns. Eg, 'mount options=**,' should be equivalent to 'mount,', but it is not. (\s-1LP:\s0 #965690) .IP "\(bu" 4 The fstype may not be matched against when certain mount command flags are used. Specifically fstype matching currently only works when creating a new mount and not remount, bind, etc. .IP "\(bu" 4 Mount rules with multiple 'options' conditionals are not applied as documented but instead merged such that 'options in (ro,nodev) options in (atime)' is equivalent to 'options in (ro,nodev,atime)'. .IP "\(bu" 4 When specifying mount options with the 'in' conditional, both the positive and negative values match when specifying one or the other. Eg, 'rw' matches when \&'ro' is specified and 'dev' matches when 'nodev' is specified such that \&'options in (ro,nodev)' is equivalent to 'options in (rw,dev)'. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fIapparmor\fR\|(7), \fIapparmor_parser\fR\|(8), \fIaa\-complain\fR\|(1), \&\fIaa\-enforce\fR\|(1), \fIaa_change_hat\fR\|(2), \fImod_apparmor\fR\|(5), and . apparmor-2.11.0/parser/po/0000755000175000017500000000000013034613166013121 5ustar jjjjapparmor-2.11.0/parser/po/gl.po0000644000175000017500000004350512654035202014066 0ustar jjjj# Galician message file for YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2000, 2001 SuSE GmbH. # Copyright (C) 2002 SuSE Linux AG. # Jesús Bravo Ãlvarez , 2000. # # Proxecto Trasno - Adaptación do software libre á lingua galega: Se desexas # colaborar connosco, podes atopar máis información en http://trasno.gpul.org # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:24+0000\n" "Last-Translator: Christian Boltz \n" "Language-Team: Galician \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: gl\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/bg.po0000644000175000017500000004321112654035202014046 0ustar jjjj# @TITLE@ # Copyright (C) 2006, SUSE Linux GmbH, Nuremberg # FIRST AUTHOR , YEAR. # # This file is distributed under the same license as @PACKAGE@ package. FIRST # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:10+0000\n" "Last-Translator: Borislav Mitev \n" "Language-Team: Bulgarian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: bg\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/en_AU.po0000644000175000017500000004331412721132246014452 0ustar jjjj# English (Australia) translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:00+0000\n" "Last-Translator: AppArmor list \n" "Language-Team: English (Australia) \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: en_AU\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/km.po0000644000175000017500000007177512654035202014105 0ustar jjjj# translation of apparmor-parser.km.po to Khmer # Khoem Sokhem , 2006, 2007, 2008. # Auk Piseth , 2006, 2007. # translation of apparmor-parser.km.po to msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:34+0000\n" "Last-Translator: Khoem Sokhem \n" "Language-Team: Khmer \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: km\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "កំហុស ៖ អស់​សážáž·Â áŸ”\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "កំហុស  ៖ basedir %s មិនមែន​ážážâ€‹áž¡áž¾áž™â€‹ កំពុង​រំលង ។\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "កំហុស​ ៖ មិន​អាច​បន្ážáŸ‚ម​ážážâ€‹ %s ដើម្បី​ស្វែងរក​ផ្លូវ​បាន​ឡើយ​ ។\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "កំហុស​ ៖ មិន​អាច​បម្រុង​សážáž·â€‹áž‘ុក​​ ។\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "ទីážáž¶áŸ†áž„​សរសáŸážšâ€‹ážáž¼áž…\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "សិទ្ធិ​ážáŸ’រូវ​បាន​បដិសáŸáž’\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "អស់​សážáž·\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "ទម្រង់​មិន​អះអាង​ទៅ​ពិធីការ\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "ទម្រង់​មិន​ផ្គូផ្គង​ហážáŸ’ážáž›áŸážáž¶\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "ទម្រង់កំណែ​​មិន​ážáŸ’រូវ​បាន​គាំទ្រ​ដោ​យ​ម៉ូឌុល​ Apparmor ឡើយ\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "ទម្រង់​មាន​រួច​ហើយ\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "មិន​មាន​ទម្រង់​ឡើយ\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s ៖ មិន​អាច​បន្ážáŸ‚ម \"%s\" ។ " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s ៖ មិន​អាច​ជំនួស \"%s\" ។ " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s ៖ មិន​អាច​យក \"%s\" áž…áŸáž‰Â áŸ” " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s ៖ មិន​អាច​សរសáŸážšâ€‹áž‘ៅ stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s ៖ ASSERT ៖ ជម្រើស​មិន​ážáŸ’រឹមážáŸ’រូវ ៖ %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "ការ​បន្ážáŸ‚ម​បាន​ជោគជáŸáž™â€‹ážŸáž˜áŸ’រាប់ \"%s\" ។\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "ការ​ជំនួស​បាន​ជោគជáŸáž™â€‹ážŸáž˜áŸ’រាប់ \"%s\" ។\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "ការ​យក​ចáŸáž‰â€‹áž”ាន​ជោគជáŸáž™â€‹ážŸáž˜áŸ’រាប់ \"%s\" ។\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "មិន​អាច​បើក %s - %s បានឡើយ\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "កំហុស​ក្នុង​កា​របម្រុងទុក​សážáž·Â áŸ– មិន​អាច​យក ^%s áž…áŸáž‰\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "កំហុស​ក្នុង​កា​របម្រុង​ទុក​សážáž·Â áŸ– មិន​អាច​យក %s:%s ។" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "មិន​អាច​បង្កើážâ€‹ážáŸ†áž”ន់​ធ្វើការ\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "មិន​អាច​កំណážáŸ‹â€‹áž‘ម្រង់ %s ជា​ស៊áŸážšáž¸â€‹áž”ាន​ឡើយ\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s ៖ មិន​អាច​សរសáŸážšáž’ាážáž»â€‹áž‘ម្រង់​ទាំង​មូល\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "រក​ឃើញ​ážáž½áž¢áž€áŸ’សរ​ដែល​មិន​រំពឹង ៖ '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) រក​ឃើញ​ážáž½áž¢áž€áŸ’សរ​ដែល​មិន​រំពឹង​ទុក ៖ '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s ៖ មិន​អាច​បម្រុង​ទុក​សážáž·â€‹ážŸáž˜áŸ’រាប់​ចំណុច​ម៉ោនមូលដ្ឋាន​ដែនរង\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "ការ​ព្រមាន ៖ មិន​អាច​រក​ fs ដែល​សមរម្យ​នៅ​ក្នុង %s " "ážáž¾â€‹ážœáž¶â€‹ážáŸ’រូវ​បាន​ម៉ោន​ហើយ​ឬនៅ ?\n" "ប្រើ --subdomainfs ដើម្បី​បដិសáŸáž’ ។\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s ៖ សូម​ទោស ។ អ្នក​ážáŸ’រូវ​ការ​សិទ្ធិ​ជា root ដើម្បី​រážáŸ‹â€‹áž€áž˜áŸ’មវិធី​នáŸáŸ‡Â áŸ”\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s ៖ ​ព្រមាន ! អ្នក​បាន​កំណážáŸ‹â€‹áž€áž˜áŸ’មវិធី​នáŸáŸ‡áž‡áž¶ setuid root ។\n" "អ្នក​ដែល​រážáŸ‹â€‹áž€áž˜áŸ’មវិធី​នáŸáŸ‡ អាច​ធ្វើ​ឲ្យ​ទម្រង់ AppArmor " "​របស់​អ្នក​ទាន់​សមáŸáž™Â áŸ”\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "កំហុស ៖ មិនអាច​អាន​ទម្រង់ %s: %s ។\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "កំហុស​បម្រុង​ទុក​សážáž·Â áŸ”" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s ៖ រក​ឃើញ​កំហុស​ក្នុង​ឯកសារ ។ បោះបង់ ។\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "ឧបករណáŸâ€‹â€‹áž”ញ្ជាក់​​គុណលក្ážážŽáŸˆáž¢áž€áŸ’សរ​​​ធំ​ \"RWLIMX\" ážáŸ’រូវ​បាន​បរិយាយ​ " "សូម​បម្លែង​វា​ទៅ​ជា​អក្សរ​ážáž¼áž…​វិញ​មើល​សáŸáž…ក្ដី​លម្អិážâ€‹â€‹áž€áŸ’នុងទំពáŸážšâ€‹áž˜áŸâ€‹ážšáž”ស់​​ " "apparmor.d (៥​)  ​។\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "ប៉ះទង្កិច 'a' áž“áž·áž„ 'w' ដក​ចáŸáž‰â€‹ážŠáŸ„យ​ដៃ ។" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec qualifier 'i' មិន​ážáŸ’រឹមážáŸ’រូវ​ឡើយ, qualifier " "ដែល​ប៉ះទង្គិច​ážáŸ’រូវ​បាន​បញ្ជាក់​រួច​ហើយ" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "មិន​បាន​​មានការ​បង្ážáŸ† exec ដែល​មាន​គុណភាព​ (%c%c) " "áž–áŸážáŸŒáž˜áž¶áž“​លម្អិážâ€‹áž¢áž“ុញ្ញាážâ€‹áž²áŸ’យមាន​​អážáŸážšáž”រិស្ážáž¶áž“​គ្រោះ​ážáŸ’នាក់​មួយ​ចំនួន​​ឆ្លង​កាáž" "់​ដំណើរការ​ដែល​គ្មាន​ការ​បង្ážáŸ†â€‹ážŠáŸ„យ​ 'man ៥ apparmor.d'  ។\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Exec qualifier '%c' មិន​ážáŸ’រឹមážáŸ’រុវ ការ​ប៉ះទង្គិច​ qualifier already specified" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Exec qualifier '%c%c' មិន​ážáŸ’រឹមážáŸ’រូវ កា​រប៉ះទង្គិច​បាន​បញ្ជាក់​រួច​ហើយ" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "ážáž¶áž„​ក្នុង ៖ ážáž½áž¢áž€áŸ’សរ​របៀប​ដែល​មិន​រំពឹង '%c' ក្នុង​ពáŸážáŸŒáž˜áž¶áž“​បញ្ចូល" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "កំហុស​ážáž¶áž„​ក្នុង​បាន​បង្កើážâ€‹ perm មិន​ážáŸ’រឹមážáŸ’រូវ 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "កំហុស​ឧបករណáŸâ€‹áž‰áŸ‚ក AppArmor ៖ %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "ធាážáž»â€‹áž˜áž·áž“​អាច​បញ្ចូល​ចូល​គ្នា​បាន​ឡើយ​ ។ អស់​សážáž·\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "បាន​បរាជáŸáž™â€‹áž€áŸ’នុង​កា​របង្កើážâ€‹ážˆáŸ’មោះ​ក្លែងក្លាយ %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "ទង់​ážáž˜áŸ’រង់ 'បំបាážáŸ‹â€‹áž€áŸ†áž áž»ážŸ' មិន​ážáŸ’រឹមážáŸ’រូវ​ទៀážáž‘áŸÂ áŸ”" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "ទង់​ទម្រង់​មិន​ážáŸ’រឹមážáŸ’រូវ ៖ %s ។" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "អះអាង ៖ `ច្បាប់' បាន​ážáŸ’រឡប់ NULL ។" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "របៀប​មិន​ážáŸ’រឹមážáŸ’រូវ 'x' មិន​ážáŸ’រូវ​​បន្ážâ€‹ážŠáŸ„áž™ exec qualifier 'i' 'u' ឬ 'p'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "របៀប​មិន​ážáŸ’រឹមážáŸ’រូវ, 'x' ážáŸ’រូវ​ážáŸ‚​បន្ážâ€‹ážŠáŸ„áž™ exec qualifier 'i', 'u' ឬ 'p'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "របៀប​មិន​ážáŸ’រឹមážáŸ’រូវ, 'x' ážáŸ’រូវ​ážáŸ‚​បន្ážâ€‹ážŠáŸ„áž™ exec qualifier 'i', 'u' ឬ 'p'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "អះអាង ៖ `network_rule' ážáŸ’រឡប់​ពិធីការ​មិន​ážáŸ’រឹមážáŸ’រូវ ។" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "អះអាង ៖ `change_profile' ážáŸ’រឡប់ NULL ។" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "អះអាង ៖ 'ច្បាប់ hat' បាន​ážáŸ’រឡប់ NULL ។" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "អះអាង ៖ 'local_profile rule' returned NULL ។" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "អážáŸážšâ€‹áž”៊ូលីន​មិន​កំណážáŸ‹ %s បាន​ប្រើ​ក្នុង​កន្សោម if" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "unsafe rule missing exec permissions" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "សំណុំ​រង​អាច​ážáŸ’រូវ​បាន​ប្រើ​ážáŸ‚​ជា​មួយ​ច្បាប់​ážáŸ†ážŽâ€‹áž”៉ុណ្ណោះ ។" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "ážáŸ†ážŽ áž“áž·áž„ exec perms ប៉ះទង្គិច​​ច្បាប់​ឯកសារ ដោយ​ប្រើ ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "ážáŸ†ážŽ perms " "មិន​ážáŸ’រូវ​បាន​អនុញ្ញាážâ€‹áž“ៅ​លើ​​ដំណើរការ​ផ្លាស់ប្ដូរ​ទម្រង់​ដែល​មានឈ្មោះ ។\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "បាážáŸ‹â€‹ážáž½áž¢áž€áŸ’សរ​ចុង​បន្ទាážáŸ‹â€‹áž˜áž½áž™áž¬Â ? (ធាážáž»Â áŸ– %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "ធាážáž»â€‹áž”ណ្ដាញ​មិន​ážáŸ’រឹមážáŸ’រូវ ។" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "សមážáŸ’ážáž—ាព​មិន​ážáŸ’រឹមážáŸ’រូវ %s ។" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s ៖ ការ​បើក​មិន​ážáŸ’រឹមážáŸ’រូវ {, ការ​ដាក់​ជា​ក្រុម​ក្នុង​មិន​បាន​អនុញ្ញាáž\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s ៖ កំហុស​ការ​ដាក់​កន្សោម​ធម្មážáž¶â€‹áž‡áž¶â€‹áž€áŸ’រុម ៖ " "ចំនួន​ធាážáž»â€‹áž˜áž·áž“​ážáŸ’រឹមážáŸ’រូវ​ចន្លោះ {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s ៖ កំហុស​ការ​ដាក់​កន្សោម​ធម្មážáž¶â€‹áž‡áž¶áž€áŸ’រុម ៖ បិទ​មិន​ážáŸ’រឹមážáŸ’រូវ } " "មិន​ផ្គូផ្គង​នឹង​ការ​បើក { ដែល​បាន​រក​ឃើញ\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s ៖ Regex កំហុស​ការ​ដាក់​ជា​ក្រុម ៖ ការ​ដាក់​ជា​ក្រុម​ដែល​បាន​បិទ " "ឬ​ážáŸ’នាក់​ážáž½áž¢áž€áŸ’សរ រំពឹង​ážáž¶â€‹áž”áž·áž‘ }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s ៖ បាន​រកឃើញ​សážáž·â€‹áž”ណ្ដោះ​អាសន្ន​ážáž¶áž„​ក្នុង​លើស​ចំណុះ បាន​លើសážáž½áž¢áž€áŸ’សរ %d\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s ៖ មិន​អាច​ញែក​បន្ទាážáŸ‹â€‹áž”ញ្ចូល '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "កំហុស​ក្នុង​ការ​បញ្ចូល​ក្បួន​ចូល​គ្នា​សម្រាប់​ទម្រង់ %s " "បាន​បរាជáŸáž™â€‹áž€áŸ’នុង​ការ​ផ្ទុក\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "កំហុស​ទម្រង់ %s មាន​ធាážáž»â€‹áž‚ោល​នយោបាយដែល​មិន​អាច​ប្រើ​ជា​មួយ​នឹង​ážážºážŽáŸ‚ល​នáŸáŸ‡Â áŸ–\n" "\t'*', '?', ជួរ​ážáž½áž¢áž€áŸ’សរ និង​ការ​ជំនួស​មិន​ážáŸ’រូវ​បាន​អនុញ្ញាážÂ áŸ”\n" "\t'**' អាច​ážáŸ’រូវ​បាន​ប្រើ​ážáŸ‚​នៅ​ចុង​ក្បួន​ážáŸ‚​ប៉ុណ្ណោះ ។\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "កំហុស​ក្នុង​ការ​ចូល​ដំណើរការ regexs សម្រាប់​ទម្រង់ %s " "បាន​បរាជáŸáž™â€‹áž€áŸ’នុង​ការ​ផ្ទុក\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "កំហុស ពង្រីក​អážáŸážšâ€‹ážŸáž˜áŸ’រាប់​ទម្រង់ %s បាន​បរាជáŸáž™â€‹áž€áŸ’នុង​​​ការ​ផ្ទុក\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "កំហុស​ក្នុង​​បន្ážáŸ‚ម​ច្បាប់​​ចូលដំណើរការ hat សម្រាប់​ទម្រង់ %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "កំហុស​ក្នុង​ទម្រង់ %s បាន​បរាជáŸáž™â€‹áž€áŸ’នុង​ការ​ផ្ទុក\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s ៖ មាន​​កំហុស​កំឡុង​ពáŸáž›â€‹ážŠáŸ†ážŽáž¾ážšáž€áž¶ážšâ€‹áž”ន្ទាប់ ។ បោះបង់ ។\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s ៖ មាន​កំហុស​កំឡុង​ពáŸáž›â€‹ážŠáŸ†ážŽáž¾ážšâ€‹áž€áž¶ážš regex ជា​មុន ។ បោះបង់ ។\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s ៖ មាន​កំហុស​កំឡុង​ពáŸáž›â€‹ážŠáŸ†ážŽáž¾ážšáž€áž¶ážšâ€‹áž”ន្ទាប់ ។ បោះបង់ ។\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s ៖ រក​ឃើញ​កំហុស​ក្នុង​ច្បាប់​បន្សំ​ដំណើរការ​ជា​មុន ។ បោះបង់ ។\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ro.po0000644000175000017500000005411212654035202014100 0ustar jjjj# translation of apparmor-parser.ro.po to # Romanian message file for YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2003 SuSE Linux AG. # # Stanciu-Lixandru Alec , 2007. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:59+0000\n" "Last-Translator: Stanciu-Lixandru Alec \n" "Language-Team: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ro\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Eroare: Memorie insuficientă.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Eroare: basedir %s nu este un director, trec peste.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Eroare: Nu pot adăuga directorul %s la calea de căutare.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Eroare: nu pot aloca memorie.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "PoziÈ›ie de scriere incorectă\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permisiune respinsă\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Memorie insuficientă\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profilul nu corespunde protocolului\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profilul nu corespunde cu semnătura\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Versiunea profilului nu este suportatp de modulul Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profilul există deja\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profilul nu există\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Nu pot adăuga \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Nu pot înlocui \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Nu pot îndepărta \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Nu pot scrie la stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: OpÈ›iune invalidă: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Adăugarea s-a efectuat pentru \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "ÃŽnlocuirea s-a efectuat pentru \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Ștergerea s-a efectuat pentru \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANICÄ‚ incrementare greÈ™ită buffer %p pos %p ext %p dimensiune %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Nu pot deschide %s -%s\n" # ############################################################################### # Old yast2-agents.po #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Eroare la alocarea memoriei: Nu pot È™terge ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Eroare la alocarea memoriei: Nu pot È™terge %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "nu pot crea spaÈ›iul de lucru\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "nu pot serializa profilul %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: No pot scrie intregul profil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Am găsit un caracter neaÈ™teptat: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Am găsit un caracter neaÈ™teptat: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Nu pot aloca memorie pentru punctul de montare subdomainbase\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "AtenÈ›ie: nu pot găsi un fs potrivit în %s, este montat?\n" "FolosiÈ›i -subdomainfs pentru a forÈ›a.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: ÃŽmi pare rău. AveÈ›i nevoie de privilegii root pentru a rula acest " "program.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: AtenÈ›ie! AÈ›i setat setuid root pentru acest program.\n" "Oricine poate rula acest program poate face update la profilul dvs. " "AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Eroare: Nu pot citi profilul %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Eroare la alocarea memoriei." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Am găsit erori în fiÈ™ier. Abandonez.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Specificatori cu litere mari \"RWLIMX\" sunt depășiÈ›i, vă rog convertiÈ›i la " "litere mici\n" "VedeÈ›i manpage apparmor.d(5) pentru amănunte.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Conflict 'a' È™i 'w' perms se exclud reciproc." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Specificatorul exec 'i' este invalid, specificatorul conflictual este deja " "definit" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Specificatorul exec '%c' este invalid, a fost deja declarat un asemenea " "specificator" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Specificatorul exec '%c%c' este invalid, a fost deja declarat un asemenea " "specificator" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Intern: '%c' este un caracter neaÈ™teptat la intrare" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "O eroare internă a generat permutarea invalidă 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Eroare în parser-ul AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Nu am putut uni intrările. Memorie insuficientă\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Nu am putut crea aliasul %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Indicatorul 'debug' nu mai este valabil pentru profil." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Indicator de profil invalid: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "AserÈ›iune: `regula' a întors NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Mod invalid, în regulile de interzicere 'x' nu trebuie precedat de " "specificatorul exec 'i', 'p' sau 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Mod invalid, 'x' trebuie să fie precedat de specificatorul exec 'i', 'p', " "'c' sau 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Mod invalid, 'x' trebuie precedat de specificatorul exec 'i', 'p' sau 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Ase_rÈ›iune: `regula de reÈ›ea' a întors un protocol invalid." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "AseÈ›iune: `change_profile' a întors NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "AserÈ›iune: `regulă _profil local' a întors NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" "Variabila booleană neiniÈ›ializată %s este folosită într-o instrucÈ›iune if" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "regulă nesigură fără permisiuni de execuÈ›ie" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "lipseÈ™te un caracter de sfârÈ™it de linie? (intrare: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Capabilitate invalidă: %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: Paranteză { ilegală, nu sunt permise mai multe nivele de grupare\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Eroare de grupare în expresia regulată: Număr invalid de intrări între " "{}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Eroare de grupare în expresia regulată: Paranteză închisă } invalidă, nu " "există nicio paranteză deschisă echivalentă\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Eroare de grupare în expresia regulată: Grupare sau clasă neterminată, " "mă aÈ™teptam la }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Am detectat o depășire a buffer-ului intern cu %d caractere\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Nu pot parsa linia '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "EROARE la unirea regulilor pentru profilul %s, nu am putut încărca\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "EROARE profilul %s conÈ›ine elemente de politică ce nu pot fi utilizate cu " "acest kernel:\n" "\t'*','?', intervale de caractere È™i alternări nu sunt permise.\n" "\t'**' poate fi folosit doar la sfârÈ™itul unei reguli.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "EROARE la procesarea expresiilor regulate pentru profilul %s, încărcarea a " "eÈ™uat\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "EROARE la citirea variabilelor pentru profilul %s, nu am putut încărca\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "EROARE în profilul %s, încărcarea a eÈ™uat\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Au apărut erori în timpul post-procesării. Abandonez.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Au apărut erori în timpul post-procesării expresiei regulate. " "Abandonez.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Au apărut erori în timpul post-procesării. Abandonez.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Au apărut erori în combinarea regulilor de post-procesare. Abandonez.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/Makefile0000644000175000017500000000132712460557251014570 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 2004, 2005 NOVELL (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # ---------------------------------------------------------------------- all: # As translations get added, they will automatically be included, unless # the lang is explicitly added to DISABLED_LANGS; e.g. DISABLED_LANGS=en es DISABLED_LANGS= COMMONDIR=../../common include $(COMMONDIR)/Make-po.rules XGETTEXT_ARGS+=--language=C --keyword=_ $(shell if [ -f ${NAME}.pot ] ; then echo -n -j ; fi) apparmor-2.11.0/parser/po/hu.po0000644000175000017500000005652112654035202014102 0ustar jjjj# translation of apparmor-parser.hu.po to Hungarian # translation of apparmor-parser.hu.po to # translation of apparmor-parser.po to # Hungarian message File YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2002 SuSE Linux AG. # Copyright (C) 2000, 2001 SuSE GmbH. # # Marcel Hilzinger , 2001. # Sári Gábor , 2000. # Steve Varadi , 2000. # Zoltán Levárdy , 1999. # Papp Zsolt , 2006. # Kalman Kemenczy , 2006, 2007, 2008. # Ervin Novak , 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2015-04-03 18:34+0000\n" "Last-Translator: Úr Balázs \n" "Language-Team: Hungarian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: hu\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Hiba: nincs elég memória\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" "Hiba: a(z) %s alapkönyvtár nem érvényes könyvtár, ezért kihagyásra kerül.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Hiba: nem sikerült a(z) %s könyvtár hozzáadása a keresési útvonalhoz.\n" # modules/printconf/printconf_write_printer.ycp:30 # clients/printconf_write.ycp:308 #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Hiba: nem sikerült lefoglalni memóriát\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Rossz írási pozíció\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Engedély megtagadva\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Nincs elég memória\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "A profil nem felel meg a protokollnak\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "A profil nem egyezik az aláírással\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "A profil verzióját az AppArmor nem támogatja\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "A profil már létezik\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "A profil nem létezik\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" nem vehetÅ‘ fel. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" nem cserélhetÅ‘ le. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" nem távolítható el. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Nem sikerült írni a standard kimenetre\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Érvénytelen paraméter: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\" hozzáadása sikerült.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" cseréje sikerült.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" eltávolítása sikerült.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PÃNIK rossz növekmény puffer: %p poz: %p kit: %p méret %d felb: %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s nem nyitható meg - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Memóriafoglalási hiba: A(z) ^%s eltávolítása sikertelen\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Memóriafoglalási hiba. A(z) %s:%s eltávolítása sikertelen." # clients/lan_nfs_write.ycp:78 #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "a munkaterület létrehozása nem sikerült\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "A(z) %s profil sorba szedése nem sikerült\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Nem sikerült a teljes profilbejegyzés kiírása\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "„%s†nem nyitható meg" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Váratlan karakter: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Váratlan karakter: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Nem sikerült memóriát foglalni az aldomainbase csatolási pontnak\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Figyelem: A(z) %s nem tartalmaz megfelelÅ‘ fájlrendszert, fel van csatolva?\n" "Ez a --subdomainfs paraméterrel írható felül.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Sajnálom. A program futtatásához root jogosultság szükséges.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Figyelem! A program setuid root módban futásra van állítva.\n" "Bárki, aki futtatja a programot, frissíteni tudja az AppArmor profilokat.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Hiba: A profil beolvasása sikertelen %s: %s\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Memóriafoglalási hiba." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Hiba a fájlban. A program leáll.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "A nagybetűs \"RWLIMX\" minÅ‘sítÅ‘k használata elavult, használjon kisbetűket.\n" "A részletekkel kapcsolatban lásd az apparmor.d(5) kézikönyvoldalt.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Ãœtközés: 'a' és 'w' kölcsönösen kizáró." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Az 'i' végrehajtás-módosító érvénytelen, már meg van adva egy ütközÅ‘ minÅ‘sítÅ‘" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "A korlátozás nélküli végrehajtás-minÅ‘sítÅ‘ (%c%c) lehetÅ‘vé teszi egyes " "veszélyes környezeti változók átadását a korlátozás nélküli folyamatnak; a " "részletekkel kapcsolatban lásd a 'man 5 apparmor.d' kézikönyvoldalt.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "A(z) '%c' végrehajtás-módosító érvénytelen, már meg van adva egy ütközÅ‘ " "minÅ‘sítÅ‘" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "A(z) '%c%c' végrehajtás-módosító érvénytelen, már meg van adva egy ütközÅ‘ " "minÅ‘sítÅ‘" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "BelsÅ‘: váratlan módkarakter ('%c') a bemenetben" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "A belsÅ‘ hiba érvénytelen perm 0x%llx létrehozását okozta\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor feldolgozási hiba: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "A bejegyzések nem fésülhetÅ‘k össze. Nincs elég memória\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "%s -> %s álnév létrehozása sikertelen\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "A 'debug' profiljelzÅ‘ már nem érvényes." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Érvénytelen profiljelzÅ‘: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: A `rule' NULL értéket adott vissza." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Érvénytelen mód, az 'x' elÅ‘tt az 'i', 'p' vagy 'u' végrehajtás-módosító " "kell, hogy álljon" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Érvénytelen mód, az 'x' elÅ‘tt az 'i', 'p', 'c' vagy 'u' végrehajtás-módosító " "kell, hogy álljon" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Érvénytelen mód, az 'x' elÅ‘tt az 'i', 'p' vagy 'u' végrehajtás-módosító " "kell, hogy álljon" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: A `network_rule' érvénytelen protokollt adott vissza." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: A `change_profile' NULL értéket adott vissza." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: A 'hat rule' NULL értéket adott vissza." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: A `local_profile rule' NULL értéket adott vissza." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Be nem állított logikai változó (%s) egy feltételes kifejezésben" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "nem biztonságos szabályból hiányzik a futtatási jogosultság" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "A részhalmaz csak a link szabályokkal használható." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "A link és futtatás jogosultságok ütköznek egy fájl szabályon ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "link jogosultságok nem engedélyezettek egy nevezett profil átmenetében.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "Lehet, hogy hiányzik egy sorvége karakter? (bejegyzés: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Érvénytelen hálózati bejegyzés." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Érvénytelen tulajdonság: %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: Érvénytelen nyitott {, a csoportosítások nem ágyazhatók egymásba\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Regex csoportosítási hiba: Érvénytelen számú elem a { és } között\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex csoportosítási hiba: Érvénytelen záró }, nem található hozzá " "tartozó nyitott {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex csoportosítási hiba: Be nem zárt csoport, záró } hiányzik\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: BelsÅ‘ puffer-túlcsordulás, %d karakterrel több\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: A '%s' bemeneti sor értelmezése nem sikerült\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "HIBA a(z) %s profil szabályainak összefésülésénél, a betöltés nem sikerült\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "HIBA: a(z) %s profil ezzel a kernellel nem használható irányelvelemeket " "tartalmaz:\n" "\t'*', '?', karaktertartományok és alternatívák használata nem megengedett.\n" "\t'**' csak a szabály végén használható.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "HIBA a(z) %s profil reguláris kifejezéseinek feldolgozásakor, a betöltés nem " "sikerült\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "HIBA a(z) %s profil változóinak kibontásakor, a betöltés nem sikerült\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" "HIBA a hat hozzáférési szabály a(z) %s profilhoz való hozzáadásakor\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "HIBA a(z) %s profilban, a betöltés nem sikerült\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Hibák az utófeldolgozás közben. A program leáll.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Hibák a reguláris kifejezés utófeldolgozása közben. A program leáll.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Hibák az utófeldolgozás közben. A program leáll.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Hiba a szabályok egyesítésének utófeldolgozásában. A program leáll.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/cs.po0000644000175000017500000005434412654035202014074 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:07+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: cs\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Chyba: Nedostatek pamÄ›ti\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Chyba: Základní adresář %s není adresář, pÅ™eskakuje se.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Chyba: Adresář %s nelze pÅ™idat ke hledané cestÄ›.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Chyba: Nelze pÅ™idÄ›lit paměť\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Å patná pozice zápisu\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "OprávnÄ›ní odepÅ™eno\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Nedostatek pamÄ›ti\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil neodpovídá protokolu\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil neodpovídá podpisu\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Modul Apparmor nepodporuje verzi profilu.\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil již existuje\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil neexistuje\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Nelze pÅ™idat \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Nelze nahradit \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Nelze odstranit \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: nelze zapisovat na standardní výstup\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: neplatná volba: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "PÅ™idání uspÄ›lo pro \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Nahrazení uspÄ›lo pro \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "OdstranÄ›ní uspÄ›lo pro \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIKA: chybný přírůstkový buffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Nelze otevřít %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Chyba alokace pamÄ›ti: není možné odebrat ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Chyba alokace pamÄ›ti: není možné odebrat %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "nelze vytvoÅ™it pracovní oblast\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "nelze serializovat profil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Nelze zapsat celý záznam profilu\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Nalezen neoÄekávaný znak: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(režim_sítÄ›) Nalezen neplatný znak: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Nelze alokovat paměť pro bod pÅ™ipojení subdomainbase\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "UpozornÄ›ní: Nelze nalézt vhodný souborový systém v %s, je pÅ™ipojen?\n" "Možnost lze pÅ™epsat pomocí možnosti --subdomainfs.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Ke spuÅ¡tÄ›ní tohoto programu jsou tÅ™eba práva správce.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: UpozornÄ›ní: Hodnota setuid tohoto programu byla nastavena na uživatele " "root.\n" "Kdokoliv může spustit tento program, může aktualizovat profily modulu " "AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Chyba: Nelze Äíst profil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Chyba alokace pamÄ›ti." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Chyby v souboru. UkonÄuji.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Kvalifikátory velkými písmeny \"RWLIMX\" jsou zastaralé, pÅ™eveÄte je na malá " "písmena.\n" "Podrobnosti naleznete v manuálové stránce apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "OprávnÄ›ní 'a' a 'w' se vzájemnÄ› vyluÄují." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec kvalifikátor 'i' je neplatný, byl již specifikován konfliktní " "kvalifikátor" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Neomezený kvalifikátor spuÅ¡tÄ›ní (%c%c) umožňuje, že jsou neomezenému procesu " "pÅ™edány nÄ›které nebezpeÄné promÄ›nné prostÅ™edí. Podrobnosti uvádí manuálová " "stránka 'man 5 apparmor.d'.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Kvalifikátor spuÅ¡tÄ›ní '%c' je neplatný, již byl zadán konfliktní " "kvalifikátor." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Exec kvalifikátor '%c%c' je neplatný, byl již specifikován konfliktní " "kvalifikátor" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "VnitÅ™ní: Neznámý znak režimu '%c' na vstupu." #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "VnitÅ™ní chyba způsobila neplatné perm 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Chyba parseru AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Nelze slouÄit záznamy. Nedostatek pamÄ›ti\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Nelze vytvoÅ™it alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Příznak profilu 'debug' již není platný." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Neplatný příznak profilu: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `rule' vrátil NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Neplatný režim, pÅ™ed 'x' musí být exec kvalifikátor 'i', 'p' nebo 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Neplatný režim, pÅ™ed 'x' musí být exec kvalifikátor 'i', 'p', 'c' nebo 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "Neplatný režim, pÅ™ed 'x' musí být kvalifikátor 'i', 'p' nebo 'u'." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: `pravidlo_sítÄ›' vrací neplatný protokol." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: `zmÄ›na_profilu' vrátila hodnotu NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: 'hat rule' vrátil NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: 'local_profile rule' vrátil NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Ve výrazu 'if' byla použita nenastavená booleovská promÄ›nná %s." #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "nebezpeÄné pravidlo nemá oprávnÄ›ní ke spuÅ¡tÄ›ní" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "podskupina může být použita pouze s pravidly odkazů." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "link a exec perms konflikt souboru pravidel používajícím ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "link perms nejsou povoleny na pÅ™echodu pojmenovaného profilu.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "chybí znak konce řádku? (záznam: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Neplatná položka sítÄ›." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Neplatná schopnost %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: nepovolená otvírací {, vnoÅ™ené seskupování není povoleno\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Chyba seskupování regex: neplatný poÄet položek mezi {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Chyba seskupování regex: neplatná uzavírací }, nenalezena odpovídající " "otevírací {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Chyba seskupování regulárního výrazu: NeuzavÅ™ené seskupování nebo třída " "znaků, oÄekává se koncová závorka }.\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Detekováno vnitÅ™ní pÅ™eteÄení zásobníku, pÅ™esáhlo %d znaků\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Nelze analyzovat vstupní řádku '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "CHYBA pÅ™i sluÄování pravidel profilu %s, doÅ¡lo k chybÄ› pÅ™i naÄítání.\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "CHYBOVà profil %s obsahuje prvky zásad, které nelze použít s tímto jádrem:\n" "\t'*', '?', rozsahy znaků a střídání nejsou povoleny.\n" "\t'**' lze použít pouze na konci pravidla.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "CHYBA pÅ™i zpracování regulárních výrazů pro profil %s, doÅ¡lo k chybÄ› pÅ™i " "naÄítání.\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "CHYBA pÅ™i rozšíření promÄ›nných pro profil %s, doÅ¡lo k chybÄ› pÅ™i naÄítání.\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "Chyba pÅ™i pÅ™idání pravidla pro přístup k hat pro profil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "CHYBA v profilu %s, selhalo naÄítání\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Nalezeny chyby bÄ›hem postprocesingu. UkonÄuji.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Nalezeny chyby bÄ›hem postprocesingu regulárního výrazu. UkonÄuje se.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Nalezeny chyby bÄ›hem postprocesingu. UkonÄuji.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Nalezeny chyby pÅ™i postprocesingu kombinaÄních pravidel. UkonÄuji.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/apparmor-parser.pot0000644000175000017500000005064312404767276017004 0ustar jjjj# SOME DESCRIPTIVE TITLE. # Copyright (C) YEAR NOVELL, Inc. # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: apparmor@lists.ubuntu.com\n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=CHARSET\n" "Content-Transfer-Encoding: 8bit\n" #: ../parser_include.c:113 ../parser_include.c:111 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 ../parser_include.c:121 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 ../parser_include.c:151 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 ../parser_interface.c:49 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 ../parser_interface.c:52 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 ../parser_interface.c:55 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 ../parser_interface.c:58 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 ../parser_interface.c:61 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 ../parser_interface.c:64 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 ../parser_interface.c:67 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 ../parser_interface.c:70 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 ../parser_interface.c:73 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 ../parser_interface.c:76 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 ../parser_interface.c:79 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #: ../parser_interface.c:96 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #: ../parser_interface.c:101 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #: ../parser_interface.c:106 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #: ../parser_interface.c:111 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #: ../parser_interface.c:115 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #: ../parser_interface.c:118 ../parser_interface.c:142 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #: ../parser_interface.c:127 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #: ../parser_interface.c:131 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #: ../parser_interface.c:135 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #: ../parser_interface.c:446 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #: ../parser_interface.c:518 ../parser_interface.c:669 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #: ../parser_interface.c:543 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #: ../parser_interface.c:556 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #: ../parser_interface.c:582 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #: ../parser_interface.c:593 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 parser_lex.l:169 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 parser_lex.l:173 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 parser_lex.l:139 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 parser_lex.l:638 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 parser_lex.l:428 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 ../parser_common.c:106 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 ../parser_main.c:479 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 ../parser_main.c:498 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 ../parser_main.c:505 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 ../parser_main.c:860 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 #: ../parser_main.c:735 ../parser_main.c:923 ../parser_main.c:1133 #: ../parser_main.c:1187 parser_yacc.y:311 parser_yacc.y:462 parser_yacc.y:472 #: parser_yacc.y:583 parser_yacc.y:662 parser_yacc.y:669 parser_yacc.y:1130 #: parser_yacc.y:1166 parser_yacc.y:1170 parser_yacc.y:1180 parser_yacc.y:1190 #: parser_yacc.y:1298 parser_yacc.y:1376 parser_yacc.y:1479 parser_yacc.y:1490 #: parser_yacc.y:1565 parser_yacc.y:1583 parser_yacc.y:1590 parser_yacc.y:1639 #: ../network.c:314 ../af_unix.cc:203 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 ../parser_main.c:757 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 ../parser_main.c:761 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 ../parser_main.c:967 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 ../parser_misc.c:339 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 ../parser_misc.c:380 ../parser_misc.c:387 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 ../parser_misc.c:404 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 ../parser_misc.c:415 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 ../parser_misc.c:423 ../parser_misc.c:464 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 ../parser_misc.c:450 ../parser_misc.c:458 #, c-format msgid "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 ../parser_misc.c:506 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 ../parser_misc.c:528 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 ../parser_merge.c:83 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 ../parser_merge.c:105 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 parser_yacc.y:320 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 parser_yacc.y:348 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 parser_yacc.y:384 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 parser_yacc.y:506 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 parser_yacc.y:510 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 parser_yacc.y:513 msgid "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 parser_yacc.y:516 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 parser_yacc.y:530 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 parser_yacc.y:552 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 parser_yacc.y:594 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 #: parser_yacc.y:598 parser_yacc.y:630 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 parser_yacc.y:602 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 parser_yacc.y:633 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 parser_yacc.y:660 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 parser_yacc.y:786 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 parser_yacc.y:810 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 parser_yacc.y:819 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 parser_yacc.y:992 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 parser_yacc.y:1092 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 parser_yacc.y:1060 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 parser_yacc.y:1062 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 parser_yacc.y:1064 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 parser_yacc.y:1109 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 #: parser_yacc.y:1145 parser_yacc.y:1155 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 parser_yacc.y:1510 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 parser_yacc.y:1525 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 parser_yacc.y:1531 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 ../parser_regex.c:278 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 ../parser_regex.c:284 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 ../parser_regex.c:361 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 ../parser_regex.c:377 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 ../parser_regex.c:421 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 ../parser_policy.c:375 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 ../parser_policy.c:332 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 ../parser_policy.c:362 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 ../parser_policy.c:355 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 parser_lex.l:186 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 ../parser_main.c:523 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 ../parser_main.c:1024 #: ../parser_main.c:1041 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 ../parser_main.c:1091 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 ../parser_main.c:1094 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 ../parser_main.c:1097 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 parser_yacc.y:621 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 parser_yacc.y:658 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 parser_yacc.y:1613 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 parser_yacc.y:1628 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 parser_yacc.y:1635 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 parser_yacc.y:1650 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 ../parser_regex.c:236 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 ../parser_regex.c:256 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 ../parser_policy.c:339 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 ../parser_policy.c:369 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/pa.po0000644000175000017500000005265712654035202014074 0ustar jjjj# translation of apparmor-parser.pa.po to Panjabi # # A S Alam , 2007. # ASB , 2007. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:31+0000\n" "Last-Translator: A S Alam \n" "Language-Team: Panjabi \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: pa\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "ਗਲਤੀ: ਮੈਮੋਰੀ ਖਤਮ ਹੋਈ।\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "ਗਲਤੀ: basedir %s ਇੱਕ ਡਾਇਰੈਕਟਰੀ ਨਹੀਂ ਹੈ, ਛੱਡਿਆ ਜਾ ਰਿਹਾ ਹੈ।\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "ਗਲਤੀ: ਡਾਇਰੈਕਟਰੀ %s ਖੋਜ ਮਾਰਗ 'ਚ ਸ਼ਾਮਲ ਨਹੀਂ ਕੀਤੀ ਜਾ ਸਕੀ।\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "ਗਲਤੀ: ਮੈਮੋਰੀ ਜਾਰੀ ਨਹੀਂ ਕੀਤੀ ਜਾ ਸਕੀ।\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "ਗਲਤ ਲਿਖਣ ਸਥਿਤੀ\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "ਅਧਿਕਾਰ ਪਾਬੰਦੀ\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "ਮੈਮੋਰੀ ਤੋਂ ਬਾਹਰ\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "ਪਰੋਫਾਇਲ ਦਸਤਖਤ ਨਹੀਂ ਮਿਲਦੇ\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "ਪਰੋਫਾਇਲ ਵਰਜਨ ਅੱਪਾਰਮੋਰ ਮੋਡੀਊਲ ਵਲੋਂ ਸਹਾਇਕ ਨਹੀਂ ਹੈ\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "ਪਰੋਫਾਇਲ ਪਹਿਲਾਂ ਹੀ ਮੌਜੂਦ ਹੈ\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "ਪਰੋਫਾਇਲ ਮੌਜੂਦ ਨਹੀਂ\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" ਸ਼ਾਮਲ ਕਰਨ ਲਈ ਅਸਮਰੱਥ। " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" ਬਦਲਣ ਲਈ ਅਸਮਰੱਥ। " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" ਹਟਾਉਣ ਲਈ ਅਸਮਰੱਥ। " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdout ਉੱਤੇ ਲਿਖਣ ਲਈ ਅਸਮਰੱਥ\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: ਗਲਤ ਚੋਣ: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "ਸਫ਼ਲ \"%s\" ਲਈ ਹਟਾਉਣਾ\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s - %s ਖੋਲà©à¨¹à¨£ ਲਈ ਅਸਫ਼ਲ\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "ਕੰਮ ਖੇਤਰ ਬਣਾਉਣ ਲਈ ਅਸਮਰੱਥ\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "ਪਰੋਫਾਇਲ %s ਸੀਰੀਅਲਾਈਜ਼ ਲਈ ਅਸਮਰੱਥ\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: ਪੂਰੀ ਪਰੋਫਾਇਲ à¨à¨‚ਟਰੀ ਲਿਖਣ ਲਈ ਅਸਮਰੱਥ\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "ਅਚਾਨਕ ਅੱਖਰ ਮਿਲਿਆ: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) ਅਣਜਾਣ ਅੱਖਰ ਮਿਲਿਆ: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: ਅਫਸੋਸ ਤà©à¨¹à¨¾à¨¨à©‚à©° ਇਹ ਪਰੋਗਰਾਮ ਚਲਾਉਣ ਲਈ ਰੂਟ ਅਧਿਕਾਰ ਚਾਹੀਦੇ ਹਨ।\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: ਚੇਤਾਵਨੀ! ਤà©à¨¸à©€à¨‚ ਇਹ ਪਰੋਗਰਾਮ ਲਈ setuid root ਸੈੱਟ ਕੀਤਾ ਹੈ।\n" "ਕੋਈ ਵੀ, ਜੋ ਕਿ ਇਹ ਪਰੋਗਰਾਮ ਚਲਾ ਸਕਦਾ ਹੈ, ਉਹ ਤà©à¨¹à¨¾à¨¡à¨¾ ਅੱਪਆਰਮੋਰ ਪਰੋਫਾਇਲ ਅੱਪਡੇਟ ਕਰ " "ਸਕਦਾ ਹੈ।\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "ਗਲਤੀ: ਪਰੋਫਾਇਲ %s ਪੜà©à¨¹à¨¿à¨† ਨਹੀਂ ਜਾ ਸਕਿਆ: %s\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "ਮੈਮੋਰੀ ਜਾਰੀ ਕਰਨ ਗਲਤੀ।" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: ਫਾਇਲ 'ਚ ਗਲਤੀਆਂ ਮਿਲੀਆਂ। ਵਿੱਚੇ ਛੱਡਿਆ ਜਾਂਦਾ ਹੈ।\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor ਪਾਰਸ ਗਲਤੀ: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "à¨à¨‚ਟਰੀਆਂ ਮਰਜ਼ ਨਹੀਂ ਕੀਤੀਆਂ ਜਾ ਸਕੀਆਂ। ਮੈਮੋਰੀ ਖਤਮ ਹੋਈ।\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "ਕੀ ਲਾਈਨ ਅੱਖਰ ਦਾ ਖਾਤਮਾ ਨਹੀਂ ਹੈ? (à¨à¨‚ਟਰੀ: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "ਗਲਤ ਨੈੱਟਵਰਕ à¨à¨‚ਟਰੀ ਹੈ।" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex ਗਰà©à©±à¨ªà¨¿à©°à¨— ਗਲਤੀ। ਨਾ-ਬੰਦ ਹੋਈ ਗਰà©à©±à¨ªà¨¿à©°à¨— ਜਾਂ ਅੱਖਰ ਕਲਾਸ, ਬੰਦ } ਦੀ ਲੋੜ ਸੀ\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: ਅੰਦਰੂਨੀ ਬਫ਼ਰ ਓਵਰਫਲੋ ਮਿਲਿਆ, %d ਅੱਖਰ ਵੱਧ ਗਠਹਨ\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: ਇੰਪà©à©±à¨Ÿ ਲਾਈਨ '%s' ਪਾਰਸ ਕਰਨ ਲਈ ਅਸਮਰੱਥ\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ਪਰੋਫਾਇਲ %s ਲਈ ਰੂਲ ਮਿਲਾਨ ਕਰਨ ਦੌਰਾਨ ਗਲਤੀ, ਲੋਡ ਕਰਨ ਲਈ ਫੇਲà©à¨¹\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "ਪਰੋਫਾਇਲ %s regexs ਪਰੋਸੈਸ ਕਰਨ ਦੌਰਾਨ ਗਲਤੀ, ਲੋਡ ਕਰਨ ਲਈ ਫੇਲà©à¨¹\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "ਪਰੋਫਾਇਲ %s ਲਈ ਵੇਰੀਬਲ à¨à¨•à¨¸à¨ªà©ˆà¨‚ਡ ਕਰਨ ਦੌਰਾਨ ਗਲਤੀ, ਲੋਡ ਕਰਨ ਲਈ ਫੇਲà©à¨¹\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "%s ਪਰੋਫਾਇਲ ਵਿੱਚ ਗਲਤੀ, ਲੋਡ ਕਰਨ ਲਈ ਫੇਲà©à¨¹\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: regex ਪੋਸਟ-ਪਰੋਸੈਸ ਦੌਰਾਨ ਗਲਤੀਆਂ ਮਿਲੀਆਂ। ਅਧੂਰਾ ਖਤਮ।\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s:ਪੋਸਟ-ਪਰੋਸੈਸਿੰਗ ਰੂਲ ਜੋੜਨ ਦੌਰਾਨ ਗਲਤੀਆਂ ਮਿਲੀਆਂ। ਅਧੂਰਾ ਛੱਡਿਆ।\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ta.po0000644000175000017500000005275012654035202014072 0ustar jjjjmsgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:28+0000\n" "Last-Translator: Priyavert \n" "Language-Team: AgreeYa Solutions\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ta\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "மோசமான எழà¯à®¤à¯à®¨à®¿à®²à¯ˆ\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "அனà¯à®®à®¤à®¿ மறà¯à®•à¯à®•à®ªà¯à®ªà®Ÿà¯à®•à®¿à®±à®¤à¯\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "நினைவில௠இலà¯à®²à¯ˆ\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "விவரம௠நெறிமà¯à®±à¯ˆà®¯à¯à®Ÿà®©à¯ பொரà¯à®¨à¯à®¤à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "விவரம௠கையொபà¯à®ªà®¤à¯à®¤à¯à®Ÿà®©à¯ பொரà¯à®¨à¯à®¤à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "விவரம௠à®à®±à¯à®•à®©à®µà¯‡ உளà¯à®³à®¤à¯\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "விவரம௠இலà¯à®²à¯ˆ\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" சேரà¯à®•à¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" மாறà¯à®±à®¿à®¯à®®à¯ˆà®•à¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" நீகà¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdout-ல௠எழà¯à®¤ à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: உறà¯à®¤à®¿à®šà¯†à®¯à¯à®¤à®²à¯: செலà¯à®²à®¾à®¤ விரà¯à®ªà¯à®ªà®¤à¯à®¤à¯‡à®°à¯à®µà¯: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\"கà¯à®•à®¾à®© கூடà¯à®¤à®²à¯ சேரà¯à®ªà¯à®ªà¯ வெறà¯à®±à®¿ பெறà¯à®±à®¤à¯.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\"கà¯à®•à®¾à®© மாறà¯à®±à¯ வெறà¯à®±à®¿ பெறà¯à®±à®¤à¯.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\"கà¯à®•à®¾à®© நீகà¯à®•à®®à¯ வெறà¯à®±à®¿ பெறà¯à®±à®¤à¯.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "பேனிக௠மோசமான கூடà¯à®¤à®²à¯ பஃபர௠%p pos %p ext %p அளவ௠%d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s - %s திறகà¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "பணி பகà¯à®¤à®¿à®¯à¯ˆ உரà¯à®µà®¾à®•à¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "%s விவரதà¯à®¤à¯ˆ வரிசைபà¯à®ªà®Ÿà¯à®¤à¯à®¤ à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: à®®à¯à®´à¯ விவர உளà¯à®³à¯€à®Ÿà¯à®Ÿà¯ˆà®¯à¯à®®à¯ எழà¯à®¤ à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "எதிரà¯à®ªà®¾à®°à®¾à®¤ எழà¯à®¤à¯à®¤à¯ˆ கணà¯à®Ÿà¯à®³à¯à®³à®¤à¯: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: தà¯à®£à¯ˆà®•à¯à®•à®³à®¤à®³ à®à®±à¯à®± நிலைகà¯à®•à¯ நினைவகதà¯à®¤à¯ˆ ஒதà¯à®•à¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "நினைவக ஒதà¯à®•à¯à®•à¯€à®Ÿà¯à®Ÿà¯ பிழை." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: கோபà¯à®ªà®¿à®²à¯ பிழைகள௠உளà¯à®³à®©. இடைனிரà¯à®¤à¯à®¤à®ªà¯à®ªà®Ÿà¯à®•à®¿à®±à®¤à¯.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "செயலாகà¯à®• தகà¯à®¤à®¿ 'i' செலà¯à®²à®¾à®¤à¯, à®®à¯à®°à®£à¯à®ªà®Ÿà¯à®®à¯ தகà¯à®¤à®¿ à®à®±à¯à®•à®©à®µà¯‡ கà¯à®±à®¿à®ªà¯à®ªà®¿à®Ÿà®ªà¯à®ªà®Ÿà¯à®Ÿà¯à®³à¯à®³à®¤à¯" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "உளà¯à®³à¯€à®Ÿà¯à®•à®³à¯ˆ சேரà¯à®•à¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ. நினைவில௠இலà¯à®²à¯ˆ\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "உறà¯à®¤à®¿à®šà¯†à®¯à¯à®¤à®²à¯: ‘விதி’ மதிபà¯à®ªà®¿à®©à¯à®±à®¿ திரà¯à®ªà¯à®ªà®ªà¯à®ªà®Ÿà¯à®Ÿà®¤à¯." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "உறà¯à®¤à®¿à®šà¯†à®¯à¯à®¤à®²à¯: ‘ஹேட௠விதி’ மதிபà¯à®ªà®¿à®©à¯à®±à®¿ திரà¯à®ªà¯à®ªà®ªà¯à®ªà®Ÿà¯à®Ÿà®¤à¯." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "வரிசை எழà¯à®¤à¯à®¤à®¿à®©à¯ à®®à¯à®Ÿà®¿à®µà¯ காணபà¯à®ªà®Ÿà®µà®¿à®²à¯à®²à¯ˆ? (உளà¯à®³à¯€à®Ÿà¯: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: சடà¯à®Ÿà®µà®¿à®°à¯‡à®¾à®¤ திறபà¯à®ªà¯ {, நெஸà¯à®Ÿà®¿à®™à¯ கà¯à®´à¯à®•à¯à®•à®³à¯à®•à¯à®•à¯ அனà¯à®®à®¤à®¿ இலà¯à®²à¯ˆ\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: ரீஜெகà¯à®¸à¯ கà¯à®´à¯ சேரà¯à®ªà¯à®ªà®¿à®²à¯ பிழை: {} இடையிலான பொரà¯à®Ÿà¯à®•à®³à®¿à®©à¯ செலà¯à®²à®¾à®¤ " "எணà¯à®£à®¿à®•à¯à®•à¯ˆ\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: ரீஜெகà¯à®¸à¯ கà¯à®´à¯ சேரà¯à®ªà¯à®ªà®¿à®²à¯ பிழை: செலà¯à®²à®¾à®¤ மூடà¯à®¤à®²à¯ }, பொரà¯à®¨à¯à®¤à¯à®®à¯ திறபà¯à®ªà¯ { " "கணà¯à®Ÿà®±à®¿à®¯à®ªà¯à®ªà®Ÿà®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: உள௠பஃபரின௠வரமà¯à®ªà¯à®®à¯€à®±à®²à¯ கணà¯à®Ÿà®±à®¿à®¯à®ªà¯à®ªà®Ÿà¯à®Ÿà¯à®³à¯à®³à®¤à¯, %d எழà¯à®¤à¯à®¤à¯à®•à¯à®•à®³à¯ " "மீறபà¯à®ªà®Ÿà¯à®Ÿà¯à®³à¯à®³à®©\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: உளà¯à®³à¯€à®Ÿà¯à®Ÿà¯ வரி '%s'யை விளகà¯à®• à®®à¯à®Ÿà®¿à®¯à®µà®¿à®²à¯à®²à¯ˆ\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "%s விவரதà¯à®¤à®¿à®²à¯ பிழை, எறà¯à®±à¯à®¤à®²à¯ தோலà¯à®µà®¿à®¯à¯à®±à¯à®±à®¤à¯\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: பினà¯à®šà¯†à®¯à®²à¯à®®à¯à®±à¯ˆ விதிகளை இணைபà¯à®ªà®¤à®¿à®²à¯ பிழைகள௠உளà¯à®³à®©. இடைனிரà¯à®¤à¯à®¤à®ªà¯à®ªà®Ÿà¯à®•à®¿à®±à®¤à¯.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/zh_CN.po0000644000175000017500000005312212654035202014461 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 04:12+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: zh_CN\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "错误：内存ä¸è¶³ã€‚\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "错误：basedir %s ä¸æ˜¯ç›®å½•ï¼Œæ­£åœ¨è·³è¿‡ã€‚\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "错误：无法将目录 %s 添加到æœç´¢è·¯å¾„。\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "错误：无法分é…内存。\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "写入ä½ç½®æ— æ•ˆ\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "æ‹’ç»è®¸å¯æƒé™\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "内存ä¸è¶³\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "é…置文件未éµå®ˆåè®®\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "é…置文件和签åä¸åŒ¹é…\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "é…置文件版本ä¸å— Apparmor 模å—支æŒ\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "é…置文件已存在\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "é…置文件ä¸å­˜åœ¨\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: 无法添加\"%s\"。 " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: 无法替æ¢\"%s\"。 " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: 无法去除\"%s\"。 " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: 无法写入 stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: 声明：无效选项： %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "添加\"%s\"æˆåŠŸã€‚\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "替æ¢\"%s\"æˆåŠŸã€‚\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "去除\"%s\"æˆåŠŸã€‚\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC 无效的递增缓冲区：%p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "无法打开 %s ï¼ %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "内存分é…错误：无法去除 ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "内存分é…错误：无法去除 %s:%s。" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "无法创建工作区域\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "无法åºåˆ—化é…置文件 %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: 无法写入整个é…置文件项\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "å‘现æ„外字符： '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) å‘现æ„外字符：“%sâ€" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: 无法为å­åŸŸåŸºåº•è£…入点分é…内存\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "警告：无法在 %s 中找到åˆé€‚çš„ fs，是å¦å·²è£…入？\n" "使用 --subdomainfs 覆盖。\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s：对ä¸èµ·ã€‚æ‚¨éœ€è¦ root 特æƒæ‰èƒ½è¿è¡Œæ­¤ç¨‹åºã€‚\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s：警告ï¼æ‚¨å·²å°†æ­¤ç¨‹åºè®¾ç½®ä¸º setuid root。\n" "任何å¯ä»¥è¿è¡Œæ­¤ç¨‹åºçš„人都å¯ä»¥æ›´æ–° AppArmor é…置文件。\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "错误：无法读å–é…置文件 %s: %s。\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "内存分é…错误。" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: 文件中å‘现错误。正在中止。\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "ä¸å…许使用大写é™å®šç¬¦ “RWLIMXâ€ï¼Œè¯·è½¬æ¢ä¸ºå°å†™\n" "有关细节，请å‚è§ apparmor.d(5) 手册页。\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "冲çªçš„“aâ€å’Œâ€œwâ€è®¸å¯æƒé™äº’相排斥。" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Exec é™å®šç¬¦'i'无效，已指定了和其冲çªçš„é™å®šç¬¦" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "æ— é™åˆ¶ exec é™å®šç¬¦ (%c%c) å…许将一些å±é™©çš„环境å˜é‡ä¼ é€’到无é™åˆ¶çš„进程；有关细节，请å‚è§â€œman 5 apparmor.dâ€ã€‚\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "Exec é™å®šç¬¦â€œ%câ€æ— æ•ˆï¼Œå·²æŒ‡å®šäº†ä¸Žå…¶å†²çªçš„é™å®šç¬¦" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "执行é™å®šç¬¦â€œ%c%câ€æ— æ•ˆï¼Œä¸Žå·²ç»æŒ‡å®šçš„é™å®šç¬¦å†²çª" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "内部：输入中有æ„外方å¼å­—符“%câ€" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "内部错误产生无效的æƒé™ 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor 语法分æžå™¨é”™è¯¯ï¼š%s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "无法åˆå¹¶é¡¹ã€‚内存ä¸è¶³\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "无法创建别å %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "é…置文件标志“debugâ€ä¸å†æœ‰æ•ˆã€‚" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "无效的é…置文件标志：%s。" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "声明：`rule'返回 NULL。" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "模å¼æ— æ•ˆï¼Œåœ¨æ‹’ç»è§„则中，“xâ€ä¸èƒ½åœ¨æ‰§è¡Œé™å®šç¬¦â€œiâ€ã€â€œpâ€æˆ–“uâ€ä¹‹åŽ" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "模å¼æ— æ•ˆï¼Œâ€œxâ€å¿…须在执行é™å®šç¬¦â€œiâ€ã€â€œpâ€ã€â€œcâ€æˆ–“uâ€ä¹‹åŽ" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "æ–¹å¼æ— æ•ˆï¼Œâ€œxâ€å‰é¢å¿…须带有 exec é™å®šç¬¦â€œiâ€ã€â€œpâ€æˆ–“uâ€" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "声明：“network_ruleâ€è¿”回无效å议。" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "声明：“change_profileâ€è¿”回 NULL。" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "声明：'hat rule'返回 NULL。" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "声明：“local_profile ruleâ€è¿”回 NULL。" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "å–消设置 if 表达å¼ä¸­ä½¿ç”¨çš„布尔å˜é‡ %s" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "ä¸å®‰å…¨è§„则缺少 exec 许å¯æƒé™" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "å­é›†åªèƒ½ä½¿ç”¨é“¾æŽ¥è§„则。" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "链接和执行æƒé™å†²çªï¼Œç”±äºŽä¸€ä¸ªæ–‡ä»¶è§„则使用 ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "在命åçš„é…置文件转æ¢ä¸­ï¼Œé“¾æŽ¥æƒé™ä¸å—å…许。\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "是å¦ç¼ºå°‘行结æŸå­—符？（项：%s）" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "无效网络项。" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "功能 %s 无效。" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: ä¸åˆæ³•çš„å·¦ä¾§å¤§æ‹¬å· {，ä¸å…许嵌套分组\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex 分组错误：{} 内的项目数无效\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "%s: Regex 分组错误：无效的å³ä¾§èŠ±æ‹¬å· }，未检测到匹é…çš„å·¦ä¾§èŠ±æ‹¬å· {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "%s: Regex 分组错误：组或字符类未关闭，需è¦å³ä¾§èŠ±æ‹¬å· }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: 检测到内部缓冲区溢出，超过 %d 个字符\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: 无法对输入行'%s'进行语法分æž\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "åˆå¹¶é…置文件 %s 的规则时出错，无法装载\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "错误 é…置文件 %s 包å«ä¸èƒ½ä¸Žæ­¤å†…核一起使用的策略元素：\n" "\tä¸å…许“*â€ã€â€œ?â€ã€å­—符范围，也ä¸å…许“或â€æ“作。\n" "\t“**â€åªèƒ½åœ¨è§„则结尾处使用。\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "处ç†é…置文件 %s çš„ regex 时出错，无法装载\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "扩展é…置文件 %s çš„å˜é‡æ—¶å‡ºé”™ï¼Œæ— æ³•è£…è½½\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "为é…置文件 %s 添加 hat 访问规则时出错\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "é…置文件 %s 中存在错误，未能装载\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s：在åŽå¤„ç†ä¸­å‘现错误。正在中止。\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s：在 Regex åŽå¤„ç†ä¸­å‘现错误。正在中止。\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s：在åŽå¤„ç†ä¸­å‘现错误。正在中止。\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: 在组åˆè§„则åŽå¤„ç†ä¸­å‘现错误。正在中止。\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/mk.po0000644000175000017500000004320212654035202014065 0ustar jjjj# Macedonian message file for YaST2 (@memory@). # Copyright (C) 2006 SUSE Linux Products GmbH. # Зоран ДимовÑки # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:27+0000\n" "Last-Translator: Зоран ДимовÑки \n" "Language-Team: Macedonian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: mk\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/nl.po0000644000175000017500000005436712654035202014105 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:24+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: nl\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Fout: Geheugen vol\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Fout: basedir %s is geen map en wordt overgeslagen.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Fout: kan directory %s niet toevoegen aan zoekpad.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Fout: Geheugen vol\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Foutieve schrijfpositie\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Rechten geweigerd\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Geheugen vol\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profiel is niet in overeenstemming met het protocol\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profiel komt niet overeen met de ondertekening\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profielversie wordt niet ondersteund door de AppArmor-module\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profiel bestaat al\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profiel bestaat niet\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Niet in staat om \"%s\" toe te voegen. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Niet in staat om \"%s\" te vervangen. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Niet in staat om \"%s\" te verwijderen. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Niet in staat om naar stdout te schrijven\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: BEWERING: Ongeldige optie: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Toevoeging geslaagd voor \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Vervanging geslaagd voor \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Verwijdering geslaagd van \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIEK: Foutieve verhoging van de buffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Kan %s - %s niet openen\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Geheugenreserveringsfout: kan ^%s niet verwijderen\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Geheugenreserveringsfout: kan %s:%s niet verwijderen." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Kan geen werktruimte aanmaken\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "Kan profiel %s niet bewerken\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Het gehele profiel kon niet opgeslagen worden\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Onverwacht teken gevonden: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Onverwacht teken gevonden: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Kon geen geheugen reserveren voor het subdomeinbasis aankoppelpunt\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Waarschuwing: kan geen geschikt bestandssysteem vinden in %s. Is het wel " "gekoppeld?\n" "Gebruik --subdomainfs om te negeren.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: U hebt privileges voor de root nodig als u dit programma wilt " "uitvoeren.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Waarschuwing! U hebt dit programma systeembeheerrechten gegeven (setuid " "root).\n" "Iederen die dit programma kan uitvoeren, kan ook uw AppArmor-profielen " "bijwerken.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Fout: kan profiel %s niet lezen: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Fout in geheugenreservering." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Fouten gevonden in het bestand. Stop.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Bepalingen met hoofdletters \"RWLIMX\" worden niet meer gebruikt. Gebruik " "kleine letters\n" "Kijk op de apparmor.d(5)-manpage voor meer informatie.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Conflict: combinaties met 'a' en 'w' gaan niet samen." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec bepaling 'i' ongeldig, conflicterende bepaling is reeds opgegeven" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Onbegrensde exec-bepaling (%c%c) staat toe dat sommige gevaarlijke " "omgevingsvariabelen worden doorgegeven aan het onbegrensde proces; bekijk '5 " "apparmor.d' voor meer informatie.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Exec-bepaling '%c' is ongeldig. Er is al een conflicterende bepaling " "opgegeven." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Exec-bepaling '%c%c' ongeldig; een bepaling, waar deze mee botst, is reeds " "opgegeven" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Intern: onverwacht modusteken '%c' in invoer" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Interne fout genereerde ongeldige permissie 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Fout in AppArmor-parser: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Kan items niet samenvoegen. Onvoldoende geheugen\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Kan alias %s -> %s niet aanmaken\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Profielvlag 'debug' is niet langer geldig." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Ongeldige profielvlag %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Bewering: `rule' gaf NULL terug." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Ongeldige modus, in weigerregels moet 'x' voorafgegaan worden door exec-" "bepaling 'i', 'u' of 'p'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Ongeldige modus, 'x' moet voorafgegaan worden door exec-bepaling 'i', 'c', " "'u' of 'p'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Ongeldige modus. 'x' moet worden voorafgegaan door exec-bepaling 'i', 'p' of " "'u'." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Bewering: 'network_rule' heeft ongeldig protocol geretourneerd." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Bewering: 'change_profile' heeft NULL geretourneerd." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Bewering: `hat rule' gaf NULL terug." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Bewering: `local_profile' gaf NULL terug." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" "Niet-ingestelde booleaanse variabele %s wordt gebruikt in if-expressie" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "onveilige regel ontbrekende exec-machtigingen" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "Subset kan alleen worden gebruikt met linkregels." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "Link- en exec-permissies conflicteren op een bestandsregel die -> gebruikt" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "Link-permissies zijn niet toegestaan bij het transporteren van een profiel " "met een naam.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "Ontbreekt een regeleindeteken? (invoer: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Ongeldig netwerkitem." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Ongeldige functie %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Ongeldige open {, het nesten van groepen is niet toegestaan\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex groepfout: Ongeldig aantal tussen {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex groepfout: Ongeldige close }, geen bijbehorende open { gevonden\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Fout bij groeperen reguliere expressies: ongesloten groepen of " "tekencategorie, terwijl sluiting wordt verwacht }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Interne buffer overschreden, %d tekens teveel\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Niet in staat om regel '%s' te verwerken\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "FOUT bij het samenvoegen van regels voor profiel %s. Kan niet laden\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "FOUT profiel %s bevat beleidselementen die niet kunnen worden gebruikt met " "deze kernel:\n" "\t'*', '?', tekenbereiken en alternaties zijn niet toegestaan.\n" "\t'**' mag alleen worden gebruikt aan het eind van een regel.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "FOUT bij het verwerken van reguliere expressies voor profiel %s. Kan niet " "laden\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "FOUT bij variabelen uitbreiden voor profiel %s. Kan niet laden\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "FOUT bij toevoegen van de hat-toegangregel voor profiel %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "FOUT in profiel %s, laden mislukt\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: fouten gevonden tijdens het naverwerken. Afbreken.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Fouten gevonden tijdens de nabewerking van regex regels. Stop.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: fouten gevonden tijdens de naverwerking. Stopt.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Fouten gevonden in het combineren van de nabewerkingsregels. Stop.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ru.po0000644000175000017500000007020712676660175014132 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2016-03-29 14:53+0000\n" "Last-Translator: Eugene Marshal \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-03-30 05:13+0000\n" "X-Generator: Launchpad (build 17967)\n" "Language: ru\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Ошибка: ÐедоÑтаточно памÑти.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Ошибка: базовый каталог %s не ÑвлÑетÑÑ ÐºÐ°Ñ‚Ð°Ð»Ð¾Ð³Ð¾Ð¼, пропуÑкаетÑÑ.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Ошибка: не удалоÑÑŒ добавить каталог %s в путь поиÑка.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Ошибка: не удалоÑÑŒ выделить памÑÑ‚ÑŒ\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Ðеверное положение запиÑи\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "ДоÑтуп запрещен\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "ÐедоÑтаточно памÑти\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Ðевозможно Ñкопировать профиль: ÐедопуÑтимый Ð°Ð´Ñ€ÐµÑ Ð¿Ð°Ð¼Ñти\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Профиль не ÑоответÑтвует протоколу\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Профиль не ÑоответÑтвует подпиÑи\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "ВерÑÐ¸Ñ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ Ð½Ðµ поддерживаетÑÑ Ð¼Ð¾Ð´ÑƒÐ»ÐµÐ¼ Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Профиль уже ÑущеÑтвует\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Профиль не ÑущеÑтвует\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "Ðет доÑтупа; попытатьÑÑ Ð·Ð°Ð³Ñ€ÑƒÐ·Ð¸Ñ‚ÑŒ профиль Ñ ÑƒÑ‡Ñ‘Ñ‚Ð¾Ð¼ ограничений?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "ÐеизвеÑÑ‚Ð½Ð°Ñ Ð¾ÑˆÐ¸Ð±ÐºÐ° (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Ðевозможно добавить \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Ðевозможно заменить \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Ðевозможно удалить \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Ðевозможно запиÑать в stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Ðевозможно запиÑать вывод в файл\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ПРЕДУПРЕЖДЕÐИЕ: ÐедопуÑтимый параметр: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Дополнение уÑпешно выполнено Ð´Ð»Ñ \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Замена Ð´Ð»Ñ \"%s\" выполнена.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Удаление Ð´Ð»Ñ \"%s\" выполнено.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "ТРЕВОГÐ! неправильный инкрементный буфер %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "Сетевые правила, указанные в профиле %s не применÑÑŽÑ‚ÑÑ\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "ÐедопуÑтимый тип шаблона\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ðевозможно открыть %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Ошибка Ð²Ñ‹Ð´ÐµÐ»ÐµÐ½Ð¸Ñ Ð¿Ð°Ð¼Ñти: невозможно удалить ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Ошибка Ð²Ñ‹Ð´ÐµÐ»ÐµÐ½Ð¸Ñ Ð¿Ð°Ð¼Ñти: невозможно удалить %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "невозможно Ñоздать рабочую облаÑÑ‚ÑŒ\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "невозможно Ñеарилизировать профиль %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Ðевозможно запиÑать запиÑÑŒ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ Ñ†ÐµÐ»Ð¸ÐºÐ¾Ð¼\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: Ðевозможно запиÑать во временные файлы вÑе запиÑи профилÑ\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Ðевозможно открыть '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat не выполнен Ð´Ð»Ñ '%s'" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir не выполнен Ð´Ð»Ñ '%s'" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat не выполнен Ð´Ð»Ñ '%s'" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Ðевозможно открыть '%s' в '%s'" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Ðайден непредвиденный знак: \"%s\"" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "Ð’ определении переменных недопуÑтимы завершающие точки" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Ðайден непредвиденный знак: \"%s\"" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Предупреждение от %s (%s%sÑтрока %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: невозможно выделить памÑÑ‚ÑŒ Ð´Ð»Ñ Ñ‚Ð¾Ñ‡ÐºÐ¸ Ð¼Ð¾Ð½Ñ‚Ð¸Ñ€Ð¾Ð²Ð°Ð½Ð¸Ñ Ð±Ð°Ð·Ð¾Ð²Ð¾Ð³Ð¾ поддомена\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Предупреждение: не удалоÑÑŒ найти подходÑщий fs в %s; Ñмонтирован?\n" "Чтобы переопределить, иÑпользуйте поддомены.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Извините. Ð”Ð»Ñ Ð·Ð°Ð¿ÑƒÑка Ñтой программы необходимы права админиÑтратора.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Предупреждение! Ð”Ð»Ñ Ñтой программы задан идентификатор Ð¿Ð¾Ð»ÑŒÐ·Ð¾Ð²Ð°Ñ‚ÐµÐ»Ñ " "root.\n" "Любой пользователь, запуÑтивший Ñту программу, Ñможет обновить ваши профили " "AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Ошибка: не удалоÑÑŒ прочитать профиль %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Ошибка Ð²Ñ‹Ð´ÐµÐ»ÐµÐ½Ð¸Ñ Ð¿Ð°Ð¼Ñти." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Обнаружены ошибки в файле. Прерываем.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Ключи в верхнем региÑтре \"RWLIMX\" иÑключены; выполните преобразование к " "нижнему региÑтру\n" "Подробнее Ñм. на ÑÑ‚Ñ€. руководÑтва apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Конфликт взаимоиÑключающих разрешений \"a\" и \"w\"." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "ÐедопуÑтимый ключ запуÑка \"i\", уже задан конфликтующий ключ" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Ключ неограниченного Ð²Ñ‹Ð¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ (%c%c) разрешает передавать опаÑные " "переменные Ñреды в неограниченный процеÑÑ. Подробнее Ñм. \"man 5 " "apparmor.d\".\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "ÐедопуÑтимый ключ запуÑка \"%c\", уже задан конфликтующий ключ" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "ÐедопуÑтимый Ñпецификатор запуÑка '%c%c', уже определён конфликтующий " "Ñпецификатор" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "ВнутреннÑÑ Ð¾ÑˆÐ¸Ð±ÐºÐ°: непредвиденный знак \"%c\" при вводе" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Ðеверное разрешение 0x%llx вызвало внутреннюю ошибку\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Ошибка анализатора AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Ðевозможно объединить запиÑи. Ðе хватает памÑти\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Вложение Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ Ð´Ð¾Ð»Ð¶Ð½Ð¾ начинатьÑÑ Ñ '/'." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Имена профилей должны начинатьÑÑ Ñ a '/', проÑтранÑтва имён или ключевого " "Ñлова 'profile' или 'hat'." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Ðе удалоÑÑŒ Ñоздать пÑевдоним %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "Флаг Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ chroot_relative конфликтует Ñ namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "Флаг Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ mediate_deleted конфликтует Ñ delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Флаг Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ attach_disconnected конфликтует Ñ no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "Флаг Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ chroot_attach conflicts Ñ chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Флаг Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ 'debug' больше не иÑпользуетÑÑ." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "ÐедопуÑтимый флаг профилÑ: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Предупреждение: \"rule\" возвращает NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "ÐедопуÑтимый режим, в правилах Ð·Ð°Ð¿Ñ€ÐµÑ‰ÐµÐ½Ð¸Ñ Ð¿ÐµÑ€ÐµÐ´ 'x' не должен ÑтоÑÑ‚ÑŒ ключ " "запуÑка 'i', 'p' или 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "ÐедопуÑтимый режим, перед 'x' должен ÑтоÑÑ‚ÑŒ ключ запуÑка 'i', 'p', 'c' или " "'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "ÐедопуÑтимый режим, перед \"x\" должен находитьÑÑ ÐºÐ»ÑŽÑ‡ Ð²Ñ‹Ð¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ \"i\", " "\"p\" или \"u\"" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Предупреждение: \"network_rule\" возвращает недопуÑтимый протокол." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Предупреждение: \"change_profile\" возвращает NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Предупреждение: \"hat rule\" возвращает NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Предупреждение: 'local_profile rule' возвратило NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Ð’ выражении IF иÑпользуетÑÑ Ð½ÐµÐ·Ð°Ð´Ð°Ð½Ð½Ð°Ñ Ð»Ð¾Ð³Ð¸Ñ‡ÐµÑÐºÐ°Ñ Ð¿ÐµÑ€ÐµÐ¼ÐµÐ½Ð½Ð°Ñ %s" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "в правиле небезопаÑных отÑутÑтвуют Ñ€Ð°Ð·Ñ€ÐµÑˆÐµÐ½Ð¸Ñ Ð½Ð° выполнениÑ" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "подмножеÑтво может иÑпользоватьÑÑ Ñ‚Ð¾Ð»ÑŒÐºÐ¾ Ñ Ð¿Ñ€Ð°Ð²Ð¸Ð»Ð°Ð¼Ð¸ ÑвÑзи." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "Ñ€Ð°Ð·Ñ€ÐµÑˆÐµÐ½Ð¸Ñ Ð½Ð° выполнение и ÑвÑзь конфликтуют Ñ Ð¿Ñ€Ð°Ð²Ð¸Ð»Ð¾Ð¼ файла, иÑпользующим -" ">" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "Ñ€Ð°Ð·Ñ€ÐµÑˆÐµÐ½Ð¸Ñ Ð½Ð° ÑвÑзь не допуÑкаютÑÑ Ð¿Ñ€Ð¸ перемещении именованного профилÑ.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "отÑутÑтвует знак конца Ñтроки? (запиÑÑŒ: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "ÐедопуÑÑ‚Ð¸Ð¼Ð°Ñ ÑÐµÑ‚ÐµÐ²Ð°Ñ Ð·Ð°Ð¿Ð¸ÑÑŒ." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "ÐедопуÑÑ‚Ð¸Ð¼Ð°Ñ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½Ð¾ÑÑ‚ÑŒ %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "Ошибка анализатора AppArmor,%s%s в Ñтроке %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Ðеверное открытие {, Ð²Ð»Ð¾Ð¶ÐµÐ½Ð½Ð°Ñ Ð³Ñ€ÑƒÐ¿Ð¿Ð¸Ñ€Ð¾Ð²ÐºÐ¸ не допуÑкаютÑÑ\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Ошибка группировки Regex: Ðеверное чиÑло объектов между {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Ошибка группировки Regex: Ðеверное закрытие }, обнаружено что нет " "ÑоответÑтвующего Ð¾Ñ‚ÐºÑ€Ñ‹Ñ‚Ð¸Ñ {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: ошибка группировки Regex. Ðе закрыта группировка или клаÑÑ Ð·Ð½Ð°ÐºÐ¾Ð²; " "ожидаетÑÑ Ð·Ð°ÐºÑ€Ñ‹Ð²Ð°ÑŽÑ‰Ð°Ñ Ñкобка }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Обнаружено переполнение внутреннего буфера, лишние %d знаков\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: невозможно обработать Ñтроку ввода \"%s\"\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" "%s: ÐедопуÑтимое Ð¸Ð¼Ñ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ '%s' - неправильное регулÑрное выражение\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ОШИБКРпри объединении правил Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ %s, не удалоÑÑŒ загрузить\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ОШИБКÐ: профиль %s Ñодержит Ñлементы политики, неподходÑщие Ð´Ð»Ñ Ñтого Ñдра:\n" "\t\"*\", \"?\", диапазоны знаков и Ñ‡ÐµÑ€ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð½Ðµ допуÑкаютÑÑ.\n" "\t\"**\" может иÑпользоватьÑÑ Ñ‚Ð¾Ð»ÑŒÐºÐ¾ в конце правила.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "ОШИБКРпри обработке регулÑрных выражений Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ %s; не удалоÑÑŒ " "загрузить\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "Ошибка при развертывании переменных Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ %s; не удалоÑÑŒ загрузить\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "ОШИБКРпри добавлении правила доÑтупа к HAT Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ð¸Ð»Ñ %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ОШИБКРв профиле %s, не удалоÑÑŒ загрузить\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Обнаружены ошибки во Ð²Ñ€ÐµÐ¼Ñ Ð¿Ð¾Ñтобработки. Прекращение работы.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: обнаружены ошибки при заключительной обработке регулÑрного выражениÑ. " "ÐžÐ¿ÐµÑ€Ð°Ñ†Ð¸Ñ Ð¿Ñ€ÐµÑ€Ñ‹Ð²Ð°ÐµÑ‚ÑÑ.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Обнаружены ошибки во Ð²Ñ€ÐµÐ¼Ñ Ð¿Ð¾Ñтобработки. Прекращение работы.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: обнаружены ошибки при заключительной обработке Ð¾Ð±ÑŠÐµÐ´Ð¸Ð½ÐµÐ½Ð¸Ñ Ð¿Ñ€Ð°Ð²Ð¸Ð». " "ÐžÐ¿ÐµÑ€Ð°Ñ†Ð¸Ñ Ð¿Ñ€ÐµÑ€Ñ‹Ð²Ð°ÐµÑ‚ÑÑ.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "Ðевозможно выполнить включение каталога '%s' в '%s'" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "ÐедоÑтаточно памÑти" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Ðевозможно Ñоздать временный каталог: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "РаÑположение файла во временном каталоге: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Ðевозможно обновить временный каталог: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "Ð¿Ñ€ÐµÑ„Ð¸ÐºÑ Ð²Ð»Ð°Ð´ÐµÐ»ÑŒÑ†Ð° не разрешён" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "%s: Ðевозможно запиÑать %s\n" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" "Ошибка: невозможно прочитать двоичный профиль или временный файл %s: %s.\n" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "Ошибка: невозможно прочитать временный файл '%s', пропуÑк...\n" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ms.po0000644000175000017500000006163712654035202014111 0ustar jjjj# Malay translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2014-09-21 05:21+0000\n" "Last-Translator: abuyop \n" "Language-Team: Malay \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ms\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Ralat: Kehabisan ingatan.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Ralat: basedir %s bukanlah direktori, melangkau.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Ralat: Tidak dapat tambah direktori %s untuk gelintar laluan.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Ralat: Tidak dapat peruntuk ingatan.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Kedudukan tulis teruk\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Keizinan dinafikan\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Kehabisan ingatan\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Tidak dapat salin profil. Alamat ingatan teruk\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil tidak menyebentuk ke protokol\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil tidak sepadan dengan tandatangan\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Versi profil tidak disokong oleh modul Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil sudah wujud\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil tidak wujud\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "Keizinan dinafikan; cuba untuk muatkan profil semasa dikurung?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Ralat tidak diketahui (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Tidak boleh tambah \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Tidak boleh ganti \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Tidak boleh buang \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Tidak boleh tulis ke stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Tidak boleh tulis ke fail output\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Pilihan tidak sah: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Penambahan berjaya untuk \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Penggantian berjaya bagi \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Pembuangan berjaya bagi \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "penimbal tokokan teruk PANIC %p pos %p ext %p saiz %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "peraturan rangkaian profil %s tidak dikuat kuasakan\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Jenis corak tidak diketahui\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Tidak boleh buka %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Ralat Peruntukan Ingatan: Tidak boleh buang ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Ralat Peruntukan Ingatan: Tidak boleh buang %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "tidak boleh cipta kawasan kerja\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "tidak boleh serialkan profil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Tidak boleh tulis keseluruhan masukan profil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: Tidak boleh tulis keseluruhan masukan profil ke cache\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Tidak dapat buka '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat gagal bagi '%s'" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir gagalkan '%s'" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat gagal bagi '%s'" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Tidak dapat buka '%s' dalam '%s'" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Temui aksara tidak jangka: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "Deklarasi pembolehubah tidak menerima koma bertitik" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Temui aksara tidak jangka: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Amaran dari %s (%s%sbaris %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Tidak dapat peruntuk ingatan untuk titik lekap subdomainbase\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Amaran: tidak boleh cari fs yang sesuai dalam %s, adakah ia dilekap?\n" "Guna --subdomainfs untuk batalkan.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Maaf. Anda perlukan kelayakan root untuk jalankan program ini.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Amaran! Anda telah tetapkan root setuid program ini.\n" "Sesiapa sahaja boleh jalankan program ini boleh kemaskin profil AppArmor " "anda.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Ralat: Tidak dapat baca profil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Ralat peruntukan ingatan." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "Berjaya muatkan cache untuk \"%s\".\n" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "Berjaya muatkan semula cache untuk \"%s\".\n" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Ralat ditemui dalam fail. Menghenti paksa.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Penerang huruf besar \"RWLIMX\" sudah lapok, sila tukar ia kepada huruf " "kecil\n" "Lihat halaman panduan apparmor.d(5) untuk perincian.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Konflik kekal 'a' dan 'w' adalah ekslusif secara bersama." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Penerang exec 'i' tidak sah, penerang berkonflik sudah dinyatakan" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Penerang exec tidak terkurung (%c%c) membolehkan beberapa pembolehubah " "persekitaran merbahaya melepasi ke proses tidak terkurung; 'man 5 " "apparmor.d' untuk perincian.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "Penerang exec '%c' tidak sah, penerang berkonflik sudah dinyatakan" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "Penerang exec '%c%c' tidak sah, penerang berkonflik sudah dinyatakan" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Dalaman: Mod aksara '%c' tidak dijangka dalam input" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Ralat dalaman menjana perm 0x%llx tidak sah\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Ralat penghurai AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Tidak dapat gabungkan masukan. Kehabisan Ingatan\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" "profil %s: mempunyai peraturan tergabung %s dengan penerang x yang " "berkonflik\n" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Lampiran profil mesti bermula dengan tanda '/'." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Nama profil mesti bermula dengan tanda '/', ruang nama atau kata kunci " "'profile' atau 'hat'." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Gagal cipta alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "Bendera profil chroot_relative berkonflik dengan namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "Bendera profil mediate_deleted berkonflik dengan delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Bendera profil attach_disconnected berkonflik dengan no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "Bendera profil chroot_attach berkonflik dengan chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Bendera profil 'nyahpepijat' tidak lagi sah." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Bendera profil tidak sah: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Terap:'rule' kembalikan NOL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Mod tidak sah, semasa menafikan peraturan 'x' tidak boleh didahului oleh " "penerang exec 'i', 'p', atau 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Mod tidak sah, 'x' mesti didahului oleh penerang exec 'i', 'p', 'c', atau 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Mod tidak sah, 'x' mesti didahului oleh penerang exec 'i', 'p', atau 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Terap: 'network_rule' kembalikan protokol tidak sah." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Terap: 'change_profile' kembalikan NOL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Terap: 'hat rule' kembalikan NOL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Terap: 'local_profile rule' kembalikan NOL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Pembolehubah boolean %s tidak ditetap digunakan dalam ungkapan-if" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "peraturan tidak selamat kehilangan keizinan exec" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subset hanya boleh digunakan dengan peraturan pautan." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "konflik kekal pautan dan exec pada peraturan fail menggunakan ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "perms pautan tidak dibenarkan pada peralihan profil bernama.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "hilang penghujung baris aksara? (masukan: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Masukan rangkaian tidak sah." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Keupayaan %s tidak sah." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "Ralat penghurai AppArmor untuk %s%s%s pada baris %d: %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "Ralat penghurai AppArmor, %s%s pada baris %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: Pembuka { tidak dibolehkan, pengumpulan bersarang tidak dibenarkan\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Ralat pengumpulan ungkapan nalar: Bilangan item tidak sah diantara {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Ralat pengumpulan ungkapan nalar: Penutup } tidak sah, tiada pembuka { " "yang sepadan dikesan\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Ralat pengumpulan ungkapan nalar: Pengumpulan atau kelas aksara tidak " "ditutup, menjangkakan penutup }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Penimbal dalaman melimpah dikesan, %d aksara terlebih\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Tidak boleh hurai baris input '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "%s: Nama profil '%s' tidak sah - ungkapan nalar teruk\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "RALAT menggabung peraturan untuk profil %s, gagal dimuatkan\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "RALAT profil %s mengandungi unsur polisi yang tidak boleh diguna oleh kernel " "ini:\n" "\tjulat aksara '*', '?', dan penyelangan tidak dibenarkan.\n" "\t'**' hanya boleh digunakan dihujung peraturan.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "RALAT memproses ungkapan nalar untuk profil %s, gagal dimuatkan\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "RALAT mengembangkan pembolehubah untuk profil %s, gagal dimuatkan\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "RALAT menambah peraturan capaian hat untuk profil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "RALAT dalam profil %s, gagal dimuatkan\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Ralat ditemui semasa pos-pemprosesan. Menghenti paksa.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Ralat ditemui semasa pos-proses ungkapan nalar. Menghenti paksa.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Ralat ditemui semasa pos-proses. Menghenti paksa.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Ralat ditemui semasa menggabungkan pos-pemprosesan peraturan. Menghenti " "paksa.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "Tidak dapat proses direktori include '%s' dalam '%s'" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "Penimbal fitur penuh." #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Kehabisan ingatan" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Tidak dapat cipta direktori cache: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "Fail dalam lokasi direktori cache: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Tidak dapat kemaskini direktori cache: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "Dalaman: aksara mod DBus '%c' tidak dijangka dalam input" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "Ralat dalaman dijana menjana DBus perm 0x%x tidak sah\n" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "nafi awalan tidak dibenarkan" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "awalan pemilik tidak dibenarkan" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan lekap" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan dbus" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan keupayaan" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "syarat lekap %s%s tidak sah" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "peraturan lekap teruk" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "syarat titik lekap buat masa ini tidak disokong" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "syarat pivotroot '%s' tidak sah" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" "%s: ralat pengumpulan ungkapan nalar: simbol ] tidak sah, tiada simbol [ " "dikesan\n" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" "%s: ralat pengumpulan ungkapan nalar: Penyarangan maksimum {} dicapai\n" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "RALAT memproses peraturan policydb bagi profil %s, gagal dimuatkan\n" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "RALAT menggantikan alias untuk profil %s, gagal dimuatkan\n" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "%s: Tidak boleh tulis %s\n" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "Ralat: Tidak dapat baca profil binari atau fail cache %s: %s.\n" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "Ralat: Tidak dapat baca fail cache '%s', melangkau...\n" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "Dalaman: mod %s aksara '%c' tidak dijangka dalam input" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "Ralat dalaman terjana %s tidak sah perm 0x%x\n" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan lekap" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan dbus" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan isyarat" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan ptrace" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan unix" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "awalan pemilik tidak dibenarkan pada peraturan keupayaan" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "peraturan dbus: kumpulan bersyarat %s=() tidak sah" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "peraturan unix: kumpulan bersyarat %s=() tidak sah" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "%s: Ralat ungkapan nalar: aksara '\\' escape\n" apparmor-2.11.0/parser/po/ca.po0000644000175000017500000004675612654035202014062 0ustar jjjj# SOME DESCRIPTIVE TITLE. # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 01:59+0000\n" "Last-Translator: Christian Boltz \n" "Language-Team: Catalan\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ca\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Posició d'escriptura incorrecta\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permís denegat\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Sense memòria\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "El perfil no és compatible amb el protocol\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "El perfil no coincideix amb la signatura\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "El perfil ja existeix\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "El perfil no existeix\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: no es pot afegir \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: no es pot reemplaçar \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: no es pot eliminar \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: no es pot escriure a l'stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: confirmació: l'opció no vàlida: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\" s'ha afegit correctament.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" s'ha reemplaçat correctament.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" s'ha eliminat correctament.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "EMERGÈNCIA: increment incorrecte de la memòria intermèdia %p pos. %p ext. %p " "mida %d res. %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "No es pot obrir %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "no es pot crear l'àrea de treball\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "no es pot serialitzar el perfil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: no es pot escriure tota l'entrada del perfil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "S'ha trobat un caràcter inesperat: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: no s'ha pogut assignar memòria per al punt de muntatge de la base de " "subdomini\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "S'ha produït un error d'assignació de memòria." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: s'han detectat errors al fitxer. S'avortarà l'operació.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "El qualificador d'execució 'i' no és vàlid; entra en conflicte amb un " "qualificador ja especificat" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "No s'han pogut fusionar les entrades. Sense memòria\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Confirmació: `rule' ha retornat NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Confirmació: 'hat rule' ha retornat NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "falta un caràcter de final de línia? (entrada: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: l'obertura { no és vàlida, no es permet la imbricació d'agrupaments\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: s'ha produït un error d'agrupament d'expressions regulars: el nombre " "d'elements entre {} no és vàlid\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: s'ha produït un error d'agrupament d'expressions regulars: el tancament " "} no és vàlid; no s'ha detectat cap obertura { coincident\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: s'ha detectat un desbordament de la memòria intermèdia interna, s'han " "excedit %d caràcters\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: no es pot analitzar la línia d'entrada '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERROR al perfil %s, no s'ha pogut carregar\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: s'han detectat errors en combinar el postprocessament de regles. " "S'avortarà l'operació.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/fi.po0000644000175000017500000005553412654035202014067 0ustar jjjj# translation of apparmor-parser.fi.po to suomi # translation of apparmor-parser.fi.po to # translation of apparmor-parser.po to # translation of subdomain-parser.po to # This file is distributed under the same license as the PACKAGE package. # Copyright (C) YEAR Immunix, Inc. # # Jyri Palokangas , 2005, 2006. # Ilkka Pirskanen , 2005. # Jyri Palokangas , 2007. # Mikko Piippo , 2008. # Jyri Palokagas , 2008. # Sami Ojanen , 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2014-05-01 19:38+0000\n" "Last-Translator: Jiri Grönroos \n" "Language-Team: Suomi \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: fi\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Virhe: Muisti loppui.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Virhe: kantahakemisto %s ei ole hakemisto, ohitetaan.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Virhe: Hakemistoa %s ei voitu lisätä etsintäpolkuun.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Virhe: Muistin varaaminen epäonnistui.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Väärä kirjoituskohta\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Ei käyttöoikeutta\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Muisti loppui\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profiili ei noudata yhteyskäytäntöä\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profiili ei täsmää allekirjoitukseen\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profiilin versio ei ole AppArmor-moduulin tukema\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profiili on jo olemassa\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profiilia ei ole olemassa\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Tuntematon virhe (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" lisäys ei onnistunut. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" korvaus ei onnistunut. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" poisto ei onnistunut. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Kirjoittaminen stdout-tulostusvirtaan ei onnistunut\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Virheellinen valinta: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "%s lisäys onnistui.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "%s korvaus onnistui.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" poisto onnistui.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIIKKI viallinen lisäyspuskuri %p pos %p ext %p koko %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ei voitu avata %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Muistinvarausvirhe: Ei voitu poistaa ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Muistivarausvirhe. Ei voitu poistaa %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "työalueen luominen ei onnistunut\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "profiilin %s sarjallistaminen ei onnistunut\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Koko profiilimerkinnän kirjoittaminen ei onnistunut\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Löytyi odottamaton merkki: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Löytyi odottamaton merkki: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Muistin varaaminen alitoimialuepohjan liitoskohdalle ei onnistunut\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Varoitus: ei löydetä sopivaa tiedostojärjestelmää kohteesta %s, onko osio " "liitetty?\n" "Käytä --subdomainfs ohittaaksesi.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Ohjelman suorittamiseen tarvitaan pääkäyttäjän oikeudet.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Varoitus! Olet asettanut ohjelman setuid-tiedon pääkäyttäjäksi.\n" "Kaikki, jotka voivat suorittaa tämän ohjelman, voivat muuttaa AppArmor-" "profiileja.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Virhe: Ei voitu lukea profiilia %s: %s\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Muistivarausvirhe." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Tiedostosta löytyi virheitä. Keskeytetään.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Isoilla kirjoitetut määritteet \"RWLIMX\" eivät ole suositeltavia. Ole hyvä " "ja korjaa ne pienellä kirjoitetuiksi.\n" "Lue apparmor.d(5) manuaalisivu jos haluat aiheesta lisätietoja.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Ristiriita 'a' ja 'w' oikeudet ovat toisensa pois sulkevia." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec-valitsin 'i' virheellinen, ristiriitainen valitsin mainittu aiemmin" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Vapaa exec-valitsin (%c%c) sallii joidenkin vaarallisten ympäristömuuttujien " "lähettämisen varmistamattomille prosesseille; man 5 apparmor.d jos haluat " "lisätietoja aiheesta.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Exec-valitsin '%c' virheellinen, ristiriidan aiheuttava valitsin määritetty " "jo aiemmin" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Exec-valitsin '%c%c' virheellinen, ristiriidan aiheuttava valitsin " "määritetty jo aiemmin" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Sisäinen: odottamaton tila merkki '%c' syötteessä" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Sisäinen virhe, aiheuttaja virheellinen määritys 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor parser -virhe: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Merkintöjä ei voitu yhdistää. Muisti loppui\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Ei voitu luoda aliasta %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Profiilin lippu 'debug' ei ole enää kelvollinen." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Virheellinen profiilin lippu: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `rule' palautti NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Virheellinen tila, kieltosäännöissä valitsinta 'x' ei saa edeltää valitsin " "'i', 'p' tai 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Virheellinen tila, valitsinta 'x' pitää edeltää valitsin 'i', 'p', 'c' tai " "'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Virheellinen tila, valitsinta 'x' pitää edeltää valitsin 'i', 'p' tai 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: `network_rule' palautti virheellisen protokollan." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: `change_profile' palautti NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: 'hat rule' palautti NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: 'local_profile rule' palautti NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Asettamaton boolean muuttuja %s käytössä if-lausekkeessa" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "turvaton sääntö suoritusoikeudet puuttuvat" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "aliryhmää voidaan käyttää vain linkkisäännöissä." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "linkki ja suoritusoikeudet ristiriidassa tiedostossa, joka käyttää ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "linkkioikeuksia ei sallita nimetyssä profiilinsiirrossa\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "puuttuuko rivin lopetinmerkki? (merkintä: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Virheellinen verkkomerkintä." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Virheellinen kyky %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Virheellinen aloittava {, sisäkkäiset ryhmitykset ei sallittu\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Säännöllisen lausekkeen ryhmitysvirhe: Virheellinen määrä alkioita {} " "välissä\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Säännöllisen lausekkeen ryhmitysvirhe: Virheellinen lopettava }, " "vastaavaa aloittavaa { ei tunnistettu\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex-ryhmitysvirhe: Sulkematon ryhmitys tai merkkiluokka, odotetaan " "sulje } -merkintää\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Sisäisen puskurin ylivuoto, ylitettiin %d merkkiä\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Syöterivin '%s' koostaminen ei onnistunut\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "VIRHE yhdistettäessä profiilin %s sääntöjä, lataaminen ei onnistunut\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "VIRHE profiili %s sisältää menettelytapaelementtejä, jotka eivät toimi tämän " "ytimen kanssa:\n" "\t'*', '?', merkkialueet ja muunnokset eivät ole sallittuja.\n" "\t'**' voidaan käyttää vain säännön lopussa.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "VIRHE käsiteltäessä profiilin %s säännöllisiä lausekkeita, lataaminen ei " "onnistunut\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "VIRHE laajennettaessa muuttujia profiilille %s, lataaminen ei onnistunut\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "VIRHE lisättäessä hattua profiilin %s käyttösääntöön\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "VIRHE profiilissa %s, lataaminen ei onnistunut\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Löydettiin virheitä jälkikäsittelyssä. Keskeytetään.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Löydettiin virheitä säännöllisten lausekkeiden jälkikäsittelyssä. " "Keskeytetään.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Löydettiin virheitä jälkikäsittelyssä. Keskeytetään.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Löydettiin virheitä yhdistyssääntöjen jälkikäsittelyssä. Keskeytetään.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/pt_BR.po0000644000175000017500000005512212654035202014470 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:51+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: pt_BR\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Erro: Sem memória.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Erro: O diretório base %s não é um diretório; ignorando.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Erro: Não foi possível adicionar o diretório %s ao caminho de pesquisa.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Erro: Não foi possível alocar memória.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Posição de gravação incorreta\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permissão negada\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Memória insuficiente\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Perfil não compatível com o protocolo\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Perfil não corresponde à assinatura\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Versão de perfil não suportada pelo módulo do AppArmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "O perfil já existe\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "O perfil não existe\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Impossível adicionar \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Impossível substituir \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Impossível remover \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Impossível gravar em stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: DECLARAR: Opção inválida: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Adição bem-sucedida de \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Substituição bem-sucedida de \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Remoção bem-sucedida de \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PÂNICO: buffer de incremento incorreto %p pos %p ext %p tamanho %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Impossível abrir %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Erro de Alocação de Memória: Impossível remover ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Erro de Alocação de Memória: Impossível remover %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "impossível criar área de trabalho\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "impossível serializar perfil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Impossível gravar toda a entrada do perfil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Caractere inesperado encontrado: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Caractere inesperado encontrado: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Impossível alocar memória para ponto de montagem de base de subdomínio\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Aviso: impossível encontrar um fs adequado em %s. Ele está montado?\n" "Use --subdomainfs para anular.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Você precisa de privilégios de root para executar este programa.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Aviso! Você definiu o setuid deste programa como root.\n" "Qualquer pessoa capaz de executar esse programa poderá atualizar seus perfis " "do AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Erro: Não foi possível ler o perfil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Erro de alocação de memória." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Erros encontrados no arquivo. Interrompendo.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Os qualificadores maiúsculos \"RWLIMX\" foram cancelados; converta-os em " "letras minúsculas\n" "Consulte a página de manual apparmor.d(5) para obter detalhes.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "As permissões 'a' e 'w' de conflito são mutuamente exclusivas." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Qualificador de execução 'i' inválido. Qualificador em conflito já " "especificado" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "O qualificador de execução não delimitado (%c%c) permite que algumas " "variáveis de ambiente perigosas sejam passadas para o processo não " "delimitado; consulte 'man 5 apparmor.d' para obter detalhes.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificador de execução '%c' inválido. Qualificador em conflito já " "especificado" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificador de execução '%c%c' inválido. Qualificador em conflito já " "especificado" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Interno: caractere '%c' inesperado de modo na entrada" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Erro interno gerou permissão inválida 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Erro do analisador do AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Impossível mesclar entradas. Memória Insuficiente\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Falha ao criar o álias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "O flag de perfil 'debug' não é mais válido." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Flag de perfil inválido: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Declarar: `rule' retornou NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Modo inválido. Nas regras de negação, o 'x' não deve ser precedido pelo " "qualificador de execução 'i', 'p' ou 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Modo inválido. O 'x' deve ser precedido pelo qualificador de execução 'i', " "'p','c' ou 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Modo inválido; 'x' deve ser precedido pelo qualificador de execução 'i', 'p' " "ou 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Declarar: `network_rule' retornou um protocolo inválido." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Declarar: `change_profile' retornou NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Declarar: 'hat rule' retornou NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Declaração: a regra 'local_profile' retornou NULO." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Cancelar a definição da variável booleana %s usada na expressão if" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "permissões de execução não seguras com regra ausente" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subconjunto somente deve ser usado com regras de link." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "conflito de permissões de link e execução em uma regra de arquivo usando ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "permissões de link não são permitidas em uma transição de perfil nomeada.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "caractere de fim de linha ausente? (entrada: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Entrada de rede inválida." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Recurso inválido %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Abertura ilegal {, agrupamentos aninhados não permitidos\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Erro de agrupamento de expressão regular: Número inválido de itens entre " "{}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Erro de agrupamento de expressão regular: Fechamento inválido }; nenhuma " "abertura correspondente { detectada\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Erro de agrupamento de expressão regular: Classe de caractere ou " "agrupamento não fechado; aguardando fechamento }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Overflow de buffer interno detectado; %d caracteres excedidos\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Impossível analisar linha de entrada '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ERRO ao fundir regras para o perfil %s; falha ao carregar\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ERRO: O perfil %s contém elementos de política que não podem ser usados com " "este kernel:\n" "\t'*', '?', faixas de caracteres e alternações não são permitidos.\n" "\t'**' somente podem ser usados no final de uma regra.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "ERRO no processamento de expressões regulares para o perfil %s; falha ao " "carregar\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "ERRO ao expandir variáveis para o perfil %s; falha ao carregar\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "ERRO ao adicionar a regra de acesso hat para o perfil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERRO no perfil %s. Falha ao carregar\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: erros encontrados durante o pós-processamento. Interrompendo.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Erros encontrados durante o pós-processamento de expressão regular. " "Interrompendo.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: erros encontrados durante o pós-processamento. Interrompendo.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Erros encontrados no pós-processamento de regras de combinação. " "Interrompendo.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ja.po0000644000175000017500000005774412654035202014070 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:52+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ja\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "エラー:メモリä¸è¶³\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "エラー:ベースディレクトリ %s ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§ã¯ã‚ã‚Šã¾ã›ã‚“。スキップã—ã¦ã„ã¾ã™\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "エラー:ディレクトリ %s を検索パスã«è¿½åŠ ã§ãã¾ã›ã‚“ã§ã—ãŸã€‚\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "エラー:メモリを割り当ã¦ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã§ã—ãŸã€‚\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "ä¸æ­£æ›¸ãè¾¼ã¿ä½ç½®\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "æ‹’å¦ã•ã‚ŒãŸãƒ‘ーミッション\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "メモリä¸è¶³\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "プロファイルãŒãƒ—ロトコルã«æº–æ‹ ã—ã¦ã„ã¾ã›ã‚“\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "プロファイルãŒç½²åã«ä¸€è‡´ã—ã¦ã„ã¾ã›ã‚“\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "プロファイルãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒApparmorモジュールã§ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã¾ã›ã‚“\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "プロファイルã¯ã™ã§ã«å­˜åœ¨ã—ã¾ã™\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "プロファイルãŒå­˜åœ¨ã—ã¾ã›ã‚“\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: 「%sã€ã‚’追加ã§ãã¾ã›ã‚“。 " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: 「%sã€ã‚’ç½®æ›ã§ãã¾ã›ã‚“。 " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: 「%sã€ã‚’削除ã§ãã¾ã›ã‚“。 " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdoutã«æ›¸ãè¾¼ã‚ã¾ã›ã‚“\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT:無効ãªã‚ªãƒ—ション: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "「%sã€ã«ç¶šã追加。\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "「%sã€ã«ç¶šãç½®æ›ã€‚\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "「%sã€ã«ç¶šã削除。\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC ä¸æ­£å¢—分ãƒãƒƒãƒ•ã‚¡ %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "é–‹ã‘ã¾ã›ã‚“ %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "メモリ割り当ã¦ã‚¨ãƒ©ãƒ¼: ^%s を削除ã§ãã¾ã›ã‚“\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "メモリ割り当ã¦ã‚¨ãƒ©ãƒ¼: %s:%s を削除ã§ãã¾ã›ã‚“。" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "作業領域を作æˆã§ãã¾ã›ã‚“\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "プロファイル%sを順番ã«ä¸¦ã¹ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: プロファイルエントリ全体を書ã込むã“ã¨ãŒã§ãã¾ã›ã‚“\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "予期ã—ãªã„文字を検出ã—ã¾ã—ãŸ: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) 予期ã—ãªã„文字ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸ:「%sã€" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: サブドメインベースマウントãƒã‚¤ãƒ³ãƒˆã«å¯¾ã—ã¦ãƒ¡ãƒ¢ãƒªã‚’割り当ã¦ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã§ã—ãŸ\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "警告:é©åˆ‡ãªfs㌠%s ã«è¦‹ã¤ã‹ã‚Šã¾ã›ã‚“。マウントã•ã‚Œã¦ã„ã‚‹ã‹ç¢ºèªã—ã¦ãã ã•ã„。\n" "--subdomainfsを使用ã—ã¦ä¸Šæ›¸ãã—ã¦ãã ã•ã„。\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: ã“ã®ãƒ—ログラムを実行ã™ã‚‹ã«ã¯ã€ãƒ«ãƒ¼ãƒˆç‰¹æ¨©ãŒå¿…è¦ã§ã™ã€‚\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: 警告! ã“ã®ãƒ—ログラムã®setuidをルートã«è¨­å®šã—ã¾ã—ãŸã€‚\n" "ã“ã®ãƒ—ログラムを実行ã§ãるユーザã¯ã™ã¹ã¦ã€AppArmorプロファイルを更新ã§ãã¾ã™ã€‚\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "エラー:プロファイル %s: %s を読ã¿è¾¼ã‚ã¾ã›ã‚“ã§ã—ãŸã€‚\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "メモリ割り当ã¦ã‚¨ãƒ©ãƒ¼ã€‚" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: ファイルã«ã‚¨ãƒ©ãƒ¼ãŒæ¤œå‡ºã•ã‚Œã¾ã—ãŸã€‚中止ã—ã¦ã„ã¾ã™ã€‚\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "大文字ã®ã‚¯ã‚©ãƒªãƒ•ã‚¡ã‚¤ã‚¢ã€ŒRWLIMXã€ã¯æŽ¨å¥¨ã•ã‚Œã¦ã„ã¾ã›ã‚“。å°æ–‡å­—ã«å¤‰æ›ã—ã¦ãã ã•ã„。\n" "詳細ã¯ã€apparmor.d(5)ã®ãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ãƒšãƒ¼ã‚¸ã‚’å‚ç…§ã—ã¦ãã ã•ã„。\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "競åˆ:パーミッション「aã€ã¨ã€Œwã€ã¯äº’ã„ã«æŽ’ä»–çš„ã§ã™ã€‚" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Execクォリファイア「iã€ã¯ç„¡åŠ¹ã§ã™ã€ç›¸åã™ã‚‹ã‚¯ã‚©ãƒªãƒ•ã‚¡ã‚¤ã‚¢ãŒã™ã§ã«æŒ‡å®šã•ã‚Œã¦ã„ã¾ã™" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "制é™ã•ã‚Œã¦ã„ãªã„execクォリファイア(%c%c)ã«ã‚ˆã£ã¦ã€å±é™ºãªç’°å¢ƒå¤‰æ•°ãŒåˆ¶é™ã•ã‚Œã¦ã„ãªã„プロセスã«æ¸¡ã•ã‚Œã¾ã™ã€‚詳細ã¯ã€ã€Œman 5 " "apparmor.dã€ã‚’å‚ç…§ã—ã¦ãã ã•ã„。\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "Execクォリファイア「%cã€ã¯ç„¡åŠ¹ã§ã™ã€‚競åˆã™ã‚‹ã‚¯ã‚©ãƒªãƒ•ã‚¡ã‚¤ã‚¢ãŒã™ã§æŒ‡å®šã•ã‚Œã¦ã„ã¾ã™" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "Execクォリファイア'%c%c' ã¯ç„¡åŠ¹ã§ã™ã€‚競åˆã™ã‚‹ã‚¯ã‚©ãƒªãƒ•ã‚¡ã‚¤ã‚¢ãŒã™ã§ã«æŒ‡å®šã•ã‚Œã¦ã„ã¾ã™" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "内部:予期ã—ãªã„モード文字「%cã€ãŒå…¥åŠ›ã•ã‚Œã¦ã„ã¾ã™" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "内部エラーãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚パーミッシオンãŒæ­£ã—ãã‚ã‚Šã¾ã›ã‚“ 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmorパーサエラー: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "エントリをマージã§ãã¾ã›ã‚“ã§ã—ãŸã€‚メモリä¸è¶³\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "別å %s -> %s を作æˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã§ã—ãŸ\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "プロファイルフラグ'debug'ã¯ç¾åœ¨ã¯åˆ©ç”¨ã§ãã¾ã›ã‚“。" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "プロファイルフラグãŒæ­£ã—ãã‚ã‚Šã¾ã›ã‚“: %s" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert:「ruleã€ã¯NULLã‚’è¿”ã—ã¦ã„ã¾ã™ã€‚" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "無効ãªãƒ¢ãƒ¼ãƒ‰ã§ã™ã€‚æ‹’å¦ãƒ«ãƒ¼ãƒ«å†…ã§ã¯ã€Œxã€ã®å‰ã«Execクォリファイア「iã€ã€ã€Œpã€ã€ã¾ãŸã¯ã€Œuã€ã‚’付ã‘ã¦ã¯ã„ã‘ã¾ã›ã‚“。" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "無効ãªãƒ¢ãƒ¼ãƒ‰ã§ã™ã€‚「xã€ã®å‰ã«ã¯å®Ÿè¡Œä¿®é£¾å­ã€Œiã€ã€ã€Œpã€ã€ã€Œcã€ã¾ãŸã¯ã€Œuã€ãŒå¿…è¦ã§ã™ã€‚" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "無効ãªãƒ¢ãƒ¼ãƒ‰ã§ã™ã€‚「xã€ã®å‰ã«ã‚¯ã‚©ãƒªãƒ•ã‚¡ã‚¤ã‚¢ã€Œiã€ã€ã€Œpã€ã€ã¾ãŸã¯ã€Œuã€ãŒå¿…è¦ã§ã™" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert:「network_ruleã€ã¯ç„¡åŠ¹ãªãƒ—ロトコルを返ã—ã¦ã„ã¾ã™ã€‚" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert:「change_profileã€ã¯NULLã‚’è¿”ã—ã¦ã„ã¾ã™ã€‚" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert:「hat ruleã€ã¯NULLã‚’è¿”ã—ã¦ã„ã¾ã™ã€‚" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: 「local_profile ruleã€ã¯ NULL ã‚’è¿”ã—ã¦ã„ã¾ã™ã€‚" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "未設定ã®ãƒ–ール値変数%sãŒifå¼ã«ä½¿ç”¨ã•ã‚Œã¦ã„ã¾ã™" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "ルールãŒå®‰å…¨ã§ã¯ã‚ã‚Šã¾ã›ã‚“。execパーミッションãŒã‚ã‚Šã¾ã›ã‚“" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "サブセットã¯ãƒªãƒ³ã‚¯ãƒ«ãƒ¼ãƒ«ã¨å…±ã«ã®ã¿ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "以下ã®ãƒ•ã‚¡ã‚¤ãƒ«ãƒ«ãƒ¼ãƒ«å†…ã§ãƒªãƒ³ã‚¯ã¨execパーミッションãŒçŸ›ç›¾ã—ã¦ã„ã¾ã™ ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "リンクパーミッションã¯åå‰ä»˜ãプロファイルã®å¤‰æ›´ã§ä½¿ç”¨ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "行末文字ãŒæ¬ ã‘ã¦ã„ã¾ã™ã‹?(entry: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "無効ãªãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ãƒˆãƒª" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "無効ãªæ©Ÿèƒ½ã§ã™ %s" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: ä¸æ­£ã‚ªãƒ¼ãƒ—ン{ã€å…¥ã‚Œå­ã‚°ãƒ«ãƒ¼ãƒ—分ã‘ã¯è¨±å¯ã•ã‚Œã¦ã„ã¾ã›ã‚“\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regexグループ分ã‘エラー:{}ã®é–“ã«ã‚ã‚‹é …ç›®ã®ç„¡åŠ¹æ•°\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "%s: Regexグループ分ã‘エラー:無効ãªã‚¯ãƒ­ãƒ¼ã‚º}ã€ä¸€è‡´ã™ã‚‹ã‚ªãƒ¼ãƒ—ンãŒã‚ã‚Šã¾ã›ã‚“{ detected\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "%s: Regexグループ分ã‘エラー:グループ分ã‘ã¾ãŸã¯æ–‡å­—クラスãŒé–‰ã˜ã¦ã„ã¾ã›ã‚“。クローズ}ãŒå¿…è¦ã§ã™\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: 内部ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒ­ãƒ¼ãŒæ¤œå‡ºã•ã‚Œã¾ã—ãŸã€%d文字超ãˆã¦ã„ã¾ã™\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: 入力行「%sã€ã‚’解æžã§ãã¾ã›ã‚“\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "プロファイル %s ã®ãƒ«ãƒ¼ãƒ«ã‚’マージ中ã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ロードã§ãã¾ã›ã‚“ã§ã—ãŸ\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "エラー:プロファイル %s ã«ã“ã®ã‚«ãƒ¼ãƒãƒ«ã§ä½¿ç”¨ã§ããªã„ãƒãƒªã‚·ãƒ¼è¦ç´ ãŒã‚ã‚Šã¾ã™:\n" "\t「*ã€ã€ã€Œ?ã€ã€æ–‡å­—範囲ã€äº¤ä»£ã¯è¨±å¯ã•ã‚Œã¾ã›ã‚“。\n" "\t「**ã€ã¯ãƒ«ãƒ¼ãƒ«ã®æœ«å°¾ã«ã®ã¿ä½¿ç”¨ã§ãã¾ã™ã€‚\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "プロファイル %s ã®regex処ç†ä¸­ã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ロードã§ãã¾ã›ã‚“ã§ã—ãŸ\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "プロファイル %s ã®å¤‰æ•°ã®æ‹¡å¼µä¸­ã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ロードã§ãã¾ã›ã‚“ã§ã—ãŸ\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "プロファイル %s ã«ãƒãƒƒãƒˆã‚¢ã‚¯ã‚»ã‚¹ãƒ«ãƒ¼ãƒ«ã‚’追加ã™ã‚‹éš›ã«ã‚¨ãƒ©ãƒ¼ã«ãªã‚Šã¾ã—ãŸ\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "プロファイル%sã®ã‚¨ãƒ©ãƒ¼ã€ãƒ­ãƒ¼ãƒ‰ã«å¤±æ•—ã—ã¾ã—ãŸ\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: 後処ç†ã®éš›ã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚中止ã—ã¦ã„ã¾ã™ã€‚\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: regex後処ç†ã®é–“ã«ã‚¨ãƒ©ãƒ¼ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸã€‚中止ã—ã¦ã„ã¾ã™ã€‚\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: 後処ç†ã®éš›ã«ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚中止ã—ã¦ã„ã¾ã™ã€‚\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: è¦å‰‡å¾Œå‡¦ç†ã®çµåˆä¸­ã«ã‚¨ãƒ©ãƒ¼ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸã€‚中断ã—ã¦ã„ã¾ã™ã€‚\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/bs.po0000644000175000017500000004537112654035202014073 0ustar jjjj# SOME DESCRIPTIVE TITLE. # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2014-05-01 19:36+0000\n" "Last-Translator: Samir Ribić \n" "Language-Team: Bosnian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: bs\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "GreÅ¡ka: Nema viÅ¡e memorije.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "GreÅ¡ka: osnovni direktorij %s nije direktorij, preskaÄem.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "GreÅ¡ka: Ne mogu dodati direktorij %s u stazu koja se traži.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "GreÅ¡ka: Ne mogu alocirati memoriju.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Neipravan položaj za zapisivanje\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Odobrenje odbijeno\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Nedostaje mi slobodne memorije\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Ne mogu kopirati profil: LoÅ¡a memorijska adresa\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil ne odgovara protokolu\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil ne odgovara potpisu\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Verzija profila nije podržana Apparmor modulom\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil već postoji\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil ne postoji\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "Dozvola odbijena; pokuÅ¡ao da uÄita profil, dok je zatvoren?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Nepoznata greÅ¡ka (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Ne mogu dodati \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Ne mogu zamijeniti \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s : Ne mogu ukloniti \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Ne mogu pisati na stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Ne mogu pisati u izlaznu datoteku\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: PROVJERA: Neispravan izbor: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Dodavanje je uspjelo za \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Zamjena je uspjela za \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Uklanjanje je uspjelo za \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIKA neispravan inkrementalni spremnik %p pol %p ekst %p vel %d raz %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "profil %s mrežna pravila nisu primijenjena\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Nepoznat tip uzorka\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ne mogu otvoriti %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "GreÅ¡ka memorijske alokacije: Ne mogu ukloniti ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "GreÅ¡ka memorijske alokacije: Ne mogu ukloniti %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/af.po0000644000175000017500000004630512654035202014053 0ustar jjjj# English translations for subdomain_parser package. # Copyright (C) 2005 Immunix, Inc. # This file is distributed under the same license as the subdomain_parser package. # Steve Beattie , 2005. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 01:27+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: af\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Slegte skryfposisie\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Toelating geweier\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Geheue is opgebruik\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profiel pas nie aan by protokol nie\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profiel stem nie ooreen met handtekening nie\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profiel bestaan reeds\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profiel bestaan nie\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Kan \"%s\" nie byvoeg nie. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Kan \"%s\" nie vervang nie. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Kan \"%s\" nie verskuif nie. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Kan nie na stdout toe skryf nie\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: BEWEER: Ongeldige opsie: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Byvoeging vir \"%s\" was suksesvol.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Vervanging van \"%s\" was suksesvol.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Verwydering van \"%s\" was suksesvol.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIEK slegs inkrementbuffer %p pos %p uitbr %p grootte %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Kan %s - %s nie open nie\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "kan werkarea nie skep nie\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "kan profiel nie seriemaak nie %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Kan nie volledige profielinskrywing skryf nie\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Onverwagte karakter gevind: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Kon geheue vir subdomeinbasis-hegpunt nie toeken nie\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Geheuetoekenningsfout." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Foute in lêer gevind. Staking.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Uitvoerende kwalifiseerder 'i' is ongeldig, konflikterende kwalifiseerder " "reeds gespesifisieer" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Kon inskrywings nie saamvleg nie. Geheue is opgebruik\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Beweer: `reël' het NUL teruggestuur." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Beweer: `hat-reël' het NUL teruggestuur." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "ontbreek daar ’n reëleindkarakter? (inskrywing: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Onwettige open {, nesting van groeperings nie toegelaat nie\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex-groeperingsfout: Ongeldige aantal items tussen {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex-groeperingsfout: Ongeldige sluiting }, geen ooreenstemmende oop " "nie { bespeur\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Interne bufferoorvloei bespeur, %d karakters oorskry\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Kan insetreël '%s' nie ontleed nie\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "FOUT in profiel %s, het misluk om te laai\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Foute gevind in die kombineer van reëls tydens naprosessering. Staking.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/en_GB.po0000644000175000017500000006024112654035202014432 0ustar jjjj# English (United Kingdom) translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2014-10-22 19:10+0000\n" "Last-Translator: Andi Chandler \n" "Language-Team: English (United Kingdom) \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: en_GB\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Error: Out of memory.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Error: basedir %s is not a directory, skipping.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Error: Could not add directory %s to search path.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Error: Could not allocate memory.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Bad write position\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permission denied\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Out of memory\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Could not copy profile: Bad memory address\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profile does not conform to protocol\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profile does not match signature\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profile version not supported by Apparmor module\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profile already exists\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profile doesn't exist\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "Permission denied; attempted to load a profile while confined?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Unknown error (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Unable to add \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Unable to replace \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Unable to remove \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Unable to write to stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Unable to write to output file\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Invalid option: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Addition succeeded for \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Replacement succeeded for \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Removal succeeded for \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "profile %s network rules not enforced\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Unknown pattern type\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Unable to open %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Memory Allocation Error: Unable to remove ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Memory Allocation Error: Unable to remove %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "unable to create work area\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "unable to serialise profile %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Unable to write entire profile entry\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: Unable to write entire profile entry to cache\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Could not open '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat failed for '%s'" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir failed '%s'" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat failed for '%s'" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Could not open '%s' in '%s'" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Found unexpected character: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "Variable declarations do not accept trailing commas" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Found unexpected character: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Warning from %s (%s%sline %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Could not allocate memory for subdomainbase mount point\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Sorry. You need root privileges to run this programme.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Warning! You've set this programme setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Error: Could not read profile %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Memory allocation error." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "Cached load succeeded for \"%s\".\n" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "Cached reload succeeded for \"%s\".\n" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Errors found in file. Aborting.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to " "lowercase.\n" "See the apparmor.d(5) manpage for details.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Conflict 'a' and 'w' perms are mutually exclusive." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Exec qualifier 'i' invalid, conflicting qualifier already specified." #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Exec qualifier '%c' invalid, conflicting qualifier already specified." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified." #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Internal: unexpected mode character '%c' in input" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Internal error generated invalid perm 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor parser error: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Couldn't merge entries. Out of Memory.\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "profile %s: has merged rule %s with conflicting x modifiers.\n" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Profile attachment must begin with a '/'." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Failed to create alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "Profile flag chroot_relative conflicts with namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "Profile flag mediate_deleted conflicts with delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "Profile flag chroot_attach conflicts with chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Profile flag 'debug' is no longer valid." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Invalid profile flag: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `rule' returned NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Invalid mode, in deny rules, 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'." #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'." #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: `network_rule' return invalid protocol." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: `change_profile' returned NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: 'hat rule' returned NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: 'local_profile rule' returned NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Unset boolean variable %s used in if-expression" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "unsafe rule missing exec permissions" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subset can only be used with link rules." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "link and exec perms conflict on a file rule using ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "link perms are not allowed on a named profile transition.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "missing an end of line character? (entry: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Invalid network entry." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Invalid capability %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "AppArmor parser error for %s%s%s at line %d: %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "AppArmor parser error, %s%s line %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Illegal open {, nesting groupings not allowed\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex grouping error: Invalid number of items between {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Internal buffer overflow detected, %d characters exceeded\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Unable to parse input line '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "%s: Invalid profile name '%s' - bad regular expression\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ERROR merging rules for profile %s, failed to load\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "ERROR processing regexs for profile %s, failed to load\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "ERROR expanding variables for profile %s, failed to load\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "ERROR adding hat access rule for profile %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERROR in profile %s, failed to load\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Errors found during postprocessing. Aborting.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Errors found during regex postprocess. Aborting.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Errors found during postprocess. Aborting.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: Errors found in combining rules postprocessing. Aborting.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "Could not process include directory '%s' in '%s'" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "Feature buffer full." #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Out of memory" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Cannot create cache directory: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "File in cache directory location: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Cannot update cache directory: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "Internal: unexpected DBus mode character '%c' in input" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "Internal error generated invalid DBus perm 0x%x\n" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "deny prefix not allowed" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "owner prefix not allowed" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "owner prefix not allow on mount rules" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "owner prefix not allow on dbus rules" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "owner prefix not allow on capability rules" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "invalid mount conditional %s%s" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "bad mount rule" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "mount point conditions not currently supported" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "invalid pivotroot conditional '%s'" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "%s: Regex grouping error: Exceeded maximum nesting of {}\n" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "ERROR processing policydb rules for profile %s, failed to load\n" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "ERROR replacing aliases for profile %s, failed to load\n" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "%s: Unable to write %s\n" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "Error: Could not read binary profile or cache file %s: %s.\n" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "Error: Could not read cache file '%s', skipping...\n" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "Internal: unexpected %s mode character '%c' in input" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "Internal error generated invalid %s perm 0x%x\n" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "owner prefix not allowed on mount rules" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "owner prefix not allowed on dbus rules" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "owner prefix not allowed on signal rules" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "owner prefix not allowed on ptrace rules" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "owner prefix not allowed on unix rules" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "owner prefix not allowed on capability rules" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "dbus rule: invalid conditional group %s=()" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "unix rule: invalid conditional group %s=()" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "%s: Regex error: trailing '\\' escape character\n" apparmor-2.11.0/parser/po/th.po0000644000175000017500000004302512654035202014074 0ustar jjjj# Thai message file for YaST2 (@memory@). # Copyright (C) 2008 SUSE Linux Products GmbH. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:31+0000\n" "Last-Translator: i18n@suse.de\n" "Language-Team: Thai \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: th\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/he.po0000644000175000017500000004310612654035202014055 0ustar jjjj# Hebrew message file for YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2004 SuSE Linux AG. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:22+0000\n" "Last-Translator: xxx \n" "Language-Team: Hebrew \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: he\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/vi.po0000644000175000017500000004333612654035202014104 0ustar jjjj# Vietnamese translation for YaST2 (@memory@). # Copyright © 2006 SUSE Linux Products GmbH. # Copyright © 2005, 2006 Gnome i18n Project for Vietnamese. # Phan VÄ©nh Thịnh , 2006. # Clytie Siddall , 2005, 2006. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:32+0000\n" "Last-Translator: Phan VÄ©nh Thịnh \n" "Language-Team: Vietnamese \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: vi\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/xh.po0000644000175000017500000004742312654035202014106 0ustar jjjj# English translations for subdomain_parser package. # Copyright (C) 2005 Immunix, Inc. # This file is distributed under the same license as the subdomain_parser package. # Steve Beattie , 2005. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 04:04+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: xh\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Indawo yokubhala engalunganga\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Imvume yaliwe\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Siphelile isithuba kuvimba wolwazi\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Inkangeleko yecala ayiyithobeli inkqubo elandelwayo\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Inkangeleko yecala ayingqinelani nomtyibelo\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Inkangeleko yecala seyikhona\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Inkangeleko yecala ayikho kwayona\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Akukwazeki ukufakela i-\"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Akukwazeki ukubeka okunye endaweni ye-\"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Akukwazeki ukushenxisa i-\"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Akukwazeki ukubhalela kwi-stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: BANGA UBUNYANI: Isikhethwa esingasebenzisekiyo: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Ukufakela kuphumelele ukwenzela i-\"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Ukubeka okunye endaweni yokunye kuphumelele ukwenzela i-\"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Ukushenxisa kuphumelele ukwenzela i-\"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ayikwazanga kuvuleka i-%s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "akukwazekanga ukudala indawo yomsebenzi\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "akukwazekanga ukulandelelanisa inkangeleko yecala ye-%s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" "%s: Akukwazekanga ukubhala ungeniso olupheleleyo lwenkangeleko yecala\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Kufunyenwe uphawu oluthatha isithuba olungalindelekanga: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Uvimba wolwazi akakwazanga kwabelwa indawo yogxumeko kwisiseko sommandla " "wolawulo owonganyelweyo\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Imposiso yokwabela okuthile uvimba wolwazi" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Kufunyenwe iimposiso kwifayili. Kulahliwe.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Isichazi esiqhutywayo esingu-'i' asisebenziseki, isichazi esingquzulanayo " "sesixeliwe" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" "Amangeniso awakwazanga kumanyaniswa. Siphelile Isithuba Kuvimba Wolwazi\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Banga ubunyani: `umthetho' ubuyise OKUNGEYONTO." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Banga ubunyani: `umthetho we-hat' ubuyise OKUNGEYONTO." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" "ulahlekelwe sisiphelo somgca wophawu oluthatha isithuba? (ungeniso: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: Ukuvula okungekho mthethweni {, amaqela azinziswe kokunye awavunyelwa\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Imposiso yokubekwa ngokwamaqela kwe-regex: Inani lamanqaku " "elingasebenzisekiyo phakathi kwe-{}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Imposiso yokubekwa ngokwamaqela kwe-regex: ukuvala okungasebenzisekiyo " "}, akukho ngqinelwano luvulekileyo { luchongiweyo\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: Kuchongwe ukuphuphuma kwangaphakathi kwesigcini sethutyana, %d " "zigqithisile iimpawu ezithatha izithuba\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" "%s: Akukwazekanga ukwahlukanisa umgca wokungxalwa njengesiqalo '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "IMPOSISO kwinkangeleko yecala %s, isilele ukulayisha\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Kufunyenwe imposiso xa kudityaniswa imithetho ngethuba lakamva " "lokuqhubela phambili. Kulahliwe.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/zh_TW.po0000644000175000017500000005305412654035202014517 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:42+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: zh_TW\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "錯誤：記憶體ä¸è¶³ã€‚\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "錯誤︰基本目錄 %s ä¸æ˜¯ç›®éŒ„，正在跳éŽã€‚\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "錯誤︰無法將目錄 %s 新增至æœå°‹è·¯å¾‘。\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "錯誤：無法é…置記憶體。\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "ä¸è‰¯çš„寫入ä½ç½®\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "許å¯æ¬Šè¢«æ‹’絕\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "記憶體ä¸è¶³\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "設定檔ä¸ç¬¦åˆé€šè¨Šå”定\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "設定檔ä¸ç¬¦åˆç°½å\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Apparmor 模組ä¸æ”¯æ´è©²è¨­å®šæª”版本\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "設定檔已存在\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "設定檔ä¸å­˜åœ¨\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: 無法新增 \"%s\"。 " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: 無法å–代 \"%s\"。 " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: 無法移除 \"%s\"。 " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: 無法寫入至 stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: 顯示：無效的é¸é …： %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\" 附加æˆåŠŸã€‚\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" å–代æˆåŠŸã€‚\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" 移除æˆåŠŸã€‚\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC ä¸è‰¯çš„增é‡ç·©è¡å€ %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "無法開啟 %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "記憶體é…置錯誤：無法移除 ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "記憶體é…置錯誤：無法移除 %s:%s。" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "無法建立工作å€\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "無法åºåˆ—化設定檔 %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: 無法寫入整個設定檔項目\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "找到éžé æœŸçš„字元： '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(網路模å¼) 發ç¾éžé æœŸçš„字元︰%s" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: 無法為å­ç¶²åŸŸåŸºåœ°è£è¼‰é»žé…置記憶體\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "警告︰%s 中找ä¸åˆ°é©åˆçš„ fs，是å¦å·²è£è¼‰ï¼Ÿ\n" "請使用 --subdomainfs 覆寫。\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s︰抱歉。您必須具有根使用者權é™æ‰èƒ½åŸ·è¡Œæ­¤ç¨‹å¼ã€‚\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s︰警告ï¼æ‚¨å·²å°‡æ­¤ç¨‹å¼è¨­å®šç‚º setuid root。\n" "任何å¯åŸ·è¡Œæ­¤ç¨‹å¼çš„使用者å‡å¯æ›´æ–°æ‚¨çš„ AppArmor 設定檔。\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "錯誤︰無法讀å–設定檔 %s︰%s。\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "記憶體é…置錯誤。" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: 檔案中發ç¾éŒ¯èª¤ã€‚正在中止。\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "大寫修飾詞「RWLIMXã€å·²å»¢æ£„，請將其轉æ›æˆå°å¯«\n" "如需詳細資料，請åƒé–± apparmor.d(5) manpage。\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "è¡çªçš„「aã€èˆ‡ã€Œwã€è¨±å¯äº’ä¸ç›¸å®¹ã€‚" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Exec 修飾語「iã€æ˜¯ç„¡æ•ˆçš„，已指定è¡çªçš„修飾語" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "æœªè¨­é™ exec 修飾詞 (%c%c) å…許將æŸäº›å±éšªç’°å¢ƒè®Šæ•¸å‚³éžè‡³æœªè¨­é™ç¨‹åºï¼›å¦‚需詳細資料，請åƒé–± man 5 apparmor.d。\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "Exec 修飾詞「%cã€ç„¡æ•ˆï¼ŒæŒ‡å®šäº†è¡çªçš„修飾詞" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "Exec 修飾詞「%c%cã€ç„¡æ•ˆï¼ŒæŒ‡å®šäº†è¡çªçš„修飾詞" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "內部：輸入中存在éžé æœŸçš„模å¼å­—元「%cã€" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "內部錯誤產生無效許å¯æ¬Š 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor 剖æžç¨‹å¼éŒ¯èª¤ï¸°%s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "無法åˆä½µé …目。記憶體ä¸è¶³\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "無法建立別å %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "設定檔旗標「debugã€ä¸å†æœ‰æ•ˆã€‚" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "設定檔旗標 %s 無效。" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "顯示：`rule' 傳回 NULL。" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "無效模å¼ï¼Œæ‹’絕è¦å‰‡ã€Œxã€çš„å‰é¢å¿…須是 Exec 修飾詞「iã€ã€ã€Œpã€æˆ–「uã€" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "無效模å¼ï¼Œã€Œxã€çš„å‰é¢å¿…須是 Exec 修飾詞「iã€ã€ã€Œpã€ã€ã€Œcã€æˆ–「uã€" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "無效模å¼ï¼Œã€Œxã€çš„å‰é¢å¿…須是 Exec 修飾詞「iã€ã€ã€Œpã€æˆ–「uã€" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "æ示︰「network_ruleã€å‚³å›žç„¡æ•ˆçš„通訊å”定。" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "æ示︰「change_profileã€å‚³å›ž NULL。" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "顯示：'hat rule' 傳回 NULL。" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "顯示：「local_profile ruleã€å‚³å›ž NULL。" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "å–消設定 if é‹ç®—å¼ä¸­ä½¿ç”¨çš„布林變數 %s" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "ä¸å®‰å…¨è¦å‰‡ç¼ºå°‘ exec 許å¯æ¬Š" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "å­é›†åªèƒ½èˆ‡é€£çµè¦å‰‡ä¸€èµ·ä½¿ç”¨ã€‚" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "使用 -> 的檔案è¦å‰‡æœ‰é€£çµè¨±å¯æ¬Šèˆ‡åŸ·è¡Œè¨±å¯æ¬Šè¡çª" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "ä¸å…許å°æŒ‡å®šçš„設定檔轉æ›ä½¿ç”¨é€£çµè¨±å¯æ¬Šã€‚\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "找ä¸åˆ°è¡Œå°¾å­—元？(項目： %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "網路項目無效。" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "功能 %s 無效。" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: éžæ³•é–‹å•Ÿ {, ä¸å…許巢狀群組\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex 群組錯誤：無效的項目數在 {} 之間\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "%s: Regex 群組錯誤：éžæ³•é—œé–‰ }, 無相符的開啟 { å·²åµæ¸¬åˆ°\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "%s︰Regex 群組錯誤：存在未關閉的群組或字元類別，需è¦é—œé–‰}\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: åµæ¸¬åˆ°å…§éƒ¨ç·©è¡å€æº¢ä½ï¼Œè¶…éŽ %d 個字元\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: 無法剖æžè¼¸å…¥è¡Œ '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "為設定檔 %s åˆä½µè¦å‰‡æ™‚發生錯誤，無法載入\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "錯誤 設定檔 %s 包å«æ­¤æ ¸å¿ƒç„¡æ³•ä½¿ç”¨çš„è¦å‰‡å…ƒç´ ï¸°\n" "\tä¸å…許使用「*ã€ã€ã€Œ?ã€ã€å­—元範åœå’Œæ›¿ä»£é …。\n" "\t「**ã€åƒ…å¯ç”¨æ–¼è¦å‰‡çš„末尾。\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "為設定檔 %s è™•ç† regexs 時發生錯誤，無法載入\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "展開設定檔 %s 的變數時發生錯誤，無法載入\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "新增å°è¨­å®šæª” %s çš„ hat å­˜å–è¦å‰‡æ™‚出錯\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "設定檔 %s 中有錯誤，載入失敗\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s：後處ç†æœŸé–“發ç¾éŒ¯èª¤ã€‚正在中止。\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s︰regex 後處ç†æœŸé–“發ç¾éŒ¯èª¤ã€‚正在中止。\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s：後處ç†æœŸé–“發ç¾éŒ¯èª¤ã€‚正在中止。\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: çµåˆè¦å‰‡å¾Œè™•ç†æ™‚發ç¾éŒ¯èª¤ã€‚正在中止。\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ko.po0000644000175000017500000005676112654035202014105 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-20 22:27+0000\n" "Last-Translator: Litty \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ko\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "오류: 메모리가 부족합니다.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "오류: basedir %sì€(는) 디렉토리가 아니므로 건너ëœë‹ˆë‹¤.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "오류: %s 디렉토리를 검색 ê²½ë¡œì— ì¶”ê°€í•  수 없습니다.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "오류: 메모리를 할당할 수 없습니다.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "쓰기 위치가 잘못ë˜ì—ˆìŠµë‹ˆë‹¤.\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "사용 ê¶Œí•œì´ ê±°ë¶€ë˜ì—ˆìŠµë‹ˆë‹¤.\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "메모리 부족\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "í”„ë¡œí•„ì„ ë³µì‚¬í•  수 없습니다: ìž˜ëª»ëœ ë©”ëª¨ë¦¬ 주소\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "프로파ì¼ì´ 프로토콜과 맞지 않습니다.\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "프로필과 ì„œëª…ì´ ì¼ì¹˜í•˜ì§€ ì•ŠìŒ\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "í”„ë¡œíŒŒì¼ ë²„ì „ì´ Apparmor 모듈ì—ì„œ 지ì›ë˜ì§€ 않습니다.\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "프로파ì¼ì´ ì´ë¯¸ 있습니다.\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "프로파ì¼ì´ 없습니다.\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\"ì„(를) 추가할 수 없습니다. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\"ì„(를) 바꿀 수 없습니다. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\"ì„(를) 제거할 수 없습니다. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdoutì— ì“¸ 수 없습니다.\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: ìž˜ëª»ëœ ì˜µì…˜: - %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\"ì— ì„±ê³µì ìœ¼ë¡œ 추가했습니다.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\"ì˜ ë°”ê¾¸ê¸° ìž‘ì—…ì´ ì„±ê³µí–ˆìŠµë‹ˆë‹¤.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\"ì˜ ì œê±° ìž‘ì—…ì´ ì„±ê³µí–ˆìŠµë‹ˆë‹¤.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC ìž˜ëª»ëœ ì¦ë¶„ ë²„í¼ %p 위치 %p 확장 %p í¬ê¸° %d ê²°ê³¼ %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%sì„(를) ì—´ 수 ì—†ìŒ - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "메모리 할당 오류: ^%sì„(를) 제거할 수 없습니다.\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "메모리 할당 오류: %s:%sì„(를) 제거할 수 없습니다." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "ìž‘ì—… ì˜ì—­ì„ ìƒì„±í•  수 없습니다.\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "í”„ë¡œíŒŒì¼ %sì„(를) ì¼ë ¨ë²ˆí˜¸í™”í•  수 없습니다.\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: ì „ì²´ í”„ë¡œíŒŒì¼ í•­ëª©ì— ì“¸ 수 없습니다.\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "ìž˜ëª»ëœ ë¬¸ìžê°€ 있ìŒ: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) ìž˜ëª»ëœ ë¬¸ìžê°€ 있ìŒ: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: 서브ë„ë©”ì¸ë² ì´ìŠ¤ 마운트 í¬ì¸íŠ¸ì— 대해 메모리를 할당할 수 없습니다.\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "경고: %sì— ì í•©í•œ fsê°€ 없습니다. 마운트ë˜ì–´ 있습니까?\n" "--subdomainfs를 사용하여 무시할 수 있습니다.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: ì´ í”„ë¡œê·¸ëž¨ì„ ì‹¤í–‰í•˜ë ¤ë©´ 루트 ê¶Œí•œì´ í•„ìš”í•©ë‹ˆë‹¤.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: 경고! ì´ í”„ë¡œê·¸ëž¨ì„ setuid 루트로 설정했습니다.\n" "ë”°ë¼ì„œ ì´ í”„ë¡œê·¸ëž¨ì„ ì‹¤í–‰í•  수 있는 모든 사용ìžê°€ AppArmor 프로파ì¼ì„ ì—…ë°ì´íŠ¸í•  수 있습니다.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "오류: í”„ë¡œíŒŒì¼ %sì„(를) ì½ì„ 수 ì—†ìŒ: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "메모리 할당 오류입니다." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: 파ì¼ì— 오류가 발견ë˜ì–´ 중단합니다.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "ëŒ€ë¬¸ìž í•œì •ìž \"RWLIMX\"는 ë” ì´ìƒ 사용ë˜ì§€ 않습니다. 소문ìžë¡œ 변경하십시오.\n" "ìžì„¸í•œ ë‚´ìš©ì€ apparmor.d(5) 맨페ì´ì§€ë¥¼ 참조하십시오.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "'a' ë° 'w' ì‚¬ìš©ê¶Œí•œì„ ë™ì‹œì— 설정할 수 없습니다." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "실행 í•œì •ìž 'i'는 충ëŒì„ ì¼ìœ¼ì¼œ 사용할 수 없습니다. ê°™ì€ í•œì •ìžê°€ ì´ë¯¸ 지정ë˜ì–´ 있습니다." #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "제한ë˜ì§€ ì•Šì€ ì‹¤í–‰ 한정ìž(%c%c)를 사용하면 위험한 환경 변수가 제한ë˜ì§€ ì•Šì€ í”„ë¡œì„¸ìŠ¤ë¡œ ì „ë‹¬ë  ìˆ˜ 있습니다. ìžì„¸í•œ ë‚´ìš©ì€ 'man " "5 apparmor.d'를 참조하십시오.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "실행 í•œì •ìž '%c'ì€(는) 충ëŒì„ ì¼ìœ¼í‚¤ë¯€ë¡œ 사용할 수 없습니다. ê°™ì€ í•œì •ìžê°€ ì´ë¯¸ 지정ë˜ì–´ 있습니다." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "실행 수ì‹ìž '%c%c'ì´(ê°€) 잘못ë˜ì—ˆìŠµë‹ˆë‹¤. ì´ë¯¸ ì§€ì •ëœ ìˆ˜ì‹ìžì™€ 충ëŒí•©ë‹ˆë‹¤." #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "내부 오류: ìž˜ëª»ëœ ëª¨ë“œ ë¬¸ìž '%c'ì´(ê°€) ìž…ë ¥ë˜ì—ˆìŠµë‹ˆë‹¤." #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "내부 오류 ë°œìƒ. ìž˜ëª»ëœ ê¶Œí•œ 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor 구문 ë¶„ì„ ì˜¤ë¥˜: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "í•­ëª©ì„ ë³‘í•©í•  수 없습니다. 메모리가 부족합니다.\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "별칭 %sì„(를) 만들지 못했습니다. -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "'debug' í”„ë¡œíŒŒì¼ í”Œëž˜ê·¸ê°€ ë” ì´ìƒ 유효하지 않습니다." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "ìž˜ëª»ëœ í”„ë¡œíŒŒì¼ í”Œëž˜ê·¸: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "어설션: `rule'ì´ NULLì„ ë°˜í™˜í–ˆìŠµë‹ˆë‹¤." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "ìž˜ëª»ëœ ëª¨ë“œ. 거부 규칙ì—ì„œ 'x' ì•žì— ì‹¤í–‰ 수ì‹ìž 'i', 'p' ë˜ëŠ” 'u'ê°€ ì„ í–‰ë˜ì–´ì„œëŠ” 안ë©ë‹ˆë‹¤." #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "ìž˜ëª»ëœ ëª¨ë“œ. 'x' ì•žì— ì‹¤í–‰ 수ì‹ìž 'i', 'p', 'c' ë˜ëŠ” 'u'ê°€ ì„ í–‰ë˜ì–´ì•¼ 합니다." #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "ìž˜ëª»ëœ ëª¨ë“œìž…ë‹ˆë‹¤. 'x'는 실행 í•œì •ìž 'i', 'p' ë˜ëŠ” 'u' ë’¤ì— ì™€ì•¼ 합니다." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "어설션: `network_rule'ì´ ìž˜ëª»ëœ í”„ë¡œí† ì½œì„ ë°˜í™˜í•©ë‹ˆë‹¤." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "어설션: `change_profile'ì´ NULLì„ ë°˜í™˜í–ˆìŠµë‹ˆë‹¤." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "어설션: 'hat rule'ì´ NULLì„ ë°˜í™˜í–ˆìŠµë‹ˆë‹¤." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "í‰ê°€: 'local_profile rule'ì´ NULLì„ ë°˜í™˜í–ˆìŠµë‹ˆë‹¤." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "if ì‹ì— ì‚¬ìš©ëœ ë¶€ìš¸ 변수 %sì˜ ì„¤ì •ì´ í•´ì œë˜ì—ˆìŠµë‹ˆë‹¤." #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "실행 ê¶Œí•œì´ ëˆ„ë½ë˜ì–´ ê·œì¹™ì´ ì•ˆì „í•˜ì§€ 않습니다." #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "하위 ì§‘í•©ì€ ë§í¬ 규칙ì—만 사용할 수 있습니다." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "다ìŒì„ 사용하는 íŒŒì¼ ê·œì¹™ì—ì„œ ë§í¬ ë° ì‹¤í–‰ 권한 ì¶©ëŒ ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "ë§í¬ ê¶Œí•œì´ ëª…ëª…ëœ í”„ë¡œíŒŒì¼ ì „í™˜ì—ì„œ 허용ë˜ì§€ 않습니다.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "í–‰ì˜ ë 문ìžê°€ 누ë½ë˜ì—ˆìŠµë‹ˆê¹Œ? (항목: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "ìž˜ëª»ëœ ë„¤íŠ¸ì›Œí¬ í•­ëª©ìž…ë‹ˆë‹¤." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "성능 %sì´(ê°€) 잘못ë˜ì—ˆìŠµë‹ˆë‹¤." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: 여는 괄호 {ê°€ 잘못ë˜ì—ˆìŠµë‹ˆë‹¤. 중첩 ê·¸ë£¹ì€ í—ˆìš©ë˜ì§€ 않습니다.\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: ì •ê·œì‹ ê·¸ë£¹í™” 오류: {} 사ì´ì˜ 항목 수가 잘못ë¨\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "%s: ì •ê·œì‹ ê·¸ë£¹í™” 오류: 닫는 괄호 }ì— í•´ë‹¹í•˜ëŠ” 여는 괄호 {ê°€ 없습니다.\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "%s: ì •ê·œì‹ ê·¸ë£¹í™” 오류: 닫히지 ì•Šì€ ê·¸ë£¹í™” ë˜ëŠ” ë¬¸ìž í´ëž˜ìŠ¤ê°€ 있습니다. 닫는 괄호 }ê°€ 필요합니다.\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: 내부 ë²„í¼ ì˜¤ë²„í”Œë¡œ íƒì§€, %dìžê°€ 초과ë˜ì—ˆìŠµë‹ˆë‹¤.\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: ìž…ë ¥ í–‰ '%s'ì˜ êµ¬ë¬¸ì„ ë¶„ì„í•  수 없습니다.\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "%s 프로파ì¼ì˜ ê·œì¹™ì„ ë³‘í•©í•˜ëŠ” ì¤‘ì— ì˜¤ë¥˜ê°€ ë°œìƒí•˜ì—¬ 로드하지 못했습니다.\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "오류: %s 프로파ì¼ì€ ì´ ì»¤ë„ë¡œ 사용할 수 없는 ì •ì±…ì„ í¬í•¨í•©ë‹ˆë‹¤:\n" "\t'*', '?', ë¬¸ìž ë²”ìœ„ ë° ë³€ê²½ì€ í—ˆìš©ë˜ì§€ 않습니다.\n" "\t'**'는 ê·œì¹™ì˜ ë§ˆì§€ë§‰ 부분ì—만 사용할 수 있습니다.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "%s 프로파ì¼ì˜ ì •ê·œì‹ì„ 처리하는 ì¤‘ì— ì˜¤ë¥˜ê°€ ë°œìƒí•˜ì—¬ 로드하지 못했습니다.\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "%s 프로파ì¼ì˜ 변수를 확장하는 ì¤‘ì— ì˜¤ë¥˜ê°€ ë°œìƒí•˜ì—¬ 로드하지 못했습니다.\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "프로파ì¼ì— 대한 hat 액세스 규칙 추가 중 오류 %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "í”„ë¡œíŒŒì¼ %sì— ì˜¤ë¥˜ê°€ ë°œìƒí•˜ì—¬ 로드하지 못했습니다.\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: 후처리 ë„중 오류가 발견ë˜ì—ˆìŠµë‹ˆë‹¤. 중단 중입니다.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: ì •ê·œì‹ í›„ì²˜ë¦¬ ì‹œ 오류가 ë°œìƒí–ˆìŠµë‹ˆë‹¤. 프로세스를 중단합니다.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: 후처리 ë„중 오류가 발견ë˜ì—ˆìŠµë‹ˆë‹¤. 중단 중입니다.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: 규칙 후처리를 결합하는 ì¤‘ì— ì˜¤ë¥˜ê°€ ë°œìƒí–ˆìŠµë‹ˆë‹¤. 프로세스를 중단합니다.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/el.po0000644000175000017500000005573312654035202014072 0ustar jjjj# translation of apparmor-parser.el.po to Ελληνικά # @TITLE@ # Copyright (C) 2006, SUSE Linux GmbH, Nuremberg # # This file is distributed under the same license as @PACKAGE@ package. FIRST # # Vasileios Giannakopoulos , 2007. # Kostas Boukouvalas , 2007. # Vasileios Giannakopoulos , 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 01:42+0000\n" "Last-Translator: Vasileios Giannakopoulos \n" "Language-Team: Ελληνικά \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: el\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Σφάλμα: Μνήμη πλήÏης.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Σφάλμα: Το basedir %s δεν είναι κατάλογος, παÏαβλέπεται.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Σφάλμα: Αδυναμία Ï€Ïοσθήκης καταλόγου %s στη διαδÏομή έÏευνας.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Σφάλμα: Αδυναμία Ï€ÏοσδιοÏÎ¹ÏƒÎ¼Î¿Ï Î¼Î½Î®Î¼Î·Ï‚.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Λάθος θέση εγγÏαφής\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "ΑπαγοÏεÏεται η Ï€Ïόσβαση\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Μνήμη πλήÏης\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Το Ï€Ïοφίλ δεν εναÏμονίζεται με το Ï€Ïωτόκολλο\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Το Ï€Ïοφίλ δεν ταιÏάζει με την υπογÏαφή\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Η έκδοση Ï€Ïοφίλ δεν υποστηÏίζεται από την μονάδα Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Το Ï€Ïοφίλ υπάÏχει ήδη\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Το Ï€Ïοφίλ δεν υπάÏχει\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Αδυναμία Ï€Ïοσθήκης \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Αδυναμία αντικατάστασης \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s Αδυναμία αφαίÏεσης \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Αδυναμία εγγÏαφής στο stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s ΠΑΡΕΜΒΑΣΗ: Λανθασμένη επιλογή: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Η Ï€Ïοσθήκη υπεÏβαίνει για \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Η αντικατάσταση υπεÏβαίνει για \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Removal succeeded for \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC κακή ζώνη ποσοτήτων %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Αδυναμία ανοίγματος %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "αδυναμία δημιουÏγίας χώÏου εÏγασίας\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "αδυναμία σειÏιοποίησης Ï€Ïοφίλ %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Αδυναμία εγγÏαφής ολόκληÏου του Ï€Ïοφίλ\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Î’Ïέθηκε μη αναμενόμενος χαÏακτήÏας: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Αδυναμία Ï€ÏοσδιοÏÎ¹ÏƒÎ¼Î¿Ï Î¼Î½Î®Î¼Î·Ï‚ για subdomainbase σημείο Ï€ÏοσάÏτησης\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Συγγνώμη. Δεν έχετε δικαιώματα υπεÏχÏήστη για να Ï„Ïέξετε αυτό το " "Ï€ÏόγÏαμμα.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: ΠÏοειδοποίηση! Έχετε οÏίσει αυτό το Ï€ÏόγÏαμμα setuid root.\n" "Οποιοσδήποτε μποÏεί να Ï„Ïέξει αυτό το Ï€ÏόγÏαμμα, μποÏεί να ενημεÏώσει τα " "Ï€Ïοφίλ AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Σφάλμα: Αδυναμία ανάγνωσης profile %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Σφάλμα Ï€ÏοσδιοÏÎ¹ÏƒÎ¼Î¿Ï Î¼Î½Î®Î¼Î·Ï‚." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Î’Ïέθηκαν σφάλματα στο αÏχείο. ΑποχώÏηση.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Κεφαλαίοι χαÏακτήÏες \"RWLIMX\" αποφεÏγονται, παÏακαλώ αλλάξτε σε μικÏά\n" "Δείτε το apparmor.d(5) για λεπτομέÏειες.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "ΧαÏακτήÏας exec 'i' λάθος, συμπλέκεται με ήδη υπάÏχων χαÏακτήÏα" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "ΧαÏακτήÏας exc '%c' λανθασμένος, συμπλέκεται με ήδη καθοÏισμένο χαÏακτήÏα" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "ΕσωτεÏικό: μη αναμενόμενη λειτουÏγία χαÏακτήÏα '%c' στην είσοδο" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Σφάλμα αναλυτή AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Αδυναμία συγχώνευσης εγγÏαφών. Μνήμη ΠλήÏης\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "ΠαÏέμβαση: 'rule' επέστÏεψε ΜΗΔΕÎ." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Σφάλμα λειτουÏγίας, το 'x' θα Ï€Ïέπει να Ï€Ïοηγείται του χαÏακτήÏα exec 'i', " "'p' ή 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "ΠαÏέμβαση: 'hat rule' επέστÏεψε ΜΗΔΕÎ." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Η μη οÏισμένη μεταβλητή boolean %s χÏησιμοποιήθηκε στην if-έκφÏαση" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "λείπει ένα τέλος στη γÏαμή χαÏακτήÏα; (εγγÏαφή: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: ΠαÏάνομο άνοιγμα {, δεν επιτÏέπονται ομαδοποιήσεις\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Σφάλμα ομαδοποίησης Regex: Λάθος αÏιθμός αντικειμένων Î¼ÎµÏ„Î±Î¾Ï {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Σφάλμα ομαδοποίησης Regex: Λάθος κλείσιμο }, δεν βÏέθηκε ταιÏιαστό " "άνοιγμα {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Σφάλμα ομαδοποίησης Regex: Ανοιχτή ομαδοποίηση ή κλάσση χαÏακτήÏα, " "αναμένεται κλείσιμο }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: ΕσωτεÏική διαÏÏοή ζώνης ανιχνεÏθηκε, υπέÏβαση %d χαÏακτήÏων\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Αδυναμία ανάλυσης γÏαμμής εισόδου '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ΣΦΑΛΜΑ συγχώνευσης κανόνων για το Ï€Ïοφίλ %s, αδυναμία φόÏτωσης\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ΣΦΑΛΜΑ Ï€Ïοφίλ %s πεÏιέχει αντικείμενα πολιτικής που δε χÏησιμοποιοÏνται από " "αυτόν τον πυÏήνα:\n" "\t'*', '?', πεδία χαÏακτήÏων και αλλαγές δεν επιτÏέπονται.\n" "\t'**' μποÏεί να χÏησιμοποιηθεί μόνο στο τέλος.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "ΣΦΑΛΜΑ επεξεÏγασίας regexs για το Ï€Ïοφίλ %s, αδυναμία φόÏτωσης\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "ΣΦΑΛΜΑ επέκτασης μεταβλητών για Ï€Ïοφίλ %s, αδυναμία φόÏτωσης\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ΣΦΑΛΜΑ το Ï€Ïοφίλ %s, αδυναμία φόÏτωσης\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Î’Ïέθηκαν σφάλματα κατα τη διάÏκεια της μετεπεξεÏγασίας regex. " "ΑποχώÏηση.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Î’Ïέθηκαν σφάλματα στους συνδυαστικοÏÏ‚ κανόνες μετεπεξεÏγασίας. " "ΑποχώÏηση.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/oc.po0000644000175000017500000004444312670452431014074 0ustar jjjj# Occitan (post 1500) translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2016-03-10 21:29+0000\n" "Last-Translator: Cédric VALMARY (Tot en òc) \n" "Language-Team: Occitan (post 1500) \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-03-11 05:18+0000\n" "X-Generator: Launchpad (build 17939)\n" "Language: oc\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Error : memòria insufisenta.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Marrida posicion d'escritura\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Autorizacion refusada\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Pas pro de memòria\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Perfil inexistent\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s : impossible d'apondre « %s ». " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s : impossible de remplaçar « %s ». " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s : impossible de suprimir « %s ». " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Apondon capitat per « %s ».\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Supression capitada per « %s ».\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Impossible de dobrir %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "impossible de crear una zòna de trabalh\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "impossible de serializar lo perfil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s : impossible d'escriure l'entrada de perfil completa\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Impossible de dobrir « %s »" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert : « rule » a tornat NULL" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert : « hat rule » a tornat NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/pl.po0000644000175000017500000005527512654035202014106 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:38+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: pl\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "BÅ‚Ä…d: brak pamiÄ™ci.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "BÅ‚Ä…d: katalog bazowy %s nie jest katalogiem. PominiÄ™to.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "BÅ‚Ä…d: dodanie katalogu %s do Å›cieżki wyszukiwania nie powiodÅ‚o siÄ™.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "BÅ‚Ä…d: przydzielenie pamiÄ™ci nie powiodÅ‚o siÄ™.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "NieprawidÅ‚owa pozycja zapisu\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "DostÄ™p zabroniony\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Brak pamiÄ™ci\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil niezgodny z protokoÅ‚em\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil nie odpowiada sygnaturze\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Wersja profilu nie jest obsÅ‚ugiwana przez moduÅ‚ Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil już istnieje\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil nie istnieje\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: dodawanie \"%s\" nie powiodÅ‚o siÄ™. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: zamiana \"%s\" nie powiodÅ‚a siÄ™. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: usuniÄ™cie \"%s\" nie powiodÅ‚o siÄ™. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: zapis na wyjÅ›cie standardowe nie powiódÅ‚ siÄ™\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: nieprawidÅ‚owa opcja: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Dodanie dla \"%s\" zakoÅ„czone powodzeniem.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Zamiana dla \"%s\" zakoÅ„czona powodzeniem.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Usuwanie dla \"%s\" zakoÅ„czone powodzeniem.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "NieprawidÅ‚owy bufor przyrostowy %p na pozycji %p ext %p rozmiar %d zasób %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Otwarcie %s nie powiodÅ‚o siÄ™ - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "BÅ‚Ä…d alokacji pamiÄ™ci: Nie można usunąć ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "BÅ‚Ä…d alokacji pamiÄ™ci: Nie można usunąć %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Tworzenie obszaru roboczego nie powiodÅ‚o siÄ™\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "Serializowanie profilu %s nie powiodÅ‚o siÄ™\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: zapisanie caÅ‚ego profilu nie powiodÅ‚o siÄ™\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Napotkano nieoczekiwany znak \"%s\"" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(tryb_sieciowy) napotkano nieoczekiwany znak: \"%s\"" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: przydzielenie pamiÄ™ci dla punktu montowania bazy poddomeny nie powiodÅ‚o " "siÄ™\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Uwaga: nie można znaleźć systemu plików w %s, czy jest on zamontowany?\n" "Opcja --subdomainfs wymusza typ systemu plików.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: do uruchomienia tego programu wymagane sÄ… uprawnienia administratora.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: uwaga - dla tego programu ustawiono flagÄ™ setuid root.\n" "Każdy użytkownik tego programu bÄ™dzie mógÅ‚ zmieniać profile AppArmor\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "BÅ‚Ä…d: nie można odczytać profilu %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "BÅ‚Ä…d przydzielenia pamiÄ™ci." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: napotkano bÅ‚Ä™dy w pliku. Przerwanie procesu.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Znaczniki zapisane wielkimi literami \"RWLIMX\" nie sÄ… już aktualne. ProszÄ™ " "używać\n" "maÅ‚ych liter. WiÄ™cej informacji można znaleźć w podrÄ™czniku systemowym " "apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Konflikt - \"a\" i \"w\" wykluczajÄ… siÄ™ wzajemnie." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "BÅ‚Ä™dny znacznik wykonania \"i\". WczeÅ›niej użyto sprzecznego znacznika." #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Nieograniczony znacznik wykonania (%c%c) zezwala na przekazywanie " "niebezpiecznych zmiennych Å›rodowiska do procesu. WiÄ™cej informacji można " "znaleźć w podrÄ™czniku systemowym \"man 5 apparmor.d\".\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "BÅ‚Ä™dny znacznik wykonania \"%c\". WczeÅ›niej użyto sprzecznego znacznika." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "BÅ‚Ä™dny znacznik wykonania \"%c%c\", wczeÅ›niej użyto sprzecznego znacznika" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "BÅ‚Ä…d wewnÄ™trzny: napotkano nieoczekiwany znak trybu \"%c\"" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" "WewnÄ™trzny bÅ‚Ä…d spowodowaÅ‚ utworzenie nieprawidÅ‚owego uprawnienia 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "BÅ‚Ä…d parsera AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "ÅÄ…czenie wpisów nie powiodÅ‚o siÄ™. Brak pamiÄ™ci.\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Utworzenie aliasu %s nie powiodÅ‚o siÄ™ -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Flaga profilu \"debug\" nie jest już prawidÅ‚owa." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "NieprawidÅ‚owa flaga profilu: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Asercja: 'rule' zwróciÅ‚o NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Tryb nieprawidÅ‚owy, w reguÅ‚ach zabraniajÄ…cych znacznik \"x\" nie może być " "poprzedzony znacznikiem wykonania \"i\", \"p\" lub \"u\"" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Tryb nieprawidÅ‚owy, \"x\" należy poprzedzić znacznikiem wykonania \"i\", " "\"p\" lub \"u\"" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Tryb nieprawidÅ‚owy. Przed \"x\" należy użyć znacznika wykonania \"i\", " "\"p\" albo \"u\"." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Asercja: \"network_rule\" zwróciÅ‚o niepoprawny protokół." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Asercja: \"change_profile\" zwróciÅ‚o NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Asercja: \"hat rule\" zwróciÅ‚o NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Asercja: \"local_profile rule\" zwróciÅ‚o NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Nieustawiona zmienna logiczna %s użyta w wyrażeniu if." #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "niebezpieczna reguÅ‚a bez uprawnieÅ„ wykonania" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "podzbiór może być użyty tylko z reguÅ‚ami Å‚Ä…czy." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "konflikt Å‚Ä…czy i uprawnieÅ„ wykonywania w regule pliku używajÄ…cej ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "uprawnienia odnoÅ›ników nie sÄ… dozwolone w zmianie nazwanego profilu.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "brak znaku koÅ„ca wiersza? (wpis: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "NieprawidÅ‚owy wpis sieciowy." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "NieprawidÅ‚owe uprawnienie %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: nieprawidÅ‚owy znak {. Zagnieżdżone grupowanie jest niedozwolone.\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: bÅ‚Ä…d grupowania wyrażeÅ„ regularnych: nieprawidÅ‚owa ilość elementów " "pomiÄ™dzy {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: bÅ‚Ä…d grupowania wyrażeÅ„ regularnych: nieprawidÅ‚owy znak }; nie " "znaleziono {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: bÅ‚Ä…d grupowania wyrażeÅ„ regularnych: niedomkniÄ™te grupowanie; oczekiwano " "zamykajÄ…cego }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: wewnÄ™trzne przepeÅ‚nienie bufora; przekroczono %d znaków\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: analiza wiersza \"%s\" nie powiodÅ‚a siÄ™\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "BÅ‚Ä…d Å‚Ä…czenia reguÅ‚ dla profilu %s. Wczytanie nie powiodÅ‚o siÄ™.\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "BÅ‚Ä…d: profil %s zawiera elementy zasad, które nie sÄ… używane w bieżącym\n" "\t jÄ…drze systemu: zakresy znaków \"*\", \"?\" oraz zmiany nie sÄ… " "dozwolone.\n" "\t znak \"**\" może być użyty tylko na koÅ„cu reguÅ‚y.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "BÅ‚Ä…d przetwarzania wyrażeÅ„ regularnych dla profilu %s. Wczytanie nie " "powiodÅ‚o siÄ™.\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "BÅ‚Ä…d rozwijania zmiennych dla profilu %s. Wczytanie nie powiodÅ‚o siÄ™.\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "BÅ‚Ä…d podczas dodawania reguÅ‚y dostÄ™pu hat dla profilu %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "BÅ‚Ä…d w profilu %s. Wczytanie nie powiodÅ‚o siÄ™.\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Napotkano bÅ‚Ä™dy podczas przetwarzania. Proces przerwano.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: BÅ‚Ä…d podczas przetwarzania koÅ„cowego wyrażenia regularnego. Proces " "przerwano.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Napotkano bÅ‚Ä™dy podczas przetwarzania. Proces przerwano.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: napotkano bÅ‚Ä™dy w Å‚Ä…czonym przetwarzaniu reguÅ‚. Proces przerwano.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/si.po0000644000175000017500000004303312654035202014073 0ustar jjjj# Sinhala message file for YaST2 (@memory@). # Copyright (C) 2007 SUSE Linux Products GmbH. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:30+0000\n" "Last-Translator: i18n@suse.de\n" "Language-Team: Sinhala \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: si\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/it.po0000644000175000017500000006377312654035202014111 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2014-10-26 18:14+0000\n" "Last-Translator: Claudio Arseni \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: it\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Errore: memoria esaurita.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Errore: la directory di base %s non è una directory, ignorata.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Errore: impossibile aggiungere la directory %s al percorso di ricerca.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Errore: impossibile allocare memoria.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Posizione di scrittura errata\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permesso negato\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Memoria esaurita\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Impossibile copiare il profilo: indirizzo di memoria errato\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Il profilo non è conforme al protocollo\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Il profilo non corrisponde alla firma\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Versione del profilo non supportata dal modulo Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profilo già esistente\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profilo inesistente\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" "Permesso non consentito: tentativo di caricare un profilo con i limiti " "applicati?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Errore sconosciuto (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Impossibile aggiungere \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Impossibile sostituire \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Impossibile rimuovere \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Impossibile scrivere su stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: impossibile scrivere sul file di output\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERZIONE: opzione non valida: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Aggiunta riuscita per \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Sostituzione riuscita per \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Rimozione riuscita per \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "ATTENZIONE buffer incremento errato %p pos %p est %p dimensione %d ris %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "regole di rete del profilo %s non applicate\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Tipo di modello sconosciuto\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Impossibile aprire %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Errore di allocazione memoria: impossibile rimuovere ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Errore di allocazione memoria: impossibile rimuovere %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "impossibile creare area di lavoro\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "impossibile serializzare profilo %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: impossibile scrivere l'intera voce del profilo\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: impossibile scrivere l'intero profilo nella cache\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Impossibile aprire \"%s\"" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat non riuscita per \"%s\"" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir non riuscita per \"%s\"" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat non riuscita per \"%s\"" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Impossibile aprire \"%s\" in \"%s\"" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Trovato carattere imprevisto: \"%s\"" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "La dichiarazione di variabile non accetta virgole terminanti" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Trovato carattere imprevisto: \"%s\"" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Avviso da %s (%s%sriga %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: impossibile allocare memoria per il punto di montaggio base " "sottodominio\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Avviso: impossibile trovare un fs adatto in %s. È effettivamente montato?\n" "Per ignorare, utilizzare -subdomainfs.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: errore. Sono richiesti privilegi di root per eseguire questo programma.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: attenzione. È stato impostato il root setuid di questo programma.\n" "Chiunque possa eseguire questo programma può aggiornare i profili di " "AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Errore: impossibile leggere il profilo %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Errore allocazione memoria." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "Caricamento cache eseguito con successo per \"%s\".\n" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "Ricaricamento cache eseguito con successo per \"%s\".\n" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: errori individuati nel file. Interruzione.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Qualificatori maiuscoli \"RWLIMX\" obsoleti, utilizzare caratteri " "minuscoli.\n" "Per dettagli, consultare la manpage di apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Conflitto: i permessi \"a\" e \"w\" si escludono a vicenda." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Qualificatore Exec \"i\" non valido: qualificatore in conflitto già " "specificato" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Il qualificatore Exec senza limitazioni (%c%c) consente il passaggio di " "alcune variabili d'ambiente pericolose al processo senza limitazioni; " "consultare \"man 5 apparmor.d\" per dettagli.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificatore Exec \"%c\" non valido: qualificatore in conflitto già " "specificato." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Il qualificatore exec \"%c%c\" non è valido: qualificatore in conflitto è " "già specificato" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Interno: carattere modalità imprevisto \"%c\" nell'input" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Un errore interno ha generato un permesso non valido 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Errore parser AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Impossibile unire le voci: memoria esaurita\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "profilo %s: ha regole unite %s con modificatori x in conflitto\n" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "L'allegato profilo deve iniziare con \"/\"." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "I nomi di profili devono iniziare con \"/\", namespace o le parole chiavi " "\"profile\" o \"hat\"." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Creazione dell'alias %s -> %s non riuscita\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" "La flag del profilo chroot_relative va in conflitto con namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" "La flag mediate_deleted del profilo va in conflitto con delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "La flag attach_disconnected del profilo va in conflitto con " "no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" "La flag chroot_attach del profilo va in conflitto con chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "La flag \"debug\" del profilo non è più valida." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Flag del profilo non valida: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Asserzione: \"rule\" ha restituito NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Modalità non valida. Nelle regole di divieto \"x\" non deve essere preceduto " "dal qualificatore exec \"i\", \"p\" o \"u\"" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Modalità non valida. \"x\" deve essere preceduto dal qualificatore exec " "\"i\", \"p\", \"c\" o \"u\"" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Modalità non valida. \"x\" deve essere preceduto dal qualificatore Exec " "\"i\", \"p\" o \"u\"." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Asserzione: \"network_rule\" ha restituito un protocollo non valido." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Asserzione: \"change_profile\" ha restituito NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Asserzione: \"hat rule\" ha restituito NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Asserzione: \"local_profile rule\" ha restituito NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Variabile booleana %s non impostata usata in espressione if." #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "autorizzazioni esecuzione mancanti per regola non sicura." #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" "sottoinsieme può essere usato solamente con le regole dei collegamenti." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "le autorizzazioni link ed exec sono in conflitto con le regole definite nel " "file che utilizza ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "non è possibile usare collegamenti permanenti nella transizione del profilo " "nominato.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "un carattere di fine riga mancante? (voce: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Voce di rete non valida." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Funzionalità non valida %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "Errore di analisi di AppArmor per %s%s%s alla riga %d: %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "Errore di analisi di AppArmor, %s%s riga %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: parantesi {di apertura non valida, annidamento raggruppamenti non " "consentito\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: errore raggruppamento regex: numero di elementi non valido tra {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: errore raggruppamento regex: parentesi } di chiusura non valida, non è " "stata individuata alcuna { aperta\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: errore raggruppamento regex: raggruppamento non chiuso o classe " "caratteri, chiusura prevista }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: individuato overflow del buffer interno, superati %d caratteri\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: impossibile analizzare la riga input \"%s\"\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" "%s: nome \"%s\" del profilo non valido - espressione regolare non corretta\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "ERRORE nell'unione delle regole per il profilo %s, caricamento non riuscito\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ERRORE: il profilo %s contiene elementi di norme non utilizzabili con questo " "kernel:\n" "\t\"*\", \"?\", intervalli di caratteri e alternanze non consentiti.\n" "\t\"**\" utilizzabili solo alla fine di una regola.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "ERRORE nell'elaborazione di regex per il profilo %s, caricamento non " "riuscito\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "ERRORE nell'espansione delle variabili per il profilo %s, caricamento non " "riuscito\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" "ERRORE durante l'aggiunta di una regola di accesso hat per il profilo %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERRORE nel profilo %s, caricamento non riuscito\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: rilevati errori durante la post-elaborazione. Interruzione.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: individuati errori durante la post-elaborazione regex. Interruzione.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: rilevati errori durante la post-elaborazione. Interruzione.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: individuati errori durante la post-elaborazione della combinazione delle " "regole. Interruzione.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "Impossibile elaborare inclusione directory \"%s\" in \"%s\"" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "Buffer feature pieno." #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Memoria esaurita" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Impossibile creare la directory di cache: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "File nel percorso della directory di cache: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Impossibile aggiornare la directory di cache: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "Interno: modalità caratteri DBus \"%c\" inaspettata in ingresso" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "Un errore interno ha generato un permesso DBus non valido 0x%x\n" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "prefisso di negazione non consentito" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "prefisso proprietario non consentito" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "prefisso proprietario non consentito nelle regole di montaggio" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "prefisso proprietario non consentito nelle regole dbus" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "prefisso proprietario non consentito nelle regole di funzionalità" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "montaggio condizionale non valido %s%s" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "regola di montaggio errata" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "condizioni punti di montaggio attualmente non supportati" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "condizionale pivotroot \"%s\" non valido" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" "%s: errore raggruppamento espressione regolare: parentesi ] di chiusura non " "valida, corrispondente apertura [ non trovata\n" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" "%s: errore raggruppamento espressione regolare: superata nidificazione " "massima di {}\n" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" "ERRORE elaborazione regole policydb per il profilo %s, caricamento non " "riuscito\n" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" "ERRORE sostituzione alias per il profilo %s, caricamento non riuscito\n" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "%s: impossibile scrivere %s\n" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" "Errore: impossibile leggere il profilo binario o il file cache %s: %s.\n" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "Errore: impossibile leggere il file di cache \"%s\", saltato...\n" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "Interno: carattere %s di modalità inatteso nell'input \"%c\"" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "Un errrore interno ha generato un permesso %s non valido 0x%x\n" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "prefisso proprietario non consentito nelle regole di montaggio" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "prefisso proprietario non consentito nele regole dbus" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "prefisso proprietario non consentito nelle regole di segnale" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "prefisso proprietario non consentito nelle regole ptrace" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "prefisso proprietario non consentito nelle regole unix" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "prefisso proprietario non consentito nelle regole di capacità" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "regola dbus: gruppo condizionale %s=() non valido" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "regola unix: gruppo condizionale %s=() non valido" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "%s: errore regex: carattere di escape \"\\\" terminante\n" apparmor-2.11.0/parser/po/da.po0000644000175000017500000005430012654035202014043 0ustar jjjj# translation of apparmor-parser.po to # # Martin Møller , 2005. # Jan Madsen , 2006. # Ib Larsen , 2006, 2007. # Martin Schlander , 2007. # Martin Schlander , 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:33+0000\n" "Last-Translator: Martin Schlander \n" "Language-Team: Danish \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: da\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Fejl: Ikke mere hukommelse.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Fejl: Udgangsmappe %s er ikke en mappe. Springer over.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Fejl: Kunne ikke tilføje mappen %s til søgestien.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Fejl: Kunne ikke tildele hukommelse.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "DÃ¥rlig skrive position\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Tilladelse nægtet\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Ikke mere hukommelse\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil passer ikke til protokol\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil stemmer ikke med signatur\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profilversion er ikke understøttet af AppArmor-modulet\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil eksisterer allerede\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil eksisterer ikke\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Kunne ikke tilføje \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Kunne ikke erstatte \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Kunne ikke fjerne \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Ikke i stand til at skrive til standarduddata\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: PÃ…STAND: Ugyldigt tilvalg: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Tilføjelse lykkedes for \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Erstatning lykkedes for \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Fjernelse lykkedes for \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIK dÃ¥rlig optællingsbuffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Kunne ikke Ã¥bne %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Fejl i allokering af hukommelse: Kunne ikke fjerne ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Fejl i allokering af hukommelse: Kunne ikke fjerne %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Ikke i stand til at oprette arbejdsomrÃ¥de\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "Ikke i stand til at serieordne profil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Ikke i stand til at skrive hele profilindgangen\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Fundet uventet tegn: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(netværk_tilstand) Fandt uventet tegn: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s. Kunne ikke tildele hukommelse til underdomænegrundens monteringspunkt\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Advarsel: Ikke i stand til at finde et passende filsystem i %s, Er den " "monteret?\n" "Brug --subdomainfs for at tilsidesætte.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s. Desværre. Du skal have root-rettigheder for at køre dette program.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Advarsel! Du har sat programmets setuid til root.\n" "Enhver, der kan køre dette program, kan opdatere dine AppArmor-profiler.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Fejl: Kunne ikke læse profilen %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Fejl i allokering af hukommelse." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Fundet fejl i filen. Afbryder.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Store bogstaver i tilladelser \"RWLIMX\" er forældet. Konverter venligst " "til smÃ¥ bogstaver\n" "Se apparmor.d(5) man-sider for detaljer.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Konflikt, tilladelserne 'a' og 'w' er gensidigt udelukkende." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Kørselstilladelse 'i' er ugyldig. Konflikt med en allerede specificeret " "tilladelse" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Uindskrænket exec qualifier (%c%c) tillader at nogle farlige miljøvariabler " "overføres til den uindskrænkede proces. Se detaljer i 'man 5 apparmor.d'.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Kørselstilladelse '%c' er ugyldig. Konflikt med en allerede specificeret " "tilladelse" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Kørselstilladelse '%c%c' er ugyldig. Konflikt med en allerede specificeret " "tilladelse" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Intern: Uventet tilstandstegn '%c' i inddata" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Intern fejl genererede ugyldig tilladelse 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor fortolkningsfejl: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Kunne ikke sammenslutte indgange. Ikke mere hukommelse\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Kunne ikke oprette alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Profilflaget 'debug' er ikke længere gyldigt." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Ugyldigt profilflag: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "PÃ¥stand:`Regel' returneret NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Ugyldig tilstand, i afvisningsregler mÃ¥ kørselstilladelse 'i', 'u' eller 'p' " "ikke gÃ¥ forud for 'x'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "Ugyldig tilstand, 'i', 'p', 'c' eller 'u' skal gÃ¥ forud for 'x'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "Ugyldig tilstand, 'i', 'u' eller 'p' skal gÃ¥ forud for 'x'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "PÃ¥stand: 'network_rule' returnereer ugyldig protokol." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "PÃ¥stand: 'change_profile' returnerede NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "PÃ¥stand: 'hatregel' returnerede NUL.L." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "PÃ¥stand: 'local_profile rule' returnerede NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Fravalgt boolean-varibael %s brugt i et if-udtryk" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "usikker regel mangler eksekvértilladelser" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subset kan kun bruges med linkregler." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "link- og kørselstilladelser konflikter om en filregel som bruger ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "linktilladelser er ikke tilladt pÃ¥ en navngiven profiltransition.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "mangler afslutningstegn i linjen? (Indgang %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Ugyldig netværkspunkt." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Ugyldig kapabilitet %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: ulovlig Ã¥bning {, indlejrede grupperinger er ikke tilladt\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s. Grupperingsfejl i reg. udtryk: Ugyldig antal elementer mellem {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s. Grupperingsfejl i reg. udtryk: Ugyldig lukke }, ingen passende Ã¥bning { " "fundet\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s. Grupperingsfejl i reg. udtryk: Ikke lukket gruppering eller tegnklasse, " "forventer lukke }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Intern bufferoverflow fundet, %d tegn overskredet\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Ikke i stand til at fortolke inddatalinje '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "FEJL: Sammenslutningsregel for profilen %s, indlæste ikke\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "FEJL: Profilen %s indeholder elementer i retningslinjerne, som ikke er " "brugbare med denne kerne:\n" "\t'*', '?', tegnomrÃ¥derne og lignende er ikke tilladt.\n" "\t'**' mÃ¥ kun bruges i slutningen af en regel.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "FEJL: Behandling af reg. udtryk for profilen %s blev ikke indlæst\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "FEJL: Udfoldning af variabler for profilen %s blev ikke indlæst\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "FEJL under tilføjelse af 'hat'-adgangsregel for profilen %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "FEJL i profilen %s. Blev ikke indlæst\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Fejl fundet i efterbehandling. Afbryder.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Fejl fundet i efterbehandling af reg. udtryk. Afbryder.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Fejl fundet i efterbehandling. Afbryder.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s. Fejl fundet i efterbehandling af kombineringsregler. Afbryder.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/hr.po0000644000175000017500000005412012654035202014070 0ustar jjjj# translation of apparmor-parser.hr.po to Croatian # Croatian message file for YaST2 (@memory@) # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2002 SuSE Linux AG. # Copyright (C) 2001 SuSE GmbH. # # Vlatko Kosturjak , 2001. # KreÅ¡imir Jozić , 2006, 2007, 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:58+0000\n" "Last-Translator: KreÅ¡imir Jozić \n" "Language-Team: Croatian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: hr\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "GreÅ¡ka: Nedovoljno memorije.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "GreÅ¡ka: temeljni direktorij %s nije direktorij, preskaÄem.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "GreÅ¡ka: Ne mogu dodati direktorij %s u putanju za pretragu.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "GreÅ¡ka: Ne mogu rezervirati memoriju.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Neipravan položaj za zapisivanje\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Pristup odbijen\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Nema dovoljno memorije\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil ne odgovara protokolu\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil ne odgovara potpisu\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Verzija profila nije podržana od Apparmor modula\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil već postoji\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil ne postoji\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Ne mogu dodati \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Ne mogu zamijeniti \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s : Ne mogu ukloniti \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Ne mogu pisati na stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: UMETANJE: Neispravan izbor: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Dodavanje je uspjelo za \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Zamjena je uspjela za \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Uklanjanje je uspjelo za \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIKA neispravan inkrementalni spremnik %p pol %p ekst %p vel %d raz %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ne mogu otvoriti %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "GreÅ¡ka prilikom rezervacije memorije: ne mogu ukloniti ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "GreÅ¡ka prilikom rezervacije memorije: ne mogu ukloniti %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Ne mogu napraviti radni prostor\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "Ne mogu serijalizirati profil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Ne mogu zapisati cjeli unos profila\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "PronaÄ‘en neoÄekivani znak: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) PronaÄ‘en neoÄekivani znak: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Ne mogu rezervirati memoriju za toÄku montiranja poddomene\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Upozorenje: ne mogu pronaći prikladan datoteÄni sustav u %s, da li je " "montiran?\n" "Koristite --subdomainfs za premoÅ¡tenje.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: IspriÄavamo se. Trebate root privilegije za pokretanje ovog programa.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Upozorenje! Postavili ste setuid root ovog programa.\n" "Svatko tko može pokrenuti ovaj program može manipulirati AppArmor " "profilima.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "GreÅ¡ka: Ne mogu uÄitati profil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "GreÅ¡ka kod rezerviranja memorije." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s PronaÄ‘ene su greÅ¡ke u datoteci. Prekidam.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Kvalifikatori s velikim slovima \"RWLIMX\" su zastarjeli, molimo vas da ih " "pretvorite u mala slova\n" "Pogledajte apparmor.d(5) man stranice za detalje.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Sukob 'a' i 'w' dozvole su meÄ‘usobno iskljuÄive." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Kvalifikator izvrÅ¡avanja 'i' nije ispravan, sukobljeni kvalifikator je već " "naveden" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "NeograniÄeni kvalifikator izvrÅ¡avanja (%c%c) dozvoljava da neke opasne " "varijable okoline budu proslijeÄ‘ene neprovjerenim procesima, pogledajte 'man " "5 apparmor.d' za detalje.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Kvalifikator izvrÅ¡avanja '%c' nije ispravan, sukobljeni kvalifikator je već " "naveden" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Kvalifikator izvrÅ¡avanja '%c%c' nije ispravan, sukobljeni kvalifikator je " "već naveden" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "UnutraÅ¡nje: neoÄekivani oblik znaka '%c' u ulazu" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "UnutraÅ¡nja greÅ¡ka je stvorila neispravne dozvole 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor greÅ¡ka parsera: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Ne mogu spojiti unose. Nedovoljno memorije\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Ne mogu napraviti alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Zastavica profila 'uklanjanje greÅ¡aka' viÅ¡e nije ispravna." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Neispravna zastavica profila: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Potvrda: `rule' je vratilo NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Neispravan naÄin, u pravilima odbijanja 'x' ne smije imati kvalifikatore " "izvrÅ¡avanja 'i', 'p', ili 'u' u prefiksu" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Neispravan oblik, ispred 'x' moraju biti kvalifikatori izvrÅ¡avanja 'i', 'p', " "'c' ili 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Neispravan oblik, ispred 'x' moraju biti kvalifikatori izvrÅ¡avanja 'i', 'p' " "ili 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Potvrda: `network_rule' je vratilo neispravan protokol." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Potvrda: `change_profile' je vratilo NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Potvrda: `hat rule' je vratilo NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Nepostavljena varijabla istinitosti %s koriÅ¡tena u if-uvjetu" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "Nesigurnom pravilu nedostaju prava izvrÅ¡avanja" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "nedostaje oznaka kraja niza? (unos: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Neispravan mrežni unos." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Neispravna mogućnost %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Neispravno otvaranje {, ugniježđena grupiranja nisu dozvoljena\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: GreÅ¡ka prilikom grupiranja regularnih izraza: Neispravan broj stavki " "izmeÄ‘u {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s GreÅ¡ka prilikom grupiranja regularnih izraza: Neispravno zatvaranje }, " "nema odgovarajućeg otvaranja {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s GreÅ¡ka prilikom grupiranja regularnih izraza: Nezatvoreno grupiranje ili " "klasa znakova, oÄekujem zatvaranje }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: Detektiran je prelijev unutraÅ¡njeg spremnika, %d znakova previÅ¡e\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Ne mogu parsirati ulaznu liniju '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "GREÅ KA kod spajanja pravila za profil %s, ne mogu uÄitati\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "GREÅ KA profil %s sadrži elemente pravila koji se ne mogu korisiti s ovim " "kernelom:\n" "\t'*', '?', raspon znakova i alternative nisu dozvoljene.\n" "\t'**' se može koristiti samo na kraju pravila.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "GREÅ KA kod obrade regularnih izraza za profil %s, ne mogu uÄitati\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "GREÅ KA kod uÄitavanja varijabli za profil %s, ne mogu uÄitati\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "GREÅ KA u profilu %s, ne mogu uÄitati\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: NaÄ‘ene su greÅ¡ke prilikom postprocesiranja regularnih izraza. " "Prekidam.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: NaÄ‘ene su greÅ¡ke prilikom postprocesiranja kombiniranja pravila. " "Prekidam.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/sl.po0000644000175000017500000004313112654035202014075 0ustar jjjj# translation of sl_SI.po to SlovenÅ¡Äina # translation of sl_SI.po to SlovenÅ¡?ina # Janez Krek , 2005. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:00+0000\n" "Last-Translator: Janez Krek \n" "Language-Team: SlovenÅ¡Äina \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: sl\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/en_CA.po0000644000175000017500000004330612721132246014431 0ustar jjjj# English (Canada) translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:00+0000\n" "Last-Translator: AppArmor list \n" "Language-Team: English (Canada) \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: en_CA\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/uk.po0000644000175000017500000007452412654035202014110 0ustar jjjj# translation of apparmor-parser.po to Ukrainian # Translation of apparmor-parser.uk.po to Ukrainian # English translations for subdomain_parser package. # Copyright (C) 2005 Immunix, Inc. # This file is distributed under the same license as the subdomain_parser package. # # # Ivan Petrouchtchak , 2006, 2007. # Yuri Chornoivan , 2008, 2013. # Ivan Petrouchtchak , 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 12:27+0000\n" "Last-Translator: yurchor \n" "Language-Team: Ukrainian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: uk\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Помилка: недоÑтатньо пам'ÑÑ‚Ñ–.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Помилка: базовий каталог %s - це не каталог; пропуÑкаєтьÑÑ.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Помилка: Ðе вдалоÑÑ Ð´Ð¾Ð´Ð°Ñ‚Ð¸ каталог %s до шлÑху пошуку.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Помилка: Ðе вдалоÑÑ Ð²Ð¸Ð´Ñ–Ð»Ð¸Ñ‚Ð¸ пам'ÑÑ‚ÑŒ.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Погана Ð¿Ð¾Ð·Ð¸Ñ†Ñ–Ñ Ð·Ð°Ð¿Ð¸Ñу\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Відмовлено у доÑтупі\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Ðе виÑтачає пам'ÑÑ‚Ñ–\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Ðе вдалоÑÑ Ñкопіювати профіль: помилкова адреÑа пам’ÑÑ‚Ñ–\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Профіль не ÑуміÑний з протоколом\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Профіль не збігаєтьÑÑ Ð· підпиÑом\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "ВерÑÑ–Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ не підтримуєтьÑÑ Ð¼Ð¾Ð´ÑƒÐ»ÐµÐ¼ Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Профіль вже Ñ–Ñнує\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Профіль не Ñ–Ñнує\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" "Ðемає доÑтупу. ЗдійÑнено Ñпробу завантажити профіль у обмеженому режимі?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Ðевідома помилка (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Ðеможливо додати \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Ðеможливо замінити \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Ðеможливо вилучити \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Ðеможливо запиÑати в stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: не вдалоÑÑ Ð·Ð°Ð¿Ð¸Ñати результати до файла\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: нечинний параметр: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "УÑпішне Ð´Ð¾Ð´Ð°Ð²Ð°Ð½Ð½Ñ Ð´Ð»Ñ \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "УÑпішна заміна Ð´Ð»Ñ \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "УÑпішне Ð²Ð¸Ð»ÑƒÑ‡ÐµÐ½Ð½Ñ Ð´Ð»Ñ \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIC неправильне Ð·Ð±Ñ–Ð»ÑŒÑˆÐµÐ½Ð½Ñ Ð±ÑƒÑ„ÐµÑ€Ð° %p поз %p розш %p розм %d Ñ€ÐµÑ %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "правила щодо мережі профілю %s не буде заÑтоÑовано примуÑово\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Ðевідомий тип взірцÑ\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ðеможливо відкрити %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Помилка Ð²Ð¸Ð´Ñ–Ð»ÐµÐ½Ð½Ñ Ð¿Ð°Ð¼'ÑÑ‚Ñ–: Ðе вдалоÑÑ Ð²Ð¸Ð»ÑƒÑ‡Ð¸Ñ‚Ð¸ ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Помилка Ð²Ð¸Ð´Ñ–Ð»ÐµÐ½Ð½Ñ Ð¿Ð°Ð¼'ÑÑ‚Ñ–: Ðеможливо вилучити %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "неможливо Ñтворити робочу ділÑнку\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "неможливо перетворити профіль %s в поÑлідовну форму\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Ðе вдаєтьÑÑ Ð·Ð°Ð¿Ð¸Ñати повний Ð·Ð°Ð¿Ð¸Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: не вдалоÑÑ Ð·Ð°Ð¿Ð¸Ñати увеÑÑŒ Ð·Ð°Ð¿Ð¸Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ до кешу\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Ðе вдалоÑÑ Ð²Ñ–Ð´ÐºÑ€Ð¸Ñ‚Ð¸ «%s»" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "помилка fstat під Ñ‡Ð°Ñ Ð¾Ð±Ñ€Ð¾Ð±ÐºÐ¸ «%s»" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "помилка opendir під Ñ‡Ð°Ñ Ð¾Ð±Ñ€Ð¾Ð±Ð¸ «%s»" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "помилка stat під Ñ‡Ð°Ñ Ð¾Ð±Ñ€Ð¾Ð±ÐºÐ¸ «%s»" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Ðе вдалоÑÑ Ð²Ñ–Ð´ÐºÑ€Ð¸Ñ‚Ð¸ «%s» у «%s»" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Знайдено неÑподіваний Ñимвол: \"%s\"" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "У оголошеннÑÑ… змінних не може бути завершальних ком" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Знайдено неочікуваний Ñимвол: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "ÐŸÐ¾Ð¿ÐµÑ€ÐµÐ´Ð¶ÐµÐ½Ð½Ñ Ð²Ñ–Ð´ %s (%s%sÑ€Ñдок %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Ðе вдалоÑÑŒ виділити пам'ÑÑ‚ÑŒ Ð´Ð»Ñ Ñ‚Ð¾Ñ‡ÐºÐ¸ Ð¼Ð¾Ð½Ñ‚ÑƒÐ²Ð°Ð½Ð½Ñ Ð¾Ñнови піддомену\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "ПопередженнÑ: на %s не вдалоÑÑ Ð·Ð½Ð°Ð¹Ñ‚Ð¸ відповідної файлової ÑиÑтеми, може " "його не змонтовано?\n" "ВикориÑтайте параметр --subdomainfs, щоб обійти проблему.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Ð”Ð»Ñ Ð²Ð¶Ð¸Ð²Ð°Ð½Ð½Ñ Ñ†Ñ–Ñ”Ñ— програми потрібні привілеї адмініÑтратора.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: ПопередженнÑ! Ви вказали Ð´Ð»Ñ Ñ†Ñ–Ñ”Ñ— програми setuid root.\n" "Будь-хто, хто може запуÑкати цю програму, може змінювати\n" "ваші профілі AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Помилка: Ðе вдалоÑÑŒ прочитати профіль %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Помилка Ð²Ð¸Ð´Ñ–Ð»ÐµÐ½Ð½Ñ Ð¿Ð°Ð¼'ÑÑ‚Ñ–." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "УÑпішне Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶ÐµÐ½Ð½Ñ ÐºÐµÑˆÑƒ Ð´Ð»Ñ Â«%s».\n" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "УÑпішне Ð¿ÐµÑ€ÐµÐ·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶ÐµÐ½Ð½Ñ ÐºÐµÑˆÑƒ Ð´Ð»Ñ Â«%s».\n" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Ð’ файлі знайдені помилки. ПерериваєтьÑÑ.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "КлаÑифікатори у верхньому регіÑтрі \"RWLIMX\" не рекомендовано, будь лаÑка, " "переведіть Ñ—Ñ… у нижній регіÑÑ‚Ñ€\n" "ПереглÑньте Ñторінку довідки apparmor.d(5), щоб дізнатиÑÑ Ð±Ñ–Ð»ÑŒÑˆÐµ.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Конфлікт дозволів, 'a' та 'w' Ñ” взаємовиключними." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "КлаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ Â«i» нечинний, попередньо визначено клаÑифікатор, що " "конфліктує з ним" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Ðеобмежений клаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ (%c%c) дозволÑÑ” передачу деÑких критичних " "змінних Ñередовища необмеженому процеÑу; виконайте команду 'man 5 " "apparmor.d', щоб дізнатиÑÑ Ð±Ñ–Ð»ÑŒÑˆÐµ.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "КлаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ Â«%c» - нечинний, раніше визначено клаÑифікатор, що з " "ним конфліктує" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "КлаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ Â«%c%c» - нечинний, раніше визначено клаÑифікатор, що " "з ним конфліктує" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Внутрішнє: неочікуваний Ñимвол режиму '%c' у вхідній інформації" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Ð’Ð½ÑƒÑ‚Ñ€Ñ–ÑˆÐ½Ñ Ð¿Ð¾Ð¼Ð¸Ð»ÐºÐ°, Ñпричинена нечинним дозволом 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Помилка аналізатора AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Ðе вдалоÑÑ Ð¾Ð±'єднати запиÑи. Ðе виÑтачає пам'ÑÑ‚Ñ–\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" "профіль %s: міÑтить об’єднане правило %s з конфліктом x модифікаторів\n" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Ð”Ð¾Ð»ÑƒÑ‡ÐµÐ½Ð½Ñ Ð´Ð¾ профілю має починатиÑÑ Ð· «/»." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Ðазви профілів мають починатиÑÑ Ð· «/», назви проÑтору назв або ключового " "Ñлова «profile» чи «hat»." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Ðе вдалоÑÑ Ñтворити пÑевдонім %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "Прапорець профілю chroot_relative конфліктує з namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "Прапорець профілю mediate_deleted конфліктує з delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Прапорець профілю attach_disconnected конфліктує з no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "Прапорець профілю chroot_attach конфліктує з chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Прапорець профілю \"debug\" більше не діє." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Ðечинний прапорець профілю: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "ВиÑвлено: `rule' повернула NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Ðечинний режим, перед «x» має бути вказано клаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ Â«i», «p», " "або «u»" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Ðечинний режим, перед «x» має бути вказано клаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ Â«i», «p», " "«c» або «u»" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Ðечинний режим, перед «x» має бути вказано клаÑифікатор Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ Â«i», «p», " "або «u»" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "ВиÑвлено: «network_rule» повернула нечинний протокол." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "ВиÑвлено: `change_profile' повернула NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "ВиÑвлено: 'hat rule' повернула NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "ВиÑвлено: `local_profile rule' повернула NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "ÐžÐ±Ð½ÑƒÐ»ÐµÐ½Ð½Ñ Ð±ÑƒÐ»Ñ–Ð²Ñької змінної %s, Ñку викориÑтано в виразі умови" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "небезпечне правило без дозволів на виконаннÑ" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "підмножину можна викориÑтовувати лише з правилами поÑилань." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "дозволи поÑÐ¸Ð»Ð°Ð½Ð½Ñ Ñ– Ð²Ð¸ÐºÐ¾Ð½Ð°Ð½Ð½Ñ ÐºÐ¾Ð½Ñ„Ð»Ñ–ÐºÑ‚ÑƒÑŽÑ‚ÑŒ у правилі файлів за допомогою ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "дозволи поÑилань не дозволено Ð´Ð»Ñ Ð¿ÐµÑ€ÐµÐ½ÐµÑÐµÐ½Ð½Ñ Ñ–Ð¼ÐµÐ½Ð¾Ð²Ð°Ð½Ð¾Ð³Ð¾ профілю.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "відÑутній Ñимвол ÐºÑ–Ð½Ñ†Ñ Ñ€Ñдка? (елемент: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Ðечинний мережний елемент." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Ðечинна характериÑтика %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "Помилка аналізатора AppArmor, %s%s%s, Ñ€Ñдок %d: %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "Помилка аналізатора AppArmor,%s%s, Ñ€Ñдок %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: ÐеприпуÑтима відкрита дужка {, вузлове Ð³Ñ€ÑƒÐ¿ÑƒÐ²Ð°Ð½Ð½Ñ Ð½Ðµ дозволÑєтьÑÑ\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Помилка Ð³Ñ€ÑƒÐ¿ÑƒÐ²Ð°Ð½Ð½Ñ Ñ„Ð¾Ñ€Ð¼Ð°Ð»ÑŒÐ½Ð¾Ð³Ð¾ виразу: нечинна кількіÑÑ‚ÑŒ пунктів у " "дужках {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Помилка Ð³Ñ€ÑƒÐ¿ÑƒÐ²Ð°Ð½Ð½Ñ Ñ„Ð¾Ñ€Ð¼Ð°Ð»ÑŒÐ½Ð¾Ð³Ð¾ виразу: нечинна завершальна дужка }, не " "знайдено відповідної початкової дужки {\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Помилка Ð³Ñ€ÑƒÐ¿ÑƒÐ²Ð°Ð½Ð½Ñ Ñ„Ð¾Ñ€Ð¼Ð°Ð»ÑŒÐ½Ð¾Ð³Ð¾ виразу: не завершено групу або ÐºÐ»Ð°Ñ " "Ñимволів, не знайдено завершальної дужки }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: ВиÑвлено внутрішнє Ð¿ÐµÑ€ÐµÐ¿Ð¾Ð²Ð½ÐµÐ½Ð½Ñ Ð±ÑƒÑ„ÐµÑ€Ð°, Ð¿ÐµÑ€ÐµÐ²Ð¸Ñ‰ÐµÐ½Ð½Ñ Ñƒ %d Ñимволів\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Ðе вдаєтьÑÑ Ð¿Ñ€Ð¾Ð°Ð½Ð°Ð»Ñ–Ð·ÑƒÐ²Ð°Ñ‚Ð¸ вхідний файл \"%s\"\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "%s: некоректна назва профілю, «%s» — помилковий формальний вираз\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "ПОМИЛКРпід Ñ‡Ð°Ñ Ð¾Ð±â€™Ñ”Ð´Ð½Ð°Ð½Ð½Ñ Ð¿Ñ€Ð°Ð²Ð¸Ð» Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ %s, не вдалоÑÑ Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶Ð¸Ñ‚Ð¸\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ПОМИЛКÐ! профіль %s міÑтить елементи політики, що не можуть бути викориÑтані " "з цим Ñдром ÑиÑтеми:\n" "\t'*', '?', діапазони Ñимволів Ñ– варіанти не дозволено.\n" "\tможна викориÑтовувати лише '**' наприкінці правила.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "ПОМИЛКРобробки формальних виразів Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ %s, не вдалоÑÑ Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶Ð¸Ñ‚Ð¸\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "ПОМИЛКРпри розширенні змінних Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ %s; Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶ÐµÐ½Ð½Ñ Ð·Ð°Ð·Ð½Ð°Ð»Ð¾ невдачі\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "ÐŸÐžÐœÐ˜Ð›ÐšÐ Ð´Ð¾Ð´Ð°Ð²Ð°Ð½Ð½Ñ Ð¿Ñ€Ð°Ð²Ð¸Ð»Ð° доÑтупу hat Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ПОМИЛКРу профілі %s, не вдалоÑÑ Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶Ð¸Ñ‚Ð¸\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" "%s: У процеÑÑ– оÑтаточної обробки виÑвлено помилки. Ðварійне завершеннÑ.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: У процеÑÑ– оÑтаточної обробки формального виразу виÑвлено помилки. " "Ðварійне завершеннÑ.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" "%s: У процеÑÑ– оÑтаточної обробки виÑвлено помилки. Ðварійне завершеннÑ.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Під Ñ‡Ð°Ñ Ð¾Ñтаточної обробки Ñкладених правил виÑвлено помилки. Ðварійне " "завершеннÑ.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "Ðе вдалоÑÑ Ð¾Ð±Ñ€Ð¾Ð±Ð¸Ñ‚Ð¸ каталог Ð²ÐºÐ»ÑŽÑ‡ÐµÐ½Ð½Ñ Â«%s» у «%s»" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "Переповнено буфер можливоÑтей." #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "ÐедоÑтатньо пам’ÑÑ‚Ñ–" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Ðе вдалоÑÑ Ñтворити каталог кешу: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "Файл на міÑці каталогу кешу: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Ðе вдалоÑÑ Ð¾Ð½Ð¾Ð²Ð¸Ñ‚Ð¸ каталог кешу: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" "Ð’Ð½ÑƒÑ‚Ñ€Ñ–ÑˆÐ½Ñ Ð¿Ð¾Ð¼Ð¸Ð»ÐºÐ°: неочікуваний Ñимвол режиму DBus, «%c», у вхідних даних" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "Ð’Ð½ÑƒÑ‚Ñ€Ñ–ÑˆÐ½Ñ Ð¿Ð¾Ð¼Ð¸Ð»ÐºÐ°, Ñпричинена нечинними правами доÑтупу DBus 0x%x\n" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "не можна викориÑтовувати Ð¿Ñ€ÐµÑ„Ñ–ÐºÑ deny" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "не можна викориÑтовувати Ð¿Ñ€ÐµÑ„Ñ–ÐºÑ owner" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "у правилах mount не можна викориÑтовувати Ð¿Ñ€ÐµÑ„Ñ–ÐºÑ owner" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "у правилах dbus не можна викориÑтовувати Ð¿Ñ€ÐµÑ„Ñ–ÐºÑ owner" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "у правилах capability не можна викориÑтовувати Ð¿Ñ€ÐµÑ„Ñ–ÐºÑ owner" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "некоректна умова mount %s%s" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "помилкове правило mount" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "підтримки умов на точку Ð¼Ð¾Ð½Ñ‚ÑƒÐ²Ð°Ð½Ð½Ñ Ñƒ поточній верÑÑ–Ñ— не передбачено" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "некоректна умова pivotroot, «%s»" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" "%s: помилка Ð³Ñ€ÑƒÐ¿ÑƒÐ²Ð°Ð½Ð½Ñ Ñ„Ð¾Ñ€Ð¼Ð°Ð»ÑŒÐ½Ð¾Ð³Ð¾ виразу: нечинна завершальна дужка ], не " "знайдено відповідної початкової дужки [\n" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" "%s: помилка Ð³Ñ€ÑƒÐ¿ÑƒÐ²Ð°Ð½Ð½Ñ Ñ„Ð¾Ñ€Ð¼Ð°Ð»ÑŒÐ½Ð¾Ð³Ð¾ виразу: перевищено макÑимальний рівень " "вкладеноÑÑ‚Ñ– у дужках {}\n" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" "ПОМИЛКРобробки правил policydb Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ %s, не вдалоÑÑ Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶Ð¸Ñ‚Ð¸\n" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "ПОМИЛКРзаміри пÑевдонімів Ð´Ð»Ñ Ð¿Ñ€Ð¾Ñ„Ñ–Ð»ÑŽ %s, не вдалоÑÑ Ð·Ð°Ð²Ð°Ð½Ñ‚Ð°Ð¶Ð¸Ñ‚Ð¸\n" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/fr.po0000644000175000017500000006034712710566630014105 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2016-04-28 10:19+0000\n" "Last-Translator: Sylvie Gallet \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-04-29 05:14+0000\n" "X-Generator: Launchpad (build 17995)\n" "Language: fr\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Erreur : mémoire saturée.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Erreur : basedir %s n'est pas un répertoire, ignoré.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Erreur : impossible d'ajouter le répertoire %s au chemin de recherche.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Erreur : impossible d'allouer de la mémoire\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Mauvaise position d'écriture\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permission refusée\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Mémoire saturée\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Impossible de copier le profil : adresse mémoire incorrecte\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil non conforme au protocole\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Le profil ne correspond pas à la signature\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Version de profil non prise en charge par le module Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil déjà existant\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil inexistant\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Erreur inconnue (%d) : %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s : impossible d'ajouter « %s ». " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s : impossible de remplacer « %s ». " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s : impossible de supprimer « %s ». " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s : impossible d'écrire vers la sortie standard (stdout)\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s : impossible d'écrire vers le fichier de sortie\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s : ASSERT : option incorrecte : %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Ajout réussi pour « %s ».\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Remplacement réussi pour « %s ».\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Suppression réussie pour « %s ».\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "ALARME tampon d'incrément incorrect %p pos %p ext %p taille %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Type de motif inconnu\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Impossible d'ouvrir %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Erreur d'allocation mémoire : impossible de supprimer ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Erreur d'allocation mémoire : impossible de supprimer %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "impossible de créer une zone de travail\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "impossible de sérialiser le profil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s : impossible d'écrire l'entrée de profil complète\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s : impossible d'écrire l'entrée de profil complète dans le cache\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Impossible d'ouvrir « %s »" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "Échec de fstat pour « %s »" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Impossible d'ouvrir « %s » dans « %s »" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Caractère inattendu trouvé : « %s »" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "Les déclarations de variables n'acceptent pas les virgules finales" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Caractère inattendu trouvé : '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Avertissement de %s (%s%sligne %d) : %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s : impossible d'allouer de la mémoire pour point de montage de base de " "sous-domaine\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Avertissement : impossible de trouver un système de fichiers approprié dans " "%s, est-il monté ?\n" "Utilisez --subdomainfs pour remplacer.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s : désolé. Les privilèges root sont nécessaires pour exécuter ce " "programme.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s : avertissement ! Vous avez défini le setuid de ce programme comme root.\n" "Toute personne capable d'exécuter ce programme peut mettre à jour vos " "profils AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Erreur : impossible de lire le profil %s : %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Erreur d'allocation mémoire." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s : erreurs trouvées dans un fichier. Annulation.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Les qualificatifs en majuscules « RWLIMX » sont déconseillés. Remplacez-les " "par des minuscules\n" "Reportez-vous à la page de manuel apparmor.d(5) pour plus de détails.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Les autorisations « a » et « w » en conflit s'excluent mutuellement." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Qualificatif d'exécution « i » incorrect, en conflit avec un qualificatif " "déjà défini" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Le qualificatif d'exécution non confiné (%c%c) permet à certaines variables " "d'environnement dangereuses d'être transmises vers le processus non " "confiné ; « man 5 apparmor.d » pour plus de détails.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificatif d'exécution « %c » non valide, qualificatif déjà indiqué" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificatif d'exécution « %c%c » incorrect, en conflit avec un qualificatif " "déjà défini" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Interne« : caractère de mode « %c » inattendu en entrée" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Erreur interne générée par une autorisation invalide 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Erreur de l'analyseur AppArmor : %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Impossible de fusionner les entrées. Mémoire saturée\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "L'ajout à un profil doit commencer par un « / »" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Les noms de profils doivent commencer par un « / », un espace de noms ou un " "des mots-clés « profile » ou « hat »." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Impossible de créer l'alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" "Le drapeau de profil chroot_relative est en conflit avec namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" "Le drapeau de profil mediate_deleted est en conflit avec delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Le drapeau de profil attach_disconnected est en conflit avec " "no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" "Le drapeau de profil chroot_attach est en conflit avec chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Le drapeau de profil « debug » n'est plus valide." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Drapeau de profil non valide : %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert : « rule » a retourné NULL" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Mode incorrect : dans les règles de refus, « x » ne doit pas être précédé du " "qualificatif d'exécution « i », « p » ou « u »." #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Mode incorrect : « x » doit être précédé du qualificatif d'exécution « i », " "« p », « c » ou « u »." #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Mode incorrect : « x » doit être précédé du qualificatif d'exécution « i », " "« p » ou « u »." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert : « network_rule » retourne un protocole non valide." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert : « change_profile » a retourné NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert : « hat rule » a retourné NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert : « local_profile rule » a retourné NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Annuler la variable booléenne %s utilisée dans l'expression if" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "autorisations d'exécution manquant de règle, non sûres" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "le sous-ensemble ne peut être utilisé qu'avec des règles de liaison." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "les autorisations de liaison et d'exécution sont en conflit avec une règle " "de fichier qui utilise ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "les autorisations de liaison ne sont pas autorisées sur une transition de " "profil nommée.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "caractère de fin de ligne manquant ? (entrée : %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Entrée réseau non valide." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Capacité %s invalide." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "Erreur de l'analyseur AppArmor pour %s%s%s à la ligne %d : %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "Erreur de l'analyseur AppArmor, %s%s ligne %d : %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s : { ouvrante incorrecte, regroupements imbriqués non autorisés\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s : erreur de regroupement Regex : nombre incorrect d'éléments entre {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s : erreur de regroupement Regex : } fermante incorrecte, aucune { ouvrante " "détectée\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s : erreur de regroupement Regex : regroupement ou classe de caractères non " "fermé, fermante attendue }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s : dépassement de tampon interne détecté, %d caractères en dépassement\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s : impossible d'analyser la ligne en entrée « %s »\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" "%s : Nom de profil non valide « %s » - expression régulière incorrecte\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "ERREUR de fusion des règles pour le profil %s, le chargement a échoué\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ERREUR le profil %s contient des éléments de stratégie non utilisables avec " "ce noyau :\n" "\t« * », « ? », les plages de caractères et les permutations ne sont pas " "autorisées.\n" "\t« ** » peut uniquement être utilisé à la fin d'une règle.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "ERREUR lors du traitement Regex du profil %s, le chargement a échoué\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "ERREUR lors de l'extension de variables pour le profil %s, le chargement a " "échoué\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" "Une ERREUR s'est produite lors de l'ajout de la règle d'accès hat pour le " "profil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERREUR dans le profil %s, échec du chargement\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s : erreurs trouvées lors du post-traitement. Abandon.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s : erreurs trouvées lors du post-traitement Regex. Annulation.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s : erreurs trouvées lors du post-traitement. Abandon.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s : erreurs trouvées lors de la combinaison des règles de post-traitement. " "Annulation.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Mémoire saturée" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ug.po0000644000175000017500000004325412721132246014101 0ustar jjjj# Uyghur translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:00+0000\n" "Last-Translator: AppArmor list \n" "Language-Team: Uyghur \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ug\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ce.po0000644000175000017500000004326512721132246014057 0ustar jjjj# Chechen translation for apparmor # Copyright (c) 2014 Rosetta Contributors and Canonical Ltd 2014 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2014. # msgid "" msgstr "" "Project-Id-Version: apparmor\n" "Report-Msgid-Bugs-To: AppArmor list \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2014-08-13 08:08+0000\n" "Last-Translator: AppArmor list \n" "Language-Team: Chechen \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ce\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/sr.po0000644000175000017500000004314212654035202014105 0ustar jjjj# Serbian translations for boot loader # Copyright (C) 2005 SUSE Linux GmbH # Copyright © 2005 Danilo Segan # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:31+0000\n" "Last-Translator: Данило Шеган \n" "Language-Team: Serbian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: sr\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/sv.po0000644000175000017500000005452312654035202014116 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:14+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: sv\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Fel: Slut pÃ¥ minne\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Fel: baskatalogen %s är inte en katalog. Hoppar över.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Fel: Det gick inte att lägga till katalogen %s i sökvägen.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Fel: Det gick inte att tilldela minne\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Fel skrivposition\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Ã…tkomst nekas\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Slut pÃ¥ minne\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profilen följer inte protokollet\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profilen matchar inte signaturen\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Det finns inte stöd för profilversionen i AppArmor-modulen\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profilen finns redan\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profilen finns inte\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Det gÃ¥r inte att lägga till %s. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Det gÃ¥r inte att ersätta %s. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Det gÃ¥r inte att ta bort %s. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Det gÃ¥r inte att skriva till stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Felaktigt alternativ: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Tillägg lyckades för %s.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Ersättning lyckades för %s.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Borttagning lyckades för %s.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "VARNING! Felaktig stegbuffert %p pos %p tillägg %p storlek %d upplösn %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Kunde inte öppna %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Minnestilldelningsfel: Det gick inte att ta bort ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Minnestilldelningsfel: Det gick inte att ta bort %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "det gick inte att skapa arbetsyta\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "det gick inte att serialisera profilen %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Det gick inte att skriva hela profilposten\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Oväntat tecken hittades: %s" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "[network_mode] Ett oväntat tecken hittades: %s" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Det gick inte att tilldela minne för underdomänbasens monteringspunkt\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Varning: Det gick inte att hitta en lämplig fs i %s. Den kanske inte har " "monterats.\n" "Ã…sidosätt med -subdomainfs.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Du mÃ¥ste ha rotbehörigheter om du vill köra det här programmet.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Varning! Du har angett det här programmet som setuid root.\n" "Alla som kan köra det här programmet kan uppdatera dina AppArmor-profiler.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Fel: Det gick inte att läsa profilen %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Minnestilldelningsfel." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Fel i filen. Avbryter.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Kvalificerarna med versalerna \"RWLIMX\" har tagits bort. Ändra dem till " "gemener.\n" "Se man-sidan för apparmor.d(5) om du vill ha mer information.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" "En konflikt har uppstÃ¥tt. Behörigheterna a och w kan inte förekomma " "samtidigt." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec-kvalificeraren 'i' felaktig, kvalificerare i konflikt med denna har " "angetts" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Med den obegränsade exec-kvalificeraren (%c%c) tillÃ¥ts det att vissa farliga " "miljövariabler skickas till den obegränsade processen. Se 'man 5 apparmor.d' " "om du vill ha mer information.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Exec-kvalificeraren %c är ogiltig. En kvalificerare som stÃ¥r i konflikt med " "den har redan angetts" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Exec-kvalificeraren %c%c är ogiltig. En kvalificerare som stÃ¥r i konflikt " "med den har redan angetts." #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Internt: lägestecknet %c i indata var oväntat" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Ett internt fel genererade en ogiltig behörighet 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor-behandlarfel: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Det gick inte att koppla posterna. Slut pÃ¥ minne\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Det gick inte att skapa aliaset %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Profilflaggan debug är inte längre giltig." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Ogiltig profilflagga: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Förutsättning: `rule' returnerade NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Ogiltigt läge. I nekanderegler mÃ¥ste x föregÃ¥s av nÃ¥gon av exec-" "kvalificerarna i, p eller u" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Ogiltigt läge. x mÃ¥ste föregÃ¥s av nÃ¥gon av exec-kvalificerarna i, p, c eller " "u" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Ogiltigt läge. x mÃ¥ste föregÃ¥s av nÃ¥gon av exec-kvalificerarna i, p eller u" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Förutsättning: 'network_rule_' returnerade ett ogiltigt protokoll." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Förutsättning: `change_profile' returnerade NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Förutsättning: `hat rule' returnerade NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Förutsättning: local_profile rule returnerade NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" "Den booleska variabeln %s, som inte har ställts in, används i ett if-uttryck" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "osäker regel saknar exec-behörigheter" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "deluppsättning kan bara användas med länkregler." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "link- och exec-behörigheter är i konflikt med en filregel som använder ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "link-behörigheter är inte tillÃ¥tna i en namngiven profilövergÃ¥ng.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "radslutstecken saknas? (post: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Ogiltig nätverkspost." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Ogiltig kapacitet %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: OtillÃ¥ten inledande {, nästling av grupper tillÃ¥ts inte\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex-grupperingsfel: Ogiltigt antal objekt inom {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex-grupperingsfel: Ogiltig avslutande }, ingen inledande { hittades\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex-grupperingsfel: Oavslutad gruppering eller teckenklass, " "avslutande } förväntas\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Internt buffertspill upptäcktes, %d tecken överskreds\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Det gÃ¥r inte att analysera indataraden %s\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "FEL vid sammanfogning av regler för profilen %s. Det gick inte att läsa in\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "FEL: Profilen %s innehÃ¥ller principelement som inte kan användas tillsammans " "med den här kerneln:\n" "\t'*', '?', teckenintervall och alterneringar är inte tillÃ¥tna.\n" "\t'**' fÃ¥r endast användas i slutet av en regel.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" "FEL vid behandling av reguljära uttryck för profilen %s, det gick inte att " "läsa in\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "FEL vid expandering av variabler för profilen %s, det gick inte att läsa in\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" "Ett fel inträffade när Ã¥tkomstregeln hat skulle läggas till för profilen %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "FEL i profilen %s, det gick inte att läsa in\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Det inträffade fel vid efterbearbetningen. Avbryter.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Fel vid efterbearbetning av regex. Avbryter.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Det inträffade fel vid efterbearbetningen. Avbryter.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: Fel i efterbearbetning av regelkombination. Avbryter.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/wa.po0000644000175000017500000004321412654035202014070 0ustar jjjj# Translation into the walloon language. # Copyright (C) 2007 SUSE Linux Products GmbH. # Pablo Saratxaga , 2001, 2004. # Jean Cayron , 2007. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:32+0000\n" "Last-Translator: Jean Cayron \n" "Language-Team: Walloon \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: wa\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ka.po0000644000175000017500000004321112654035202014051 0ustar jjjj# @TITLE@ # Copyright (C) 2006, SUSE Linux GmbH, Nuremberg # FIRST AUTHOR , YEAR. # # This file is distributed under the same license as @PACKAGE@ package. FIRST # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:25+0000\n" "Last-Translator: George Machitidze \n" "Language-Team: Georgian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ka\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/hi.po0000644000175000017500000005312412654035202014062 0ustar jjjj# translation of apparmor-parser.hi.po to Hindi # Sangeeta Kumari , 2007. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:49+0000\n" "Last-Translator: Sangeeta Kumari \n" "Language-Team: Hindi \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: hi\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "तà¥à¤°à¥à¤Ÿà¤¿: याददाशà¥à¤¤ के बाहर.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "तà¥à¤°à¥à¤Ÿà¤¿: basedir %s à¤à¤• निरà¥à¤¦à¥‡à¤¶à¤¿à¤•à¤¾ नहीं है, छोड़ रहा है.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "%s तà¥à¤°à¥à¤Ÿà¤¿:खोज पथ के निरà¥à¤¦à¥‡à¤¶à¤¿à¤•à¤¾ में नहीं जोड़ सका .\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "तà¥à¤°à¥à¤Ÿà¤¿: याददाशà¥à¤¤ नहीं बांट सका.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "बà¥à¤°à¥€ लेखन सà¥à¤¥à¤¿à¤¤à¤¿\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "अनà¥à¤®à¤¤à¤¿ देने से इंकार किया\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "सà¥à¤®à¥ƒà¤¤à¤¿ में नहीं है\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² पà¥à¤°à¥‹à¤Ÿà¥‹à¤•à¥‰à¤² की पà¥à¤·à¥à¤Ÿà¤¿ नहीं करता\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² हसà¥à¤¤à¤¾à¤•à¥à¤·à¤° से मेल नहीं खाता\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² पहले से मौजूद है\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² मौजूद नहीं है\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" को जोड़ने में अकà¥à¤·à¤®à¥¤ " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" को पà¥à¤°à¤¤à¤¿à¤¸à¥à¤¥à¤¾à¤ªà¤¿à¤¤ करने में अकà¥à¤·à¤®à¥¤ " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" को हटाने में अकà¥à¤·à¤®à¥¤ " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdout पर लिखने में अकà¥à¤·à¤®\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: अमानà¥à¤¯ विकलà¥à¤ª : %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\" के लिठजोड़ना सफल रहा।\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" के लिठपà¥à¤°à¤¤à¤¿à¤¸à¥à¤¥à¤¾à¤ªà¤¨ सफल रहा।\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" के लिठहटाना सफल रहा।\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "पैनिक बैड इंकà¥à¤°à¥€à¤®à¥‡à¤‚ट बफर %p pos %p ext %p आकार %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s - %s को खोलने में अकà¥à¤·à¤®\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "कारà¥à¤¯ कà¥à¤·à¥‡à¤¤à¥à¤° सृजित करने में अकà¥à¤·à¤®\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² %s को कà¥à¤°à¤®à¤¾à¤‚कित करने में अकà¥à¤·à¤®\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: संपूरà¥à¤£ पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² पà¥à¤°à¤µà¤¿à¤·à¥à¤Ÿà¤¿ को लिखने में अकà¥à¤·à¤®\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "अपà¥à¤°à¤¤à¥à¤¯à¤¾à¤¶à¤¿à¤¤ वरà¥à¤£ मिला : '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: सबडोमेनबेस माउंट बिंदॠके लिठसà¥à¤®à¥ƒà¤¤à¤¿ निरà¥à¤§à¤¾à¤°à¤¿à¤¤ नहीं कर सका\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "तà¥à¤°à¥à¤Ÿà¤¿: पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² नहीं पढ़ सका %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "सà¥à¤®à¥ƒà¤¤à¤¿ निरà¥à¤§à¤¾à¤°à¤£ तà¥à¤°à¥à¤Ÿà¤¿à¥¤" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: फाइल में तà¥à¤°à¥à¤Ÿà¤¿à¤¯à¤¾à¤‚ पà¥à¤°à¤¾à¤ªà¥à¤¤ हà¥à¤ˆà¤‚। रदà¥à¤¦ कर रहा है।\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec कà¥à¤µà¤¾à¤²à¥€à¤«à¤¾à¤¯à¤° 'i' अमानà¥à¤¯ है, टकरावकारी कà¥à¤µà¤¾à¤²à¥€à¤«à¤¾à¤¯à¤° को पहले ही निरà¥à¤¦à¤¿à¤·à¥à¤Ÿ कर " "दिया गया है" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "पà¥à¤°à¤µà¤¿à¤·à¥à¤Ÿà¤¿à¤¯à¥‹à¤‚ को à¤à¤• में नहीं मिला सकता। सà¥à¤®à¥ƒà¤¤à¤¿ में नहीं है\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `rule' NULL पर लौट आया।" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: 'hat rule' NULL पर लौट आया।" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "लाइन के अंत का à¤à¤• वरà¥à¤£ छूटा है? (पà¥à¤°à¤µà¤¿à¤·à¥à¤Ÿà¤¿ : %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: गैर-कानूनन खोलना {, नेसà¥à¤Ÿà¤¿à¤‚ग गà¥à¤°à¥à¤ªà¤¿à¤‚गà¥à¤¸ की अनà¥à¤®à¤¤à¤¿ नहीं है\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex गà¥à¤°à¥à¤ªà¤¿à¤‚ग तà¥à¤°à¥à¤Ÿà¤¿ : {} के बीच मदों की अमानà¥à¤¯ संखà¥à¤¯à¤¾\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex गà¥à¤°à¥à¤ªà¤¿à¤‚ग तà¥à¤°à¥à¤Ÿà¤¿ : बंद अमानà¥à¤¯ }, किसी मेल खाने वाले खोलने का { पता " "नहीं लगा\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: आंतरिक बफर के ओवरफà¥à¤²à¥‹ होने का पता लगा, %d वरà¥à¤£ अधिक हैं\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: इनपà¥à¤Ÿ लाइन '%s' को पारà¥à¤¸ करने में अकà¥à¤·à¤®\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² %s में तà¥à¤°à¥à¤Ÿà¤¿ है, लोड करने में असफल रहा\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: संयोगकारी नियमों के पà¥à¤°à¤¸à¤‚सà¥à¤•à¤°à¤£-पशà¥à¤šà¤¾à¤¤ में तà¥à¤°à¥à¤Ÿà¤¿à¤¯à¤¾à¤‚ पà¥à¤°à¤¾à¤ªà¥à¤¤ हà¥à¤ˆà¤‚। रदà¥à¤¦ " "कर रहा है।\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/zu.po0000644000175000017500000004657312654035202014132 0ustar jjjj# English translations for subdomain_parser package. # Copyright (C) 2005 Immunix, Inc. # This file is distributed under the same license as the subdomain_parser package. # Steve Beattie , 2005. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 04:18+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:11+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: zu\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Indawo yokukopisha enganembile\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Imvume inqatshiwe\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Ilahlekelwe Yimemori\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Iphrofayili ayivumelani nephrothokholi\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Iphrofayili ayifanelani nesignisha\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Iphrofayili isiyatholakala kakade\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Iphrofayili ayitholakali\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Ayikwazi ukwenezela i-\"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Ayikwazi ukushintsha i-\"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Ayikwazi ukususa i-\"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Ayikwazi ukukopishela kwi-stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Okukhethiwe okuyiphutha: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Ukwenezela okulandelwe nge-\"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Ushintsho olulandelwe nge-\"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Ukususa okulandelwe nge-\"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "Ingobolwazi yesikhashana YOKUTATAZELA okubi %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Ayikwazi ukuvula %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Ayikwzi ukwakha indawo yokusebenzela\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "Ayikwazi ukwenza iphrofayili ibe nama-serial %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Ayikwazi ukuyibhala yonke iphrofayili\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Ithola uhlamvu olungalindelekile: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Ayikwazanga ukuthola ingobolwazi yesixhakathisi se-domain engaphansi\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Iphutha lokwabiwa kwememori." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Amaphutha atholakale kwifayela. Iyayeka.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "I-exec qualifier u-‘i’ akasebenzi, i-qualifier engqubuzanayo isibonisiwe " "kakade" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Aykwazanga ukuhlanganisa ama-entry. Ilahlekelwe Yimemori\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `i-rule' ibuye IYIZE." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: `i-hat rule’ ibuye IYIZE." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "ilahlekelwe yisiphetho sohlamvu lomugqa? (i-entry: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Ukuvula okungekho emthethweni {, ukuvalela amaqoqo akuvunyelwe\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Iphutha lokwenza amaqoqo le-regex: Inombolo eyiphutha yezinto " "eziphakathi nendawo {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Iphutha lokwenza amaqoqo le-regex: Ukuvala okuyiphutha }, akukho ukuvula " "okufanelanayo { ithungathwe yatholwa\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: Ingobolwazi yesikhashana yangaphakathi itholakele, %d izinhlamvu " "ezeqiwe\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Ayikwazi ukunqunta umugqa wokufakiwe '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "IPHUTHA kwiphrofayili %s, ihlulekile ukufaka\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Amaphutha atholakele ekuhlanganiseni imithetho yangemva kokuphrosesa. " "Iyayeka.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/lo.po0000644000175000017500000004302312654035202014071 0ustar jjjj# Lao message file for YaST2 (@memory@). # Copyright (C) 2006 SUSE Linux Products GmbH. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:25+0000\n" "Last-Translator: i18n@suse.de\n" "Language-Team: Lao \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: lo\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/pt.po0000644000175000017500000005712212666210215014111 0ustar jjjj# translation of apparmor-parser.pt.po to Portuguese # English translations for subdomain_parser package. # Copyright (C) 2005 Immunix, Inc. # This file is distributed under the same license as the subdomain_parser package. # # Steve Beattie , 2005. # Antonio Cardoso Martins , 2006, 2007, 2008. # Carlos Gonçalves , 2007. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2016-03-03 08:40+0000\n" "Last-Translator: Ivo Xavier \n" "Language-Team: Portuguese \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-03-04 04:35+0000\n" "X-Generator: Launchpad (build 17936)\n" "Language: pt\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Erro: Memória Esgotada.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Erro: basedir %s não é um directório, a saltar.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Erro: Não é possível adicionar o directório %s ao caminho de procura.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Erro: Não é possível alocar memória.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Posição de escrita errada\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permissão negada\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Memória esgotada\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Não pode copiar o perfil: Mau endereço de memória\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "O perfil não está em conformidade com o protocolo\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "O perfil não coincide com a assinatura\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Versão de perfil não suportada pelo módulo Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "O perfil já existe\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "O perfil não existe\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "Permissão negada; tentar carregar um perfil enquando confinado?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Erro desconhecido (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Não é possível adicionar \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Não é possível substituir \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Não é possível remover \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Não é possível escrever em stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Incapaz de escrever no ficheiro de saída\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERÇÃO: Opção inválida: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Adição bem sucedida para \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Substituição bem sucedida para \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Remoção bem sucedida para \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PÂNICO buffer de incremento errado %p pos %p ext %p tamanho %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "regras de perfil %s na rede não impostas\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Tipo de padrão desconhecido\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Não é possível abrir %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Erro de Alocação de Memória. Não é possível remover ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Erro de Alocação de Memória. Não é possível remover %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "não é possível criar área de trabalho\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "não é possível serializar o perfil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Não é possível escrever a entrada completa de perfil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: Incapaz de escrever a entrada inteira de perfil na cache\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Não foi possível abrir '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat falhou para '%s'" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir falhou '%s'" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat falhou para '%s'" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Não pode abrir '%s' em '%s'" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Encontrado caracter inesperado: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Encontrado caracter inesperado: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Avisos de %s (%s%sline %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Não é possível alocar memória para o ponto de montagem de subdomainbase\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Aviso: não é possível encontrar um fs adequado em %s, estará ele montado?\n" "Utilize --subdomainfs para sobrepor.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Lamento. Necessita de privilégios de root para executar este programa.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Aviso! Definiu este programa como setuid root.\n" "Qualquer utilizador que possa executar este programa pode actualizar os seus " "perfis AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Erro: Não é possível ler o perfil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Erro de alocação de memória." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Foram encontrados erros no ficheiro. A interromper.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Os qualificadores maiúsculos \"RWLIMX\" estão obsoletos, por isso converta-" "os para minúsculas\n" "Para mais detalhes consulte a página de manual do apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "As permissões 'a' e 'w' em conflito são mutuamente exclusivas." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Qualificador de execução 'i' inválido, qualificador em conflito já " "especificado" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "O qualificador de execução não constrangido (%c%c) permite a passagem de " "variáveis de ambiente perigosas para o processo não confinado; digite 'man 5 " "apparmor.d' para mais detalhes.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificador de execução '%c' inválido, qualificador em conflito já " "especificado" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Qualificador de execução '%c%c' inválido, qualificador em conflito já " "especificado" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Interno: entrada com caracter de modo '%c' inesperado" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Erro interno gerou permissão inválida 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Erro de interpretação AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Não é possível intercalar as entradas. Memória Esgotada\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Anexo de perfil deve começar com '/'." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Falha na criação da alcunha %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "A marca 'debug' de perfil já não é válida." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Marca de perfil inválida: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Asserção: `rule' devolveu NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Modo inválido, em regras de negação, o 'x' deve ser precedido por um " "qualificador de execução 'i', 'p' ou 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Modo inválido, 'x' deve ser precedido por um qualificador de execução 'i', " "'p', 'c' ou 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Modo inválido, 'x' deve ser precedido por um qualificador de execução 'i', " "'p' ou 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Asserção: `network_rule' ' devolveu protocolo inválido." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Asserção: `change_profile' devolveu NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Asserção: 'hat rule' devolveu NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Asserção: `local_profile rule' devolveu NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Variável booleana %s não definida em expressão condicional" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "Regra insegura por falta de permissões de execução" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subconjunto pode apenas ser utilizado com regras de ligação." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "permissões de link e exec conflictuam numa regra de ficheiro utilizando ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "permissões de link não são permitidas numa transição de perfil nomeada.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "caracter de fim de linha em falta? (entrada: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Entrada de rede inválido." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Capacidade inválida %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: { de abertura ilegal, o encadeamento de agrupamentos não é permitido\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Erro de agrupamento de expressões regulares: Número inválido de itens " "entre {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Erro de agrupamento de expressões regulares: Fecho inválido }, não foi " "encontrado uma } para emparelhar\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Erro de agrupamento de expressões regulares: Agrupamento ou classe de " "caracter não encerrado, espera-se uma } a fechar\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Detectado um excesso no buffer interno de %d caracteres\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Não foi possível analisar a linha de entrada '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ERRO falhou a carga das regras de fusão do perfil %s\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ERRO perfil %s contém elementos de política não utilizáveis com este " "kernel:\n" "\t'*', '?', gamas de caracteres e alternações não são permitidos.\t'**' pode " "apenas ser utilizado no fim de uma regra.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "ERRO ao processar regexs para o perfil '%s', falhou a carga\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "ERRO ao expandir as variáveis para o perfil '%s', falhou a carga\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "ERRO ao adicionar a regra de acesso 'hat' para o perfil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERRO no perfil %s, falhou o carregamento\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" "%s: Foram encontrados erros durante o pós-processamento. A interromper.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Foram encontrados erros durante o pós-processamento das expressões " "regulares (regex). A interromper.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" "%s: Foram encontrados erros durante o pós-processamento. A interromper.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Foram encontrados erros no pós-processamento de combinação de regras. A " "interromper.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Sem memória" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Não foi possível criar diretório de cache: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Não foi possível atualizar o diretório da cache: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/tr.po0000644000175000017500000005146112654035202014111 0ustar jjjj# Turkish message file for YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2002 SuSE Linux AG. # Copyright (C) 1999, 2000, 2001 SuSE GmbH. # Görkem Çetin , 1999, 2000. # Mehmet Mıdık , 2000. # Metin Oral , 2001. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:41+0000\n" "Last-Translator: Ömer Kehri \n" "Language-Team: turkish \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: tr\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Hata: Yetersiz bellek.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Hata: %s temel dizini bir dizin deÄŸil, atlanıyor.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Hata: %s dizini arama yollarına eklenemedi.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Hata: Bellek tahsis edilemedi.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Hatalı yazma pozisyonu\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Ä°zin verilmedi\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Yetersiz bellek\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil protokole uymuyor\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil imzası tutmuyor\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profil sürümü Apparmor modülü tarafından desteklenmiyor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil zaten mevcut\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil mevcut deÄŸil\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" eklenemedi. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" deÄŸiÅŸtirilemedi. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" silinemedi. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdout'a yazılamadı.\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Geçersiz seçenek: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\" için ekleme baÅŸarılı oldu.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" için deÄŸiÅŸtirme baÅŸarılı oldu.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" için silme baÅŸarılı oldu.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANÄ°K hatalı arttırma arabelleÄŸi %p pozisyon %p ext %p boyut %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s açılamadı - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "çalışma alanı oluÅŸturulamadı\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "%s profili seri hale getirilemedi\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Profil girdisinin tamamı yazılamadı\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Beklenmeyen karakter bulundu: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: subdomainbase baÄŸlantı noktası için bellek ayrılamadı\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Bu programı çalıştırabilmek için root yetkilerine ihtiyacınız var.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Uyarı! Bu programın setuid deÄŸeri root olarak ayarlanmış.\n" "Bu programı çalıştıracak herkes AppArmor profillerinizi deÄŸiÅŸtirebilir.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Hata: %s profili okunamadı: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Bellek ayırma hatası." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Dosyada hatalar bulundu. Durduruluyor.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Büyük harfli niteleyiciler \"RWLIMX\" yakında eskiyecektir, bunları küçük " "harfe çevirin\n" "Ayrıntılar için apparmor.d(5) manual sayfasına bakın.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Çalıştırma niteleyicisi 'i' geçersiz, çakışan niteleyici zaten belirtilmiÅŸ" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Çalıştırma niteleyicisi '%c' geçersiz, çakışan niteleyici zaten belirtilmiÅŸ" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Dahili: girdide beklenmeyen mod karakteri '%c'" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor inceleyici hatası: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Girdiler birleÅŸtirilemiyor. Yetersiz bellek\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `rule' NULL döndürdü." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Geçersiz mod; 'x', çalıştırma deÄŸiÅŸkenleri 'i', 'p' ya da 'u'dan sonra " "gelmelidir." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: `hat rule' NULL döndürdü." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "If deyimi içinde ayarlanmamış boolean deÄŸiÅŸkeni %s" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "eksik satır sonu karakteri? (girdi: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Kural dışı açık {, iç içe konan gruplamalara izin verilmez\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex gruplama hatası: {} içinde geçersiz öğe sayısı\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex gruplama hatası: Geçersiz kapama }, karşılığı olan bir { " "bulunamadı\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex gruplama hatası: Kapatılmamış gruplama ya da karakter sınıfı, " "kapama karakteri } bekleniyor\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Dahili ara bellek taÅŸması saptandı, %d karakter aşıldı\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: GiriÅŸ satırı '%s' incelenemedi\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" "HATA: %s profilinin kuralları birleÅŸtirilemedi, yükleme baÅŸarısız oldu\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "HATA: %s profili bu kernel ile kullanılamayacak bazı ilke öğeleri içeriyor:\n" "\t'*', '?', karakter aralıkları ve sırayla birbirini izlemelere izin " "verilmiyor.\n" "\t'**' sadece bir kuralın sonunda kullanılabilir.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "HATA: %s profilinin regex'leri iÅŸlenemedi, yükleme baÅŸarısız oldu\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "HATA: %s profili için deÄŸiÅŸkenler geniÅŸletilemedi, yükleme baÅŸarısız oldu\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "HATA: %s profili, yükleme baÅŸarısız oldu\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Regex sonrası iÅŸlemlerde hata bulundu. Durduruluyor.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Kural birleÅŸtirme sonrası iÅŸlemlerde hata bulundu. Durduruluyor.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/bn.po0000644000175000017500000005154112654035202014062 0ustar jjjjmsgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 01:37+0000\n" "Last-Translator: Priyavert \n" "Language-Team: AgreeYa Solutions \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: bn\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "লেখার খারাপ অবসà§à¦¥à¦¾à¦¨\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "অনà§à¦®à¦¤à¦¿ অসà§à¦¬à§€à¦•à¦¾à¦° করা হয়েছে\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "সà§à¦®à§ƒà¦¤à¦¿ পরিপূরà§à¦£\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "পà§à¦°à§‹à¦«à¦¾à¦‡à¦² পà§à¦°à§‹à¦Ÿà§‹à¦•à¦² মেনে চলে না\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "পà§à¦°à§‹à¦«à¦¾à¦‡à¦² সà§à¦¬à¦¾à¦•à§à¦·à¦°à§‡à¦° সাথে মেলে না\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "পà§à¦°à§‹à¦«à¦¾à¦‡à¦² ইতোমধà§à¦¯à§‡à¦‡ বিদà§à¦¯à¦®à¦¾à¦¨\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "পà§à¦°à§‹à¦«à¦¾à¦‡à¦²à§‡à¦° অসà§à¦¤à¦¿à¦¤à§à¦¬ নেই\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" যোগ করতে পারে নি। " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" পà§à¦°à¦¤à¦¿à¦¸à§à¦¥à¦¾à¦ªà¦¨ করতে পারে নি। " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" অপসারণ করতে পারে নি। " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdout ঠলিখতে অকà§à¦·à¦®\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: অবৈধ বিকলà§à¦ª: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\" à¦à¦° কà§à¦·à§‡à¦¤à§à¦°à§‡ যোগ করা সফল হয়েছে।\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" à¦à¦° কà§à¦·à§‡à¦¤à§à¦°à§‡ পà§à¦°à¦¤à¦¿à¦¸à§à¦¥à¦¾à¦ªà¦¨ সফল হয়েছে।\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\"à¦à¦° কà§à¦·à§‡à¦¤à§à¦°à§‡ অপসারণ সফল হয়েছে।\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC খারাপ ইনকà§à¦°à¦¿à¦®à§‡à¦¨à§à¦Ÿ বাফার %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s খà§à¦²à¦¤à§‡ পারে নি - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "কাজের à¦à¦²à¦¾à¦•à¦¾ তৈরি করতে পারে নি\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "%s পà§à¦°à§‹à¦«à¦¾à¦‡à¦² কà§à¦°à¦®à¦¿à¦• করতে পারে নি\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: সমগà§à¦° পà§à¦°à§‹à¦«à¦¾à¦‡à¦² à¦à¦¨à¦Ÿà§à¦°à¦¿ লিখতে অকà§à¦·à¦®\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "অপà§à¦°à¦¤à§à¦¯à¦¾à¦¶à¦¿à¦¤ অকà§à¦·à¦° পাওয়া গেছে: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: সাবডোমেনবেস মাউনà§à¦Ÿ পয়েনà§à¦Ÿà§‡à¦° জনà§à¦¯à§‡ সà§à¦®à§ƒà¦¤à¦¿ বনà§à¦Ÿà¦¨ করতে পারে নি\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "সà§à¦®à§ƒà¦¤à¦¿ বনà§à¦Ÿà¦¨à§‡ তà§à¦°à§à¦Ÿà¦¿à¥¤" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: ফাইলে তà§à¦°à§à¦Ÿà¦¿ পাওয়া গেছে। বাতিল করছে।\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Exec কোয়ালিফায়ার 'i' অবৈধ, বিবাদমান কোয়ালিফায়ার ইতোমধà§à¦¯à§‡à¦‡ বিদà§à¦¯à¦®à¦¾à¦¨" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "à¦à¦¨à¦Ÿà§à¦°à¦¿à¦—à§à¦²à¦¿ à¦à¦•à§€à¦­à§‚ত করতে পারে নি।সà§à¦®à§ƒà¦¤à¦¿ পরিপূরà§à¦£\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "দৃৠঘোষণা: `rule' NULL ফেরত পাঠিয়েছে।" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "দৃৠঘোষণা: `hat rule' NULL ফেরত পাঠিয়েছে।" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "লাইন সমাপà§à¦¤à¦¿à¦° অকà§à¦·à¦° অনà§à¦ªà¦¸à§à¦¥à¦¿à¦¤? (à¦à¦¨à¦Ÿà§à¦°à¦¿: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: অবৈধ খোলা {, নেসà§à¦Ÿà¦¿à¦‚ গà§à¦°à§à¦ªà¦¿à¦‚য়ের অনà§à¦®à¦¤à¦¿ নেই\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex দলবদà§à¦§à¦•à¦°à¦£à§‡à¦° তà§à¦°à§à¦Ÿà¦¿: {} à¦à¦° মধà§à¦¯à§‡ অবৈধ সংখà§à¦¯à¦• বসà§à¦¤à§\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex দলবদà§à¦§à¦•à¦°à¦£à§‡à¦° তà§à¦°à§à¦Ÿà¦¿: অবৈধ বনà§à¦§ }, কোন মিলযà§à¦•à§à¦¤ খোলা{ পাওয়া যায় নি\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: অভà§à¦¯à¦¨à§à¦¤à¦°à§€à¦£ বাফার অতিপà§à¦°à¦¬à¦¾à¦¹à§‡à¦° সনà§à¦§à¦¾à¦¨ পাওয়া গেছে, %d গà§à¦²à¦¿ অকà§à¦·à¦° বেশি\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: ইনপà§à¦Ÿ ফাইল '%s' পারà§à¦¸ করতে অকà§à¦·à¦®\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "%s পà§à¦°à§‹à¦«à¦¾à¦‡à¦²à§‡ তà§à¦°à§à¦Ÿà¦¿ আছে, চালাতে বà§à¦¯à¦°à§à¦¥ হয়েছে\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: পোসà§à¦Ÿà¦ªà§à¦°à¦¸à§‡à¦¸à¦¿à¦‚ নিয়মাবলী à¦à¦•à§€à¦­à§‚ত করায় তà§à¦°à§à¦Ÿà¦¿ পাওয়া গেছে। বাতিল করছে।\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/nb.po0000644000175000017500000005371112654035202014063 0ustar jjjj# translation of apparmor-parser.po to norsk bokmÃ¥l # translation of apparmor-parser.po to # translation of subdomain-parser.po to # This file is distributed under the same license as the PACKAGE package. # Copyright (C) YEAR Immunix, Inc. # # Olav Pettershagen , 2005, 2007. # Rune Nordbøe Skillingstad , 2007. # Olav P. , 2008. # Olav Pettershagen , 2008. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:17+0000\n" "Last-Translator: Olav Pettershagen \n" "Language-Team: norsk bokmÃ¥l\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: nb\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Feil: For lite minne.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Feil: basedir %s er ikke en katalog, hopper over.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Feil: Kan ikke legge katalogen %s til søkesti\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Feil: Kunne ikke tilordne minne\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Ugyldig lagringsposisjon\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Manglende rettigheter\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "For lite minne\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profilen samsvarer ikke med protokollen\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profilen samsvarer ikke med signaturen\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profilversjonen støttes ikke av Apparmor-modulen\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profilen finnes allerede\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profilen finnes ikke\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Kan ikke legge til \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Kan ikke erstatte \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Kan ikke slette \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Kan ikke skrive til stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Ugyldig valg: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Lagt til for \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Erstattet for \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Slettet for \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC ugyldig inkrementbuffer %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Kan ikke Ã¥pne %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Minnetilordningsfeil: Kan ikke fjerne ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Minnetilordningsfeil: Kan ikke fjerne %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Kan ikke opprette arbeidsomrÃ¥de\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "kan ikke serietilordne profilen %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Kan ikke lagre hele profiloppføringen\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Fant uventet tegn: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(nettwork_mode) Fant uventet tegn: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: Kunne ikke tilordne minne for subdomenebasens monteringspunkt\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Advarsel: Kunne ikke finne en egnet fs i %s, er den montert?\n" "Bruk --subdomainfs for Ã¥ overstyre.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Beklager. Dette programmet mÃ¥ kjøres som rot.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Advarsel! Du har definert 'setuid root' for dette programmet.\n" "Alle som kan kjøre dette programmet, kan oppdatere dine AppArmor-profiler.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Feil: Kunne ikke lese profil %s:%s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Minnetilordningsfeil." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Feil funnet i filen. Avbryter.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Valg med store bokstaver \"RWLIMX\" brukes ikke lenger. Konverter til smÃ¥ " "bokstaver.\n" "Se manualsiden apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Conflikt 'a'- and 'w'-tillatelser kan ikke brukes samtidig." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec-valget 'i' er ugyldig. Et annen valg som er i konflikt med dette, er " "allerede spesifisert" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Et ubegrenset exec-argument (%c%c) kan medføre at farlige miljøvariabler " "sendes til den ubegrensede prosessen. Se 'man 5 apparmor.d'.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "Exec-valget '%c' er ugyldig. Et annen valg er allerede spesifisert" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "Kjørevalget '%c%c' er ugyldig. Et annet valg er allerede spesifisert" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Intern feil: Uventet modustegn '%c' angitt" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Intern feil genererte ugyldig rettighet 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Feil under AppArmor-analyse: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Kan ikke samordne oppføringer. For lite minne\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Kunne ikke opprette aliaset %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "valget er ikke lenger gyldig" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Ugyldig profilvalg: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: 'rule' returnerte NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Ugyldig modus, i avvisingsregler mÃ¥ ikke kjørevalgene eller " "komme foran 'x'." #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "Ugyldig modus, 'x' mÃ¥ komme etter kjørevalgt 'i', 'p' eller 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "Ugyldig modus. 'x' mÃ¥ komme etter exec-valget 'i', 'p' eller 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: 'network_rule' returnerte NULL." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: 'change_profile' returnerte NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: 'hat rule' returnerte NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: 'local_profile' returnerte NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Udefinert boolsk variabel %s brukt i if-uttrykk" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "usikker regel uten exec-tillatelser" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "kan bare brukes med lenkeregler" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "Lenke- og kjørerettigheter er i konflikt med en regelfil som bruker" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "Lenkerettigheter er ikke tillatt for en navngitt profiloverføring.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "tegn for linjelslutt mangler? (oppføring: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Ugyldig nettverksoppføring." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Ugyldig egenskap %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Ã…pen { ikke tillatt, nesting-gruppering ikke tillatt\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Regex-grupperingsfeil: Ugyldig antall oppføringer mellom { og }\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex-grupperingsfeil: Ugyldig avsluttende }, ingen initial { funnet\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex-grupperingsfeil: Ã…pen grupperings- eller tegnklasse, lukket " "forventet }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Intern bufferlekkasje registrert, %d tegn overskredet\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Kan ikke analysere kommandolinje '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "FEIL under aktivering av regler for profil %s, kunne ikke laste\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "FEIL Profilen %s inneholder strategielementer som ikke kan brukes med denne " "kjernen:\n" "\t'*', '?', og alternerende elementer er ikke tillatt.\n" "\t'**' kan bare brukes pÃ¥ slutten av en regel.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "FEIL under behandling av regexs for profil %s, kunne ikke laste\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "FEIL under utvidelse av variabler for profil %s, kunne ikke laste\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "FEIL ved oppretting av hat-tilgangsregel for profilen %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "FEIL i profil %s, kunne ikke laste\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Feil funnet under etterbehandling. Avbryter.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Feil funnet under etterbehandling av regex. Avbryter.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Feil funnet under etterbehandling. Avbryter.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Feil funnet under etterbehandling av kombinasjonsregler. Avbryter.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/id.po0000644000175000017500000006211712676660175014101 0ustar jjjj# Indonesian message file for YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2002 SuSE Linux AG. # Copyright (C) 1999-2001 SuSE GmbH. # I Made Wiryana , 1999. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2016-03-29 14:06+0000\n" "Last-Translator: Ari Setyo Wibowo \n" "Language-Team: Indonesian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-03-30 05:13+0000\n" "X-Generator: Launchpad (build 17967)\n" "Language: id\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Kesalahan: Memori tidak cukup.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Kesalahan: basedir %s bukan sebuah direktori, lewati.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Kesalahan: Tidak dapat menambahkan direktori %s ke lokasi pencarian.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Kesalahan: Tidak dapat mengalokasikan memori.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Posisi tulis yang buruk\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Izin ditolak\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Kehabisan memori\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Tidak dapat menyalin profil: Alamat memori yang buruk\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profil tidak sesuai dengan protokol\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profil tidak cocok dengan signature\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Versi profil tidak didukung oleh Apparmor\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil telah ada\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil tidak ada\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "Izin ditolak; coba memuat profil walaupun dibatasi?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Kesalahan tak diketahui (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Tak dapat menambahkan \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Tak dapat menggantikan \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Tak dapat menghapus \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Tak dapat menuliskan ke stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Tak dapat menuliskan ke berkas output\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Pilihan tidak benar: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Penambahan berhasil untuk \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Penggantian berhasil untuk \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Penghapusan berhasil untuk \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC buffer increment yang buruk %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "profil %s aturan jaringan tidak dilaksanakan\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Jenis pola tak diketahui\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Tak dapat membuka %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Kesalahan Alokasi Memori: Tak dapat menghapus ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Kesalahan Alokasi Memori: Tak dapat menghapus %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "tak dapat membuat wilayah kerja\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "tak dapat menyambungkan profil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Tak dapat menulis semua entri profil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: Tak dapat menulis semua entri profil untuk cache\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Tak dapat membuka '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat gagal untuk '%s'" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir gagal '%s'" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat gagal untuk '%s'" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "Tak dapat membuka '%s' di '%s'" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Ditemukan karakter tak diharapkan: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "Deklarasi variabel tidak menerima beberapa koma berturutan" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Ditemukan karakter tak diharapkan: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Peringatan dari %s (%s%sline %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Tak dapat mengalokasikan memori untuk subdomainbase mount point\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Peringatan: tak dapat menemukan fs yang cocok di %s, apakah sudah di-mount?\n" "Gunakan --subdomainfs untuk override.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Maaf. Anda perlu izin root untuk menjalankan program ini.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Peringatan! Anda telah menentukan root untuk setuid program ini.\n" "Siapapun yang dapat menjalankan program ini dapat pula memutakhirkan profil " "AppArmor Anda.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Kesalahan: Tak dapat membaca prodil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Kesalahan alokasi memori." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "Muatan cache berhasil untuk \"%s\".\n" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "Muat kembali cache berhasil untuk \"%s\".\n" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Kesalahan ditemukan di berkas. Membatalkan.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Kualifikasi huruf kapital \"RWLIMX\" telah usang, silakan ubah ke huruf " "kecil\n" "Lihat apparmor.d(5) manpage untuk rinciannya.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Konflik 'a' dan 'w' perms yang saling eksklusif." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Kualifikasi exec 'i' tidak benar, konflik dengan kualifikasi yang sudah " "ditentukan" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Kualifikasi exec tak dibatasi (%c%c) mengixinkan beberapa environment " "variables berbahaya untuk diteruskan ke proses yang tak dibatasi; 'man 5 " "apparmor.d' untuk rinciannya.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Kualifikasi exec '%c' tak benar, konflik dengan kualifikasi yang sudah " "ditentukan" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Kualifikasi exec '%c%c' tak benar, konflik dengan kualifikasi yang sudah " "ditentukan" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Internal: karakter mode tak diharapkan '%c' di input" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Kesalahan internal menghasilkan perm tak benar 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Kesalahan parser AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Tak dapat menggabungkan entri. Kehabisan Memori\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "profil %s: telah menggabungkan aturan %s dengan konflik modifier x\n" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Lampiran profil harus dimulai dengan sebuah '/'." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Nama profil harus dimulai dengan sebuah '/', namespace atau kata kunci " "'profile' atau 'hat'." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Gagal membuat alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "Bendera profil chroot_relative konflik dengan namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "Bendera profil mediate_deleted konflik dengan delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Bendera prodil attach_disconnected konflik dengan no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "Bendera profil chroot_attach konflik dengan chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Bendera profil 'debug' tak lagi benar." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Bendera profil tak benar: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: `rule' mengembalikan NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Mode tak benar, dalam menolak aturan 'x' harus tidak didahului dengan " "kualifikasi exec 'i', 'p', or 'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Mode tak benar, 'x' harus didahului dengan kualifikasi exec 'i', 'p', 'c', " "or 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Mode tak benar, 'x' harus didahului dengan kualifikasi exec 'i', 'p', or 'u'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: `network_rule' mengembalikan protokol tak benar" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: `change_profile' mengembalikan NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: 'hat rule' mengembalikan NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: 'local_profile rule' mengembalikan NULL." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Unset variabel boolean %s digunakan dalam if-expression" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "aturan tak aman kehilangan izin exec" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subset hanya dapat digunakan dengan aturan link." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "link dan exec perms konflik dalam sebuah aturan berkas yang menggunakan ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "link perms tidak diizinkan dalam sebuah transisi profil bernama.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "kehilangan sebuah karakter end of line? (entry: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Entri jaringan tak benar." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Kemampuan tak benar %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "Kesalahan parser AppArmor untuk %s%s%s pada baris %d: %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "Kesalahan parser AppArmor,%s%s baris %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: pembukaan ilegal {, pengelompokan bertumpuk tak diizinkan\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Kesalahan pengelompokan Regex: Angka tak benar dari item-item antara {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Kesalahan pengelompokan Regex: Penutupan tak benar }, tak ada pembukaan " "{ yang cocok terdeteksi\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Kesalahan pengelompokan Regex: Pengelompokan tak tertutup atau kelas " "karakter, mengharapkan penutupan }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Internal buffer overflow terdeteksi, %d karakter terlampaui\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Tak dapat parse baris input '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "%s: Nama profil tak benar '%s' - regular expression yang buruk\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "KESALAHAN menggabungkan aturan untuk profil %s, gagal memuat\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "KESALAHAN profil %s berisi kebijakan elemen yang tak dapat digunakan dengan " "kernel ini:\n" "\t'*', '?', jangkauan karakter, dan alternasi tak diizinkan.\n" "\t'**' hanya boleh digunakan pada akhir aturan.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "KESALAHAN memproses regexs untuk profil %s, gagal memuat\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "KESALAHAN mengembangkan variabel untuk profil %s, gagal memuat\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "KESALAHAN menambahkan aturan akses hat untuk profil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "KESALAHAN di profil %s, gagal memuat\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Kesalahan ditemukan saat postprocessing. Membatalkan.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "%s: Kesalahan ditemukan saat regex postprocess. Membatalkan.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Kesalahan ditemukan saat postprocess. Membatalkan.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Kesalahan ditemukan saat menggabungkan aturan postprocessing. " "Membatalkan.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "Tak dapat memproses termasuk direktori '%s' in '%s'" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "Buffer fitur telah penuh." #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Kehabisan memori" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Tak dapat menciptakan direktori cache: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "Berkas di lokasi direktori cache: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Tak dapat memutakhirkan direktori cache: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "Internal: Karakter mode DBus tak diharapkan '%c' di input" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "Kesalahan internal menghasilkan DBus perm tak benar 0x%x\n" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "awalan menolak tak diizinkan" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "awalan pemilik tak diizinkan" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "awalan pemilik tak diizinkan pada aturan mount" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "awalan pemilik tak diizinkan pada aturan dbus" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "awalan pemilik tak diizinkan pada aturan kemampuan" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "Mount conditional tak benar %s%s" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "aturan mount yang buruk" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "kondisi mount point sedang tak didukung" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "Pivotroot conditional tak benar '%s'" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" "%s: Kesalahan pengelompokan Regex: Penutupan tak benar ], tak ada pembukaan " "[ terdeteksi\n" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "%s: Kesalahan pengelompokan Regex: Tumpukan {} melebihi maksimum\n" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "KESALAHAN memproses aturan policydb untuk profil %s, gagal memuat\n" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "KESALAHAN mengganti alias untuk profil %s, gagal memuat\n" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "%s: Gagal menuliskan %s\n" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" "Kesalahan: Tak dapat membaca profil binary atau berkas cache %s: %s.\n" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "Kesalahan: Tak dapat membaca berkas cache '%s', mengabaikan...\n" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "Internal: karakter mode %s tak diharapkan '%c' di input" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "Kesalahan internal menghasilkan %s perm 0x%x tak benar\n" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "awalan pemilik tak diizinkan pada aturan mount" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "awalan pemilik tak diizinkan pada aturan dbus" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "awalan pemilik tak diizinkan pada aturan signal" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "awalan pemilik tak diizinkan pada aturan ptrace" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "awalan pemilik tak diizinkan pada aturan unix" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "awalan pemilik tak diizinkan pada aturan kemampuan" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "aturan dbus: Kelompok conditional tak benar %s=()" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "aturan unix: Kelompok conditional tak benar %s=()" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "%s: Kesalahan Regex: membuntuti karakter escape '\\'\n" apparmor-2.11.0/parser/po/gu.po0000644000175000017500000005131312654035202014073 0ustar jjjjmsgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:03+0000\n" "Last-Translator: Priyavert \n" "Language-Team: AgreeYa Solutions\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: gu\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "અયોગà«àª¯ લેખન સà«àª¥àª¿àª¤àª¿\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "પરવાનગી નાકબૂલ\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "અપૂરતી મેમરી\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "પà«àª°à«‹àª«àª¾àªˆàª² પà«àª°à«‹àªŸà«‹àª•à«‹àª² સાથે બંધબેસતો નથી\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "પà«àª°à«‹àª«àª¾àªˆàª² સહી સાથે અનà«àª°à«‚પ નથી\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "પà«àª°à«‹àª«àª¾àªˆàª² અસà«àª¤àª¿àª¤à«àªµàª®àª¾àª‚ છે\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "પà«àª°à«‹àª«àª¾àªˆàª² અસà«àª¤àª¿àª¤à«àªµàª®àª¾àª‚ નથી\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: ઉમેરી શકાતà«àª‚ નથી \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: બદલી શકાતà«àª‚ નથી \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: દૂર કરી શકાતà«àª‚ નથી \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdout પર શકાતà«àª‚ નથી\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: આગà«àª°àª¹ રાખો: અયોગà«àª¯ વિકલà«àªª: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "ઉમેરવાનà«àª‚ સફળ થયà«àª‚ છે \"%s\" માટે.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "બદલવાનà«àª‚ સફળ થયà«àª‚ છે \"%s\" માટે.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "દૂર કરવાનà«àª‚ સફળ થયà«àª‚ છે \"%s\" માટે.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "ભયભીત અયોગà«àª¯ ઈનà«àª•à«àª°à«€àª®à«‡àª¨à«àªŸ બફર %p pos %p ext %p સાઈઠ%d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "ખà«àª²à«€ શકà«àª¤à«àª‚ નથી %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "કારà«àª¯àª¨à«‹ વિસà«àª¤àª¾àª° બનાવી શકાતો નથી\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "પà«àª°à«‹àª«àª¾àªˆàª² પà«àª°àª•àª¾àª¶àª¿àª¤ થઈ શકતો નથી %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: સંપૂરà«àª£ પà«àª°à«‹àª«àª¾àªˆàª² àªàª¨à«àªŸà«àª°à«€ લખી શકાતી નથી.\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "અણધારà«àª¯à«‹ વરà«àª£ મળà«àª¯à«‹: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: સબડોમેઈનબેઠમાઉનà«àªŸ પોઈનà«àªŸ માટે મેમરી ફાળવી શકાઈ નહીં\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "મેમરી ફાળવવામાં ભૂલ." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: ફાઈલમાં ભૂલો મળી છે. અટકાવાયà«àª‚ છે.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Exec કà«àªµà«‹àª²à«€àª«àª¾àª¯àª° 'i' અયોગà«àª¯ છે, વિરોધ કરતો કà«àªµà«‹àª²à«€àª«àª¾àª¯àª° જણાવી દેવામાં આવà«àª¯à«‹ જ છે" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "àªàª¨à«àªŸà«àª°à«€àª“ ભળી શકાઈ નથી. અપૂરતી મેમરી\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "આગà«àª°àª¹ રાખો: `રૂલ' પાછો લાવà«àª¯à«‹ નલ NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "આગà«àª°àª¹ રાખો: `હેટ રૂલ' પાછો લાવà«àª¯à«‹ નલ NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "લાઈન પૂરી થયા પછીનો વરà«àª£ ખૂટે છે? (àªàª¨à«àªŸà«àª°à«€: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: ગેરકાયદેસર ઓપન {, નેસà«àªŸàª¿àª‚ગ ગà«àª°à«àªªà«€àª‚ગ ને મંજૂરી નથી\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex ગà«àª°à«àªªà«€àª‚ગ ભૂલ: {} ની વચà«àªšà«‡ અયોગà«àª¯ સંખà«àª¯àª¾àª¨à«€ બાબતો\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex ગà«àª°à«àªªà«€àª‚ગ ભૂલ: અયોગà«àª¯ બંધ }, તેને અનà«àª°à«‚પ કોઈ ઓપન { નà«àª¥à«€ મળતà«àª‚\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: આંતરિક બફર ઉભરાઈ ગયેલà«àª‚ મળે છે, %d વરà«àª£à«‹ ઓળંગાઈ ગયા છે\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: ઈનà«àªªà«àªŸ લાઈન '%s' પારà«àª¸ કરી શકાતી નથી\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "પà«àª°à«‹àª«àª¾àªˆàª² %s માં ભૂલ, લઈ આવવાનà«àª‚ નિષà«àª«àª³\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "%s: પોસà«àªŸàªªà«àª°à«‹àª¸à«‡àª¸à«€àª‚ગ નિયમો ભેગાં કરતાં ભૂલો મળી છે. અટકાવાયà«àª‚ છે.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/sq.po0000644000175000017500000004334512654035202014111 0ustar jjjj# Albanian translation for apparmor # Copyright (c) 2013 Rosetta Contributors and Canonical Ltd 2013 # This file is distributed under the same license as the apparmor package. # FIRST AUTHOR , 2013. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 23:20+0000\n" "Last-Translator: Vilson Gjeci \n" "Language-Team: Albanian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: sq\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Leja u mohua\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Nuk ka më kujtesë\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "Nuk mund të hapim '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/cy.po0000644000175000017500000004317312654035202014100 0ustar jjjj# Welsh message file for YaST2 (@memory@). # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2003 SuSE Linux AG. # Kevin Donnelly , 2003. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:14+0000\n" "Last-Translator: Kevin Donnelly \n" "Language-Team: Welsh \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: cy\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/de.po0000644000175000017500000006505012654035202014053 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2015-09-05 20:55+0000\n" "Last-Translator: Tobias Bannert \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: de\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Fehler: Kein Speicher vorhanden.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Fehler: basedir »%s« ist kein Verzeichnis - es wird übersprungen.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Fehler: Verzeichnis »%s« konnte nicht zu Suchpfad hinzugefügt werden.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Fehler: Es konnte kein Speicher zugeordnet werden.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Ungültige Schreibposition\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Zugriff verweigert\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Kein Speicher vorhanden\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "Profil konnte nicht kopiert werden: Keine Speicheradresse\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Das Profil entspricht nicht dem Protokoll\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Das Profil stimmt nicht mit der Signatur überein\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profilversion wird vom Apparmor-Modul nicht unterstützt\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profil ist bereits vorhanden\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profil ist nicht vorhanden\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" "Zugriff verweigert! Haben Sie versucht ein Profil zu laden, während Sie " "eingeschränkt waren?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Unbekannter Fehler (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Hinzufügen von »%s« nicht möglich. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: »%s« kann nicht ersetzt werden. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: »%s« kann nicht entfernt werden. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Schreiben in Standardausgabe nicht möglich\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: Schreiben in Ausgabedatei nicht möglich\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: Ungültige Option: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Hinzufügen für »%s« erfolgreich.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Ersetzungsvorgang für »%s« erfolgreich.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Entfernen für »%s« erfolgreich.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIC - ungültiger Inkrement-Puffer %p Position %p Erweiterung %p Größe %d " "Auflösung %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "Netzwerkregeln für Profil %s werden nicht erzwungen\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Unbekannter Mustertyp\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s kann nicht geöffnet werden - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Speicherzuordnungsfehler: ^%s kann nicht entfernt werden\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Speicherzuordnungsfehler: %s:%s kann nicht entfernt werden." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "Arbeitsbereich kann nicht erstellt werden\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "Serialisierung von Profil %s nicht möglich\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: Profileintrag kann nicht geschrieben werden\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" "%s: Schreiben des gesamten Profileintrags in den Puffer nicht möglich\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "»%s« konnte nicht geöffnet werden" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat fehlgeschlagen für »%s«" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir fehlgeschlagen für »%s«" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "stat fehlgeschlagen für »%s«" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "»%s« konnte nicht in »%s« geöffnet werden" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Unerwartetes Zeichen gefunden: »%s«" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "Variablendeklarationen dürfen nicht mit Kommata enden" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Unerwartetes Zeichen gefunden: »%s«" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "Warnung aus %s (%s%sZeile %d): %s" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: Dem Einhängepunkt der Unterdomänenbasis konnte kein Speicher zugeordnet " "werden\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Achtung: Es konnte kein geeignetes Dateisystem in »%s« gefunden werden. Ist " "es eingehängt?\n" "Verwenden Sie --subdomainfs, um es außer Kraft zu setzen.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "»%s«: Sie benötigen Systemverwalterrechte zum Ausführen dieses Programms.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: Achtung! Sie haben für dieses Programm »setuid root« festgelegt.\n" "Alle Personen, die dieses Programm ausführen, können Ihre AppArmor-Profile " "aktualisieren.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Fehler: Profil »%s« konnte nicht gelesen werden: »%s«.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Speicherzuordnungsfehler." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "Zwischengespeichertes Laden für »%s« erfolgreich.\n" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "Zwischengespeichertes Neuladen für »%s« erfolgreich.\n" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" "%s: In der Datei wurde ein Fehler gefunden. Der Vorgang wird abgebrochen.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Die groß geschriebenen Qualifier »RWLIMX« sind veraltet, bitte nutzen Sie " "klein geschriebene.\n" "Weitere Informationen auf der Handbuchseite apparmor.d(5).\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Die Parameter »a« und »w« schließen sich gegenseitig aus." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "Ausführungskennzeichner »i« ist ungültig, ein Kennzeichner, mit dem ein " "Konflikt besteht, wurde bereits angegeben." #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "Nicht angebundener exec-Qualifier (%c%c) ermöglicht es einigen gefährlichen " "Umgebungsvariablen, an den unangebundenen Prozess übergeben zu werden; " "Einzelheiten mit »man 5 apparmor.d«.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "Ausführungskennzeichner »%c« ist ungültig, ein Kennzeichner, mit dem ein " "Konflikt besteht, wurde bereits angegeben." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "Ausführungskennzeichner »%c%c« ist ungültig, ein Kennzeichner, mit dem ein " "Konflikt besteht, wurde bereits angegeben." #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Intern: Unerwartetes Moduszeichen »%c« in der Eingabe" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Interner Fehler erzeugte ungültige Zugriffsrechte 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmor-Analysefehler: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" "Einträge konnten nicht zusammengeführt werden. Kein Speicher vorhanden\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" "Profil %s: enthält zusammengeführte Regel %s mit in Konflikt stehenden x-" "Modifizierern\n" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "Profilanhang muss mit einem »/« beginnen." #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" "Profilnamen müssen mit einem »/«, Namensraum oder dem Schlüsselwort " "»profile« oder »hat« beginnen." #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Alias %s → %s konnte nicht erstellt werden\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" "Profil-Marker chroot_relative steht in Konflikt mit namespace_relative" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "Profil-Marker mediate_deleted steht in Konflikt mit delegate_deleted" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" "Profil-Marker attach_disconnected steht in Konflikt mit " "no_attach_disconnected" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "Profil-Marker chroot_attach steht in Konflikt mit chroot_no_attach" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "Profil-Marker »debug« ist nicht mehr gültig." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Ungültiger Profil-Marker: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Assert: Für »rule« wurde NULL zurückgegeben." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "Ungültiger Modus, in den Verweigernregeln darf vor »x« keiner der " "Ausführungskennzeichner »i«, »p« oder »u« stehen" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "Ungültiger Modus, in Verbotsregeln muss vor »x« einer der exec-Qualifier " "»i«, »p«, »c« oder »u« stehen" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Ungültiger Modus, in Verbotsregeln muss vor »x« einer der exec-Qualifier " "»i«, »p« oder »u« stehen" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Assert: Für »network_rule« wurde NULL zurückgegeben." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Assert: Für »change_profile« wurde NULL zurückgegeben." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Assert: Für »hat rule« wurde NULL zurückgegeben." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Assert: Für »local_profile rule« wurde NULL zurückgegeben." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "In Bedingungssatz verwendete Boolsche-Variable »%s« deaktivieren" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "Fehlende Ausführungsrechte bei unsicherer Regel" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "subset kann nur mit Link-Regeln verwendet werden." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "Verknüpfungs- und Ausführungsberechtigungen stehen in Konflikt mit einer " "Dateiregel, in der »->« verwendet wird" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "Verknüpfungsberechtigungen sind bei einem benannten Profilübergang nicht " "erlaubt.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "Fehlt ein Zeilenumbruch? (Eintrag: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Ungültiger Netzwerkeintrag." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Ungültige Fähigkeit %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "AppArmor-Analysefehler für %s%s%s in Zeile %d: %s\n" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "AppArmor-Analysefehler,%s%s Zeile %d: %s\n" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" "%s: Öffnen mit { ungültig, verschachtelte Gruppierungen sind nicht zulässig\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: Regex-Gruppierungsfehler: Ungültige Anzahl an Einträgen zwischen {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex-Gruppierungsfehler: Ungültiges schließendes Zeichen }, kein " "passendes öffnendes Zeichen { gefunden\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: Regex-Gruppierungsfehler: Nicht abgeschlossene Gruppierung oder " "Zeichenklasse, abschließende } erwartet\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: Interner Pufferüberlauf erkannt, %d Zeichen überschritten\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: Eingabezeile »%s« kann nicht analysiert werden\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "%s: Ungültiger Profilname »%s« – Fehlerhafter regulärer Ausdruck\n" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "FEHLER Vereinigungsregeln für Profil »%s«, Laden gescheitert\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "FEHLER Das Profil %s enthält Richtlinienelemente, die mit diesem Kernel " "nicht verwendet werden können:\n" "\t»*«, »?«, Zeichenbereiche und alternierende Sprachsetzung sind nicht " "erlaubt.\n" "\t»**« kann am Ende einer Regel verwendet werden.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "FEHLER Verarbeitung der Regexs für Profil »%s«, Laden gescheitert\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "FEHLER beim Erweitern der Variablen für Profil »%s«, Laden gescheitert\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "FEHLER Hinzufügen von »hat«-Zugriffsregel für Profil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "FEHLER in Profil %s, konnte nicht geladen werden\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: Fehler bei der Nachbearbeitung. Vorgang wird abgebrochen.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: Während der Nachverarbeitung der regulären Ausdrücke sind Fehler " "aufgetreten. Vorgang wird abgebrochen.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: Fehler bei der Nachbearbeitung. Vorgang wird abgebrochen.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: Beim Kombinieren von Regeln in der Nachverarbeitung sind Fehler " "aufgetreten. Der Vorgang wird abgebrochen.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" "Das enthaltene Verzeichnis »%s« in »%s« kann nicht verarbeitet werden" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "Funktionspuffer ist voll." #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "Nicht genug Speicher" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "Pufferverzeichnis kann nicht erstellt werden: %s\n" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "Datei im Pufferverzeichnisort: %s\n" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "Pufferverzeichnis kann nicht aktualisiert werden: %s\n" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "Intern: Unerwartetes D-Bus-Moduszeichen »%c« in der Eingabe" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "Interner Fehler hat ungültige D-Bus-Zugriffsrechte 0x%x erstellt\n" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "Verweigernpräfix nicht erlaubt" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "Eigentümerpräfix nicht erlaubt" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "Eigentümerpräfix nicht bei Einhängeregeln erlauben" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "Eigentümerpräfix nicht bei D-Bus-Regeln erlauben" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "Eigentümerpräfix nicht bei Fähigkeitsregeln erlauben" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "Ungültige Einhängebedingung %s%s" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "Ungültige Einhängeregel" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "Einhängepunktbedingungen werden derzeit nicht unterstützt" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "Ungültige pivotroot-Bedingung »%s«" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" "%s: Regex-Gruppierungsfehler: Ungültiges schließendes Zeichen ], kein " "passendes öffnendes Zeichen [ gefunden\n" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" "%s: Regex-Gruppierungsfehler: maximale Verschachtelung von {} überschritten\n" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" "FEHLER beim Verarbeiten der policydb-Regeln für das Profil %s. Das Laden ist " "fehlgeschlagen.\n" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" "FEHLER beim ersetzen der Aliasse für Profil %s. Das Laden ist " "fehlgeschlagen\n" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "%s: Nicht in der Lage %s zu schreiben\n" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" "Fehler: Binär- oder Zwischenspeicherdatei kann nicht gelesen werden %s: %s.\n" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" "Fehler: Pufferdatei kann nicht gelesen werden »%s« - es wird übersprungen …\n" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "Intern: Unerwartetes %s-Moduszeichen »%c« in der Eingabe" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "Interner Fehler hat ungültige %s-Zugriffsrechte 0x%x erstellt\n" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "Eigentümerpräfix ist nicht bei Einhängeregeln erlaubt" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "Eigentümerpräfix ist nicht bei D-Bus-Regeln erlaubt" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "Eigentümerpräfix ist nicht bei Signalregeln erlaubt" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "Eigentümerpräfix ist nicht bei ptrace-Regeln erlaubt" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "Eigentümerpräfix ist nicht bei UNIX-Regeln erlaubt" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "Eigentümerpräfix ist nicht bei Fähigkeitsregeln erlaubt" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "D-Bus-Regel: ungültige Bedingungsgruppe %s=()" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "UNIX-Regel: ungültige Bedingungsgruppe %s=()" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" "%s: Fehler im regulären Ausdruck: Schrägstrich »\\« ist ein " "Ausschlusszeichen\n" apparmor-2.11.0/parser/po/lt.po0000644000175000017500000004520712654035202014104 0ustar jjjj# translation of apparmor-parser.po to Lietuvių # Copyright (C) 2005 SUSE Linux Products GmbH. # Copyright (C) 2002 SuSE Linux AG. # Copyright (C) 2000, 2001 SuSE GmbH. # Jonas Gocentas , 2001. # Linas Spraunius , 2000. # Andrius Å tikonas , 2006. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 03:03+0000\n" "Last-Translator: Andrius Å tikonas \n" "Language-Team: Lietuvių \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: lt\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Klaida: nepakanka atminties.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Klaida: nepavyksta pridÄ—ti aplanko %s į paieÅ¡kos keliÄ….\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Klaida: nepavyksta paskirstyti atminies.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Bloga raÅ¡ymo pozicija\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "PriÄ—jimas uždraustas\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Nepakanka atminties\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profilis neatitinka paraÅ¡o\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Apparmor modulis nepalaiko profilio versijos\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profilis jau egzistuoja\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profilis neegzistuoja\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: Nepavyksta pridÄ—ti \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: Nepavyksta pakeisti \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: Nepavyksta paÅ¡alinti \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: Nepavyksta raÅ¡yti į stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "Nepavyksta atverti %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Rastas netikÄ—tas simbolis: „%s“" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Apgailestaujame. Kad paleistumÄ—te Å¡iÄ… programÄ…, jums reikia root " "privilegijų.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Klaida: nepavyksta nuskaityti profilio %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Atminties iÅ¡skyrimo klaida." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: Faile rasta klaidų. Nutraukiama.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Nepavyksta apjungti įrašų. Nepakanka atminties\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: nepavyksta iÅ¡nagrinÄ—ti įvesties eilutÄ—s „%s“\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "KLAIDA profilyje %s, nepavyko įkelti\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/sk.po0000644000175000017500000004315612654035202014103 0ustar jjjj# translation of CheckHardware.po to Slovak # Copyright (C) 2003 Free Software Foundation, Inc. # Stanislav Visnovsky , 2003. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-14 22:30+0000\n" "Last-Translator: Stanislav Visnovsky \n" "Language-Team: Slovak \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: sk\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "" #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "" #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "" #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "" #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/es.po0000644000175000017500000005625112654035202014075 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-26 03:48+0000\n" "Last-Translator: Monkey \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: es\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Error: memoria insuficiente.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Error: el directorio base %s no es un directorio. Se va a omitir.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" "Error: no se ha podido añadir el directorio %s a la vía de búsqueda.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Error: no es posible asignar memoria.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "Posición de escritura incorrecta\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Permiso denegado\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Memoria agotada\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "No se puede copiar el perfil. Dirección de memoria incorrecta\n" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "El perfil no se ajusta al protocolo\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "El perfil no coincide con la firma\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "La versión del perfil no se admite en el módulo de Apparmor.\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "El perfil ya existe\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "El perfil no existe\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" "Permiso denegado. ¿Intentando cargar un perfil mientras estaba confinado?\n" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "Error desconocido (%d): %s\n" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: no es posible añadir \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: no es posible sustituir \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: no es posible eliminar \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: no es posible escribir en stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "%s: imposible escribir en el archivo de salida\n" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: AFIRMACIÓN: Opción no válida: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "Adición correcta de \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "Sustitución correcta de \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "Eliminación correcta de \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIC: incremento de buffer incorrecto; pos %p; ext %p; tamaño %p; res %d " "%p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "perfil %s no se cumplen las reglas de red\n" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "Tipo de patrón desconocido\n" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "No es posible abrir %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "Error de asignación de memoria: no se puede eliminar ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "Error de asignación de memoria: no se puede eliminar %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "no es posible crear área de trabajo\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "no es posible poner en serie el perfil %s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: no es posible escribir todo el perfil\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "%s: Imposible escribir la entrada de perfil completa a la caché\n" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "No se pudo abrir '%s'" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "fstat falló para «%s»" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "opendir falló «%s»" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "No se pudo abrir «%s» en «%s»" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Se ha detectado un carácter inesperado: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) Se ha encontrado un carácter inesperado: %s" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" "%s: no es posible asignar memoria para el punto de montaje de base de " "subdominio\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "Advertencia: no se encuentra un sistema de archivos adecuado en %s. ¿Se ha " "montado?\n" "Use --subdomainfs para anular.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: lo sentimos, pero debe tener privilegios de usuario Root para ejecutar " "este programa.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: advertencia. Ha configurado este programa como raíz de setuid.\n" "Cualquier usuario que pueda ejecutar este programa podrá actualizar los " "perfiles de AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Error: no se ha podido leer el perfil %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Error de asignación de memoria." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: se han detectado errores en el archivo. Cancelando.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "Los calificadores en mayúscula RWLIMX han quedado obsoletos. Conviértalos a " "minúscula.\n" "Consulte la página man apparmor.d(5) para obtener detalles.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "Conflicto: los permisos a y w son mutuamente excluyentes." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" "El calificador de ejecución 'i' no es válido, ya se ha especificado un " "calificador en conflicto" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "El calificador de ejecución sin limitar (%c%c) permite que se pasen algunas " "variables de entorno peligrosas al proceso sin limitar; consulte man 5 " "apparmor.d para obtener detalles.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" "El calificador de ejecución %c no es válido. Ya se ha especificado un " "calificador en conflicto." #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" "El calificador de ejecución %c%c no es válido, ya que está en conflicto con " "un calificador ya definido." #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "Interno: carácter de modo inesperado %c en la entrada" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "Un error interno ha generado permisos no válidos 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "Error del analizador de AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "No es posible fusionar las entradas. Memoria agotada\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Error al crear el alias %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "El indicador de perfil debug ya no es válido." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "Indicador de perfil no válido: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "Afirmación: `rule' ha devuelto NULL." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "El modo no es válido. Las reglas de negación x no pueden ir precedidas de " "los calificadores de ejecución i, p ni u." #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "El modo no es válido. 'x' debe ir precedido de los calificadores de " "ejecución 'i', 'p', 'c' o 'u'." #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" "Modo no válido. x debe estar precedida del calificador de ejecución i, p o u." #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "Afirmación: network_rule ha devuelto un protocolo no válido." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "Afirmación: change_profile ha devuelto NULL." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "Afirmación: 'hat rule' ha devuelto NULL." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "Afirmación: la regla local_profile ha devuelto un valor nulo." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "Variable booleana %s sin definir utilizada en expresión condicional." #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "Regla no segura. Faltan los permisos de ejecución." #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "Sólo se puede utilizar el subconjunto con reglas de enlace." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" "Conflicto entre los permisos de ejecución y de enlace en un archivo de " "reglas que usa ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "No se permiten los permisos de enlace en una transición de perfil con " "nombre.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "¿Falta final de carácter de línea? (Entrada: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "Entrada de red no válida." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "Característica no válida %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: { de apertura ilegal, la anidación de grupos no está permitida\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" "%s: error de agrupación Regex: número de elementos entre {} no válido\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: error de agrupación Regex: } de cierre no válido, no se ha encontrado el " "signo { de apertura correspondiente\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: error de agrupación de regex. Grupo o clase de caracteres sin cerrar. Se " "esperaba } de cierre.\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: detectado desbordamiento de buffer interno, superado en %d caracteres\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: no es posible analizar la línea de entrada '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "ERROR al combinar reglas para el perfil %s. Error al cargar.\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "ERROR: el perfil %s contiene elementos de directiva que no se pueden usar " "con este núcleo:\n" "\tNo se admite '*', '?', los rangos de caracteres ni las alternancias.\n" "\t'**' sólo se puede utilizar al final de una regla.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "ERROR al procesar regexs para el perfil %s. Error al cargar.\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" "ERROR al expandir las variables para el perfil %s. Error al cargar.\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "Error al añadir la regla de acceso hat en el perfil %s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "ERROR en el perfil %s, error al cargar\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: se han detectado errores durante el postprocesado. Abortando.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: se han detectado errores durante el posprocesado de regex. Cancelando.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: se han detectado errores durante el postrocesado. Abortando.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: se han detectado errores en el posprocesado de combinación de reglas. " "Cancelando.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/ar.po0000644000175000017500000006027712654035202014073 0ustar jjjj# Copyright (C) 2006 SuSE Linux Products GmbH, Nuernberg # This file is distributed under the same license as the package. # msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 01:29+0000\n" "Last-Translator: Novell Language \n" "Language-Team: Novell Language \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: ar\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "خطأ: Ù†Ùدت الذاكرة.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "خطأ: basedir %s ليس دليلاً، يتم الآن التخطي.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "خطأ: تعذرت إضاÙØ© الدليل %s إلى مسار البحث.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "خطأ: تعذر تخصيص الذاكرة.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "موضع كتابة غير صالح\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "الإذن مرÙوض\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Ù†Ùدت الذاكرة\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "مل٠التعري٠غير متواÙÙ‚ مع البروتوكول\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "مل٠التعري٠غير متواÙÙ‚ مع التوقيع\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "لا تدعم الوحدة النمطية Apparmor إصدار مل٠التعريÙ\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "مل٠التعري٠موجود بالÙعل\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "مل٠التعري٠غير موجود\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: تعذرت إضاÙØ© \"%s\". " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: تعذر استبدال \"%s\". " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: تعذرت إزالة \"%s\". " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: تعذرت الكتابة إلى stdout\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: تأكيد: خيار غير صالح: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "نجحت الإضاÙØ© لـ \"%s\".\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "نجح الاستبدال لـ \"%s\".\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "نجحت الإزالة لـ \"%s\".\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" "PANIC ذاكرة وسيطة للزيادة غير صالحة %p pos %p ext %p size %d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "تعذر Ùتح %s - %s\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "خطأ ÙÙŠ تخصيص الذاكرة: تعذرت إزالة ^%s\n" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "خطأ ÙÙŠ تخصيص الذاكرة: تعذرت إزالة %s:%s." #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "تعذر إنشاء منطقة عمل\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "تعذر تعيين تسلسل مل٠التعري٠%s\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: تعذرت كتابة إدخال مل٠التعري٠بالكامل\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "تم العثور على حر٠غير متوقع: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "(network_mode) تم العثور على حر٠غير متوقع: '%s'" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: تعذر تخصيص ذاكرة لنقطة توصيل قاعدة المجال الÙرعي\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" "تحذير: تعذر العثور على نظام ملÙات مناسب ÙÙŠ %sØŒ هل تم توصيله؟\n" "استخدم --subdomainfs لتجاوزه.\n" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: عذرًا. يجب أن تتوÙر لديك امتيازات المسؤول لكي تتمكن من تشغيل هذا " "البرنامج.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" "%s: تحذير!لقد قمت بتعيين جذر setuid لهذا البرنامج.\n" "يمكن لأي شخص يستطيع تشغيل هذا البرنامج القيام بتحديث ملÙات تعري٠AppArmor.\n" "\n" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "خطأ: تعذرت قراءة مل٠التعري٠%s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "خطأ ÙÙŠ تخصيص الذاكرة." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: تم العثور على أخطاء ÙÙŠ الملÙ. يتم الآن الإيقاÙ.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" "يتم إهمال المؤهلات بأحر٠كبيرة \"RWLIMX\"ØŒ الرجاء تحويلها إلى أحر٠صغيرة\n" "راجع صÙحة الدليل apparmor.d(5) للحصول على التÙاصيل.\n" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "لا يمكن استخدام الإذنين 'a' Ùˆ'w' المتعارضين معًا." #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "المؤهل التنÙيذي 'i' غير صالح، تم تحديد مؤهل متعارض بالÙعل" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" "يسمح المؤهل التنÙيذي غير المقيد (%c%c) بتمرير بعض متغيرات البيئة الخطيرة إلى " "العملية غير المقيدة؛ راجع 'man 5 apparmor.d' للحصول على التÙاصيل.\n" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "المؤهل التنÙيذي '%c' غير صالح، تم تحديد المؤهل المتعارض بالÙعل" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "المؤهل التنÙيذي '%c%c' غير صالح، تم تحديد مؤهل متعارض بالÙعل" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "داخلي: حر٠وضع غير متوقع '%c' ÙÙŠ الإدخال" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "تسبب خطأ داخلي ÙÙŠ إنشاء إذن غير صالح 0x%llx\n" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "خطأ ÙÙŠ محلل AppArmor: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "تعذر دمج الإدخالات. Ù†Ùدت الذاكرة\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "Ùشل إنشاء الاسم المستعار %s -> %s\n" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "لم تعد علامة مل٠التعري٠'تصحيح الأخطاء' صالحة." #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "علامة مل٠تعري٠غير صالحة: %s." #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "تأكيد: أرجعت \"القاعدة\" قيمة خالية." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" "وضع غير صالح، ÙÙŠ قواعد الرÙض يجب وضع 'x' قبل المؤهل التنÙيذي 'i' أو 'p' أو " "'u'" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" "وضع غير صالح، يجب وضع 'x' بعد المؤهل التنÙيذي 'i' أو 'p' أو 'c' أو 'u'" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "وضع غير صالح، يجب وضع المؤهل التنÙيذي 'i' أو 'p' أو 'u' قبل 'x'" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "تأكيد: أرجعت `network_rule' بروتوكولاً غير صالح." #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "تأكيد: أرجع `change_profile' قيمة خالية." #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "تأكيد: أرجعت \"hat rule\" قيمة خالية." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "تأكيد: أرجعت `local_profile rule' قيمة خالية." #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "إلغاء تعيين المتغير المنطقي %s المستخدم ÙÙŠ تعبير if" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "قاعدة غير آمنة بدون أذونات تنÙيذ" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "لا يمكن استخدام المجموعة الÙرعية إلا مع قواعد الارتباط." #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "تعارض بين الارتباط والأذونات التنÙيذية ÙÙŠ قاعدة مل٠عند استخدام ->" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" "لا ÙŠÙسمح باستخدام أذونات الارتباط ÙÙŠ عملية انتقال مل٠تعري٠معروÙØ©.\n" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "حر٠نهاية سطر Ù…Ùقود؟ (إدخال: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "إدخال الشبكة غير صالح." #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "إمكانية غير صالحة %s." #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: Ùتح غير شرعي (ØŒ غير مسموح بتجميعات متداخلة\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: خطأ ÙÙŠ تجميع Regex: عدد غير صالح للبنود بين {}\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: خطأ ÙÙŠ تجميع Regex: إغلاق غير صالح }ØŒ لا يوجد Ùتح متواÙÙ‚ ( تم اكتشاÙÙ‡\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" "%s: خطأ ÙÙŠ تجميع Regex: تجميع غير مغلق أو Ùئة أحر٠غير مغلقة، الإغلاق " "المتوقع }\n" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" "%s: تم اكتشا٠تجاوز سعة الذاكرة الوسيطة الداخلية، %d تم تجاوز الأحرÙ\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: تعذر تحليل سطر الإدخال '%s'\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "خطأ أثناء دمج القواعد لمل٠التعري٠%sØŒ Ùشل التحميل\n" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" "خطأ ÙÙŠ مل٠التعري٠%s الذي يحتوي على عناصر سياسة غير قابلة للاستخدام مع " "kernel:\n" "\tغير مسموح باستخدام '*' Ùˆ'?' ونطاقات الأحر٠والتبديلات.\n" "\tلا يمكن استخدام '**' إلا ÙÙŠ نهاية القاعدة.\n" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "خطأ أثناء معالجة تعبيرات regex لمل٠التعري٠%sØŒ Ùشل التحميل\n" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "خطأ أثناء توسيع متغيرات مل٠التعري٠%sØŒ Ùشل التحميل\n" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "خطأ أثناء إضاÙØ© قاعدة وصول hat لمل٠التعري٠%s\n" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "خطأ ÙÙŠ مل٠التعري٠%sØŒ Ùشل التحميل\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "%s: تم العثور على أخطاء أثناء المعالجة اللاحقة. يتم الآن الإيقاÙ.\n" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" "%s: تم العثور على أخطاء أثناء المعالجة اللاحقة لـ regex. يتم الآن الإيقاÙ.\n" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "%s: تم العثور على أخطاء أثناء المعالجة اللاحقة. يتم الآن الإيقاÙ.\n" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: تم العثور على أخطاء أثناء المعالجة اللاحقة لقواعد الدمج. يتم الآن " "الإيقاÙ.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/et.po0000644000175000017500000004513712654035202014077 0ustar jjjj# translation of apparmor-parser.et.po to Estonian # translation of # Copyright (C) 2006 SUSE Linux Products GmbH. # Estonian message file for YaST2 (@memory@). # # Ain Vagula , 2006. msgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 01:50+0000\n" "Last-Translator: Ain Vagula \n" "Language-Team: Estonian \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: et\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "Viga: mälu ei jätku.\n" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "Viga: basedir %s pole kataloog, jäetakse vahele.\n" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "Viga: kataloogi %s pole võimalik otsinguteele lisada.\n" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "Viga: pole võimalik eraldada mälu.\n" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "Juurdepääs keelatud\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "Mälu ei jätku\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "Profiil ei vasta protokollile\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "Profiil ei vasta signatuurile\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "Profiili versioon ei ole Apparmori mooduli poolt toetatud\n" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "Profiil on juba olemas\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "Profiili pole olemas\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" ei saa lisada. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\" ei saa asendada. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\" ei saa eemaldada. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: ei saa kirjutada standardväljundisse\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\" asendamine õnnestus.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\" eemaldamine õnnestus.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s - %s ei saa avada\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: kogu profiili kirjet ei saa kirjutada\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "Leiti ootamatu märk: '%s'" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" "%s: Vabandust. Selle rakenduse käivitamiseks on vaja administraatori " "õigusi.\n" "\n" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "Viga: pole võimalik lugeda profiili %s: %s.\n" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "Viga mälu eraldamisel." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: failis leiti vigu. Katkestamine.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "AppArmori parsimise viga: %s\n" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "Kirjeid ei suudetud ühendada. Mälu ei jätku\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "" #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "" #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "puudub realõpu märk? (kirje: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/po/mr.po0000644000175000017500000005123012654035202014074 0ustar jjjjmsgid "" msgstr "" "Project-Id-Version: apparmor-parser\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-09-13 00:11-0700\n" "PO-Revision-Date: 2013-11-15 02:17+0000\n" "Last-Translator: Priyavert \n" "Language-Team: AgreeYa Solutions \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Launchpad-Export-Date: 2016-02-02 05:10+0000\n" "X-Generator: Launchpad (build 17908)\n" "Language: mr\n" #: ../parser_include.c:113 msgid "Error: Out of memory.\n" msgstr "" #: ../parser_include.c:123 #, c-format msgid "Error: basedir %s is not a directory, skipping.\n" msgstr "" #: ../parser_include.c:137 #, c-format msgid "Error: Could not add directory %s to search path.\n" msgstr "" #: ../parser_include.c:147 msgid "Error: Could not allocate memory.\n" msgstr "" #: ../parser_interface.c:69 ../parser_interface.c:72 msgid "Bad write position\n" msgstr "लिहिणà¥à¤¯à¤¾à¤šà¥€ वाईट सà¥à¤¥à¤¿à¤¤à¥€\n" #: ../parser_interface.c:72 ../parser_interface.c:75 msgid "Permission denied\n" msgstr "परवानगी नाकारली\n" #: ../parser_interface.c:75 ../parser_interface.c:78 msgid "Out of memory\n" msgstr "सà¥à¤®à¥ƒà¤¤à¥€ संपली\n" #: ../parser_interface.c:78 ../parser_interface.c:81 msgid "Couldn't copy profile: Bad memory address\n" msgstr "" #: ../parser_interface.c:81 ../parser_interface.c:84 msgid "Profile doesn't conform to protocol\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² पà¥à¤°à¥‹à¤Ÿà¥‹à¤•à¥‰à¤²à¤¶à¥€ सà¥à¤¸à¤‚गत नाही\n" #: ../parser_interface.c:84 ../parser_interface.c:87 msgid "Profile does not match signature\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤ˆà¤² सà¥à¤µà¤¾à¤•à¥à¤·à¤°à¥€à¤¶à¥€ जà¥à¤³à¤¤ नाही\n" #: ../parser_interface.c:87 ../parser_interface.c:90 msgid "Profile version not supported by Apparmor module\n" msgstr "" #: ../parser_interface.c:90 ../parser_interface.c:93 msgid "Profile already exists\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤ˆà¤² आधीच असà¥à¤¤à¤¿à¤¤à¥à¤µà¤¾à¤¤ आहे\n" #: ../parser_interface.c:93 ../parser_interface.c:96 msgid "Profile doesn't exist\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤ˆà¤² असà¥à¤¤à¤¿à¤¤à¥à¤µà¤¾à¤¤ नाही\n" #: ../parser_interface.c:96 ../parser_interface.c:99 msgid "Permission denied; attempted to load a profile while confined?\n" msgstr "" #: ../parser_interface.c:99 ../parser_interface.c:102 #, c-format msgid "Unknown error (%d): %s\n" msgstr "" #: ../parser_interface.c:116 ../parser_interface.c:119 #, c-format msgid "%s: Unable to add \"%s\". " msgstr "%s: \"%s\" घालणे अशकà¥à¤¯. " #: ../parser_interface.c:121 ../parser_interface.c:124 #, c-format msgid "%s: Unable to replace \"%s\". " msgstr "%s: \"%s\"बदलणे अशकà¥à¤¯. " #: ../parser_interface.c:126 ../parser_interface.c:129 #, c-format msgid "%s: Unable to remove \"%s\". " msgstr "%s: \"%s\"काढून टाकणे अशकà¥à¤¯. " #: ../parser_interface.c:131 ../parser_interface.c:134 #, c-format msgid "%s: Unable to write to stdout\n" msgstr "%s: stdoutला लिहिणे अशकà¥à¤¯\n" #: ../parser_interface.c:135 ../parser_interface.c:138 #, c-format msgid "%s: Unable to write to output file\n" msgstr "" #: ../parser_interface.c:138 ../parser_interface.c:162 #: ../parser_interface.c:141 ../parser_interface.c:165 #, c-format msgid "%s: ASSERT: Invalid option: %d\n" msgstr "%s: ASSERT: अवैध परà¥à¤¯à¤¾à¤¯: %d\n" #: ../parser_interface.c:147 ../parser_interface.c:150 #, c-format msgid "Addition succeeded for \"%s\".\n" msgstr "\"%s\"साठी अडिशन यशसà¥à¤µà¥€.\n" #: ../parser_interface.c:151 ../parser_interface.c:154 #, c-format msgid "Replacement succeeded for \"%s\".\n" msgstr "\"%s\"साठी बदली यशसà¥à¤µà¥€.\n" #: ../parser_interface.c:155 ../parser_interface.c:158 #, c-format msgid "Removal succeeded for \"%s\".\n" msgstr "\"%s\"काढून टाकणà¥à¤¯à¤¾à¤šà¥€ कà¥à¤°à¤¿à¤¯à¤¾ यशसà¥à¤µà¥€.\n" #: ../parser_interface.c:251 ../parser_interface.c:254 #, c-format msgid "PANIC bad increment buffer %p pos %p ext %p size %d res %p\n" msgstr "PANIC बॅड इनà¥à¤•à¥à¤°à¤¿à¤®à¥‡à¤‚ट बफर %p pos %p ext %p साईठ%d res %p\n" #: ../parser_interface.c:656 ../parser_interface.c:658 #, c-format msgid "profile %s network rules not enforced\n" msgstr "" #: ../parser_interface.c:666 msgid "Unknown pattern type\n" msgstr "" #: ../parser_interface.c:750 ../parser_interface.c:902 #: ../parser_interface.c:743 ../parser_interface.c:894 #, c-format msgid "Unable to open %s - %s\n" msgstr "%s - %s उघडणे अशकà¥à¤¯\n" #: ../parser_interface.c:776 ../parser_interface.c:768 #, c-format msgid "Memory Allocation Error: Unable to remove ^%s\n" msgstr "" #: ../parser_interface.c:789 ../parser_interface.c:781 #, c-format msgid "Memory Allocation Error: Unable to remove %s:%s." msgstr "" #: ../parser_interface.c:810 ../parser_interface.c:802 msgid "unable to create work area\n" msgstr "कामाचे कà¥à¤·à¥‡à¤¤à¥à¤° निरà¥à¤®à¤¾à¤£ करणे अशकà¥à¤¯\n" #: ../parser_interface.c:818 ../parser_interface.c:810 #, c-format msgid "unable to serialize profile %s\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤ˆà¤² %s ची कà¥à¤°à¤®à¤µà¤¾à¤°à¥€ लावणे अशकà¥à¤¯\n" #: ../parser_interface.c:829 ../parser_interface.c:916 #: ../parser_interface.c:821 ../parser_interface.c:908 #, c-format msgid "%s: Unable to write entire profile entry\n" msgstr "%s: संपूरà¥à¤£ पà¥à¤°à¥‹à¤«à¤¾à¤‡à¤² पà¥à¤°à¤µà¤¿à¤·à¥à¤Ÿà¥€ लिहिणे अशकà¥à¤¯\n" #: ../parser_interface.c:839 ../parser_interface.c:831 #, c-format msgid "%s: Unable to write entire profile entry to cache\n" msgstr "" #: parser_lex.l:100 parser_lex.l:163 #, c-format msgid "Could not open '%s'" msgstr "" #: parser_lex.l:104 parser_lex.l:167 #, c-format msgid "fstat failed for '%s'" msgstr "" #: parser_lex.l:121 #, c-format msgid "opendir failed '%s'" msgstr "" #: parser_lex.l:152 #, c-format msgid "stat failed for '%s'" msgstr "" #: parser_lex.l:155 parser_lex.l:133 #, c-format msgid "Could not open '%s' in '%s'" msgstr "" #: parser_lex.l:284 parser_lex.l:322 parser_lex.l:362 parser_lex.l:399 #: parser_lex.l:469 parser_lex.l:655 parser_lex.l:586 #, c-format msgid "Found unexpected character: '%s'" msgstr "अनपेकà¥à¤·à¤¿à¤¤ वरà¥à¤£: '%s' आढळला" #: parser_lex.l:386 parser_lex.l:418 msgid "Variable declarations do not accept trailing commas" msgstr "" #: parser_lex.l:420 #, c-format msgid "(network_mode) Found unexpected character: '%s'" msgstr "" #: ../parser_main.c:333 ../parser_common.c:61 #, c-format msgid "Warning from %s (%s%sline %d): %s" msgstr "" #: ../parser_main.c:531 #, c-format msgid "%s: Could not allocate memory for subdomainbase mount point\n" msgstr "%s: सबडोमेन माऊंट पॉईंटसाठी सà¥à¤®à¥ƒà¤¤à¥€ वाटून देता आली नाही\n" #: ../parser_main.c:577 ../parser_main.c:616 #, c-format msgid "" "Warning: unable to find a suitable fs in %s, is it mounted?\n" "Use --subdomainfs to override.\n" msgstr "" #: ../parser_main.c:597 ../parser_main.c:635 #, c-format msgid "" "%s: Sorry. You need root privileges to run this program.\n" "\n" msgstr "" #: ../parser_main.c:604 ../parser_main.c:642 #, c-format msgid "" "%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update your AppArmor profiles.\n" "\n" msgstr "" #: ../parser_main.c:704 ../parser_main.c:813 ../parser_main.c:836 #: ../parser_main.c:946 #, c-format msgid "Error: Could not read profile %s: %s.\n" msgstr "" #: ../parser_main.c:718 ../parser_misc.c:270 parser_yacc.y:227 #: parser_yacc.y:374 parser_yacc.y:386 parser_yacc.y:484 parser_yacc.y:586 #: parser_yacc.y:624 parser_yacc.y:939 parser_yacc.y:948 parser_yacc.y:960 #: parser_yacc.y:1008 parser_yacc.y:1019 parser_yacc.y:1101 parser_yacc.y:1119 #: parser_yacc.y:1126 ../parser_main.c:850 ../parser_main.c:1015 #: ../parser_main.c:1229 ../parser_main.c:1283 ../parser_misc.c:431 #: parser_yacc.y:268 parser_yacc.y:416 parser_yacc.y:426 parser_yacc.y:537 #: parser_yacc.y:626 parser_yacc.y:976 parser_yacc.y:1021 parser_yacc.y:1030 #: parser_yacc.y:1042 parser_yacc.y:1078 parser_yacc.y:1082 parser_yacc.y:1092 #: parser_yacc.y:1102 parser_yacc.y:1201 parser_yacc.y:1223 parser_yacc.y:1234 #: parser_yacc.y:1309 parser_yacc.y:1327 parser_yacc.y:1334 parser_yacc.y:1385 msgid "Memory allocation error." msgstr "सà¥à¤®à¥ƒà¤¤à¥€ वाटून देणà¥à¤¯à¤¾à¤¤ चूक." #: ../parser_main.c:740 ../parser_main.c:872 #, c-format msgid "Cached load succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:744 ../parser_main.c:876 #, c-format msgid "Cached reload succeeded for \"%s\".\n" msgstr "" #: ../parser_main.c:910 ../parser_main.c:1058 #, c-format msgid "%s: Errors found in file. Aborting.\n" msgstr "%s: फाईलमधे चà¥à¤•à¤¾ आढळलà¥à¤¯à¤¾. सोडून देत आहे.\n" #: ../parser_misc.c:426 ../parser_misc.c:597 msgid "" "Uppercase qualifiers \"RWLIMX\" are deprecated, please convert to lowercase\n" "See the apparmor.d(5) manpage for details.\n" msgstr "" #: ../parser_misc.c:467 ../parser_misc.c:474 ../parser_misc.c:638 #: ../parser_misc.c:645 msgid "Conflict 'a' and 'w' perms are mutually exclusive." msgstr "" #: ../parser_misc.c:491 ../parser_misc.c:662 msgid "Exec qualifier 'i' invalid, conflicting qualifier already specified" msgstr "Exec कà¥à¤µà¤¾à¤²à¤¿à¤«à¤¾à¤¯à¤° 'i' अवैध, विवादासà¥à¤ªà¤¦ कà¥à¤µà¤¾à¤²à¤¿à¤«à¤¾à¤¯à¤° आधीच नमूद केलेला आहे" #: ../parser_misc.c:502 ../parser_misc.c:673 #, c-format msgid "" "Unconfined exec qualifier (%c%c) allows some dangerous environment variables " "to be passed to the unconfined process; 'man 5 apparmor.d' for details.\n" msgstr "" #: ../parser_misc.c:510 ../parser_misc.c:551 ../parser_misc.c:681 #: ../parser_misc.c:722 #, c-format msgid "Exec qualifier '%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:537 ../parser_misc.c:545 ../parser_misc.c:708 #: ../parser_misc.c:716 #, c-format msgid "" "Exec qualifier '%c%c' invalid, conflicting qualifier already specified" msgstr "" #: ../parser_misc.c:593 ../parser_misc.c:764 #, c-format msgid "Internal: unexpected mode character '%c' in input" msgstr "" #: ../parser_misc.c:615 ../parser_misc.c:786 #, c-format msgid "Internal error generated invalid perm 0x%llx\n" msgstr "" #: ../parser_misc.c:865 ../parser_symtab.c:561 ../parser_regex.c:626 #: ../parser_variable.c:229 #, c-format msgid "AppArmor parser error: %s\n" msgstr "" #: ../parser_merge.c:92 ../parser_merge.c:91 msgid "Couldn't merge entries. Out of Memory\n" msgstr "पà¥à¤°à¤µà¤¿à¤·à¥à¤Ÿà¥€ विलीन करता आलà¥à¤¯à¤¾ नाहीत. सà¥à¤®à¥ƒà¤¤à¥€ संपली\n" #: ../parser_merge.c:111 ../parser_merge.c:113 #, c-format msgid "profile %s: has merged rule %s with conflicting x modifiers\n" msgstr "" #: parser_yacc.y:236 parser_yacc.y:277 msgid "Profile attachment must begin with a '/'." msgstr "" #: parser_yacc.y:260 parser_yacc.y:302 msgid "" "Profile names must begin with a '/', namespace or keyword 'profile' or 'hat'." msgstr "" #: parser_yacc.y:296 parser_yacc.y:338 #, c-format msgid "Failed to create alias %s -> %s\n" msgstr "" #: parser_yacc.y:417 parser_yacc.y:460 msgid "Profile flag chroot_relative conflicts with namespace_relative" msgstr "" #: parser_yacc.y:421 parser_yacc.y:464 msgid "Profile flag mediate_deleted conflicts with delegate_deleted" msgstr "" #: parser_yacc.y:424 parser_yacc.y:467 msgid "" "Profile flag attach_disconnected conflicts with no_attach_disconnected" msgstr "" #: parser_yacc.y:427 parser_yacc.y:470 msgid "Profile flag chroot_attach conflicts with chroot_no_attach" msgstr "" #: parser_yacc.y:441 parser_yacc.y:484 msgid "Profile flag 'debug' is no longer valid." msgstr "" #: parser_yacc.y:463 parser_yacc.y:506 #, c-format msgid "Invalid profile flag: %s." msgstr "" #: parser_yacc.y:498 parser_yacc.y:520 parser_yacc.y:548 msgid "Assert: `rule' returned NULL." msgstr "असरà¥à¤Ÿ: `रà¥à¤²' NULL परत आला." #: parser_yacc.y:501 parser_yacc.y:546 parser_yacc.y:552 parser_yacc.y:584 msgid "" "Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', " "'p', or 'u'" msgstr "" #: parser_yacc.y:524 parser_yacc.y:556 msgid "" "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', 'c', or 'u'" msgstr "" #: parser_yacc.y:549 parser_yacc.y:587 msgid "Invalid mode, 'x' must be preceded by exec qualifier 'i', 'p', or 'u'" msgstr "" #: parser_yacc.y:574 parser_yacc.y:612 parser_yacc.y:614 msgid "Assert: `network_rule' return invalid protocol." msgstr "" #: parser_yacc.y:649 parser_yacc.y:696 msgid "Assert: `change_profile' returned NULL." msgstr "" #: parser_yacc.y:680 parser_yacc.y:720 msgid "Assert: 'hat rule' returned NULL." msgstr "असरà¥à¤Ÿ: 'हेट रà¥à¤²' NULL परत आला." #: parser_yacc.y:689 parser_yacc.y:729 msgid "Assert: 'local_profile rule' returned NULL." msgstr "" #: parser_yacc.y:824 parser_yacc.y:885 #, c-format msgid "Unset boolean variable %s used in if-expression" msgstr "" #: parser_yacc.y:882 parser_yacc.y:986 msgid "unsafe rule missing exec permissions" msgstr "" #: parser_yacc.y:901 parser_yacc.y:954 msgid "subset can only be used with link rules." msgstr "" #: parser_yacc.y:903 parser_yacc.y:956 msgid "link and exec perms conflict on a file rule using ->" msgstr "" #: parser_yacc.y:905 parser_yacc.y:958 msgid "link perms are not allowed on a named profile transition.\n" msgstr "" #: parser_yacc.y:921 parser_yacc.y:1003 #, c-format msgid "missing an end of line character? (entry: %s)" msgstr "ओळीचà¥à¤¯à¤¾ अखेरचा वरà¥à¤£ गायब? (पà¥à¤°à¤µà¤¿à¤·à¥à¤Ÿà¥€: %s)" #: parser_yacc.y:975 parser_yacc.y:985 parser_yacc.y:1057 parser_yacc.y:1067 msgid "Invalid network entry." msgstr "" #: parser_yacc.y:1039 parser_yacc.y:1048 parser_yacc.y:1254 #, c-format msgid "Invalid capability %s." msgstr "" #: parser_yacc.y:1066 parser_yacc.y:1269 #, c-format msgid "AppArmor parser error for %s%s%s at line %d: %s\n" msgstr "" #: parser_yacc.y:1072 parser_yacc.y:1275 #, c-format msgid "AppArmor parser error,%s%s line %d: %s\n" msgstr "" #: ../parser_regex.c:244 #, c-format msgid "%s: Illegal open {, nesting groupings not allowed\n" msgstr "%s: {, बेकायदेशीररितà¥à¤¯à¤¾ उघडला, नेसà¥à¤Ÿà¥€à¤‚ग समà¥à¤¹ करणà¥à¤¯à¤¾à¤¸ अनà¥à¤®à¤¤à¥€ नाही\n" #: ../parser_regex.c:265 ../parser_regex.c:274 #, c-format msgid "%s: Regex grouping error: Invalid number of items between {}\n" msgstr "%s: Regex समà¥à¤¹ करणà¥à¤¯à¤¾à¤¤ चूक: अवैधपणे {} दरमà¥à¤¯à¤¾à¤¨ अनेक अवैध आयटेमà¥à¤¸.\n" #: ../parser_regex.c:271 ../parser_regex.c:280 #, c-format msgid "" "%s: Regex grouping error: Invalid close }, no matching open { detected\n" msgstr "" "%s: Regex समà¥à¤¹ करणà¥à¤¯à¤¾à¤¤ चूक: अवैधपणे }, बंद, कोणताही जà¥à¤³à¤£à¤¾à¤°à¤¾{ आढळला नाही\n" #: ../parser_regex.c:337 ../parser_regex.c:343 #, c-format msgid "" "%s: Regex grouping error: Unclosed grouping or character class, expecting " "close }\n" msgstr "" #: ../parser_regex.c:351 ../parser_regex.c:357 #, c-format msgid "%s: Internal buffer overflow detected, %d characters exceeded\n" msgstr "%s: अंतरà¥à¤—त बफर भरà¥à¤¨ वाहू लागलà¥à¤¯à¤¾à¤šà¥‡ आढळले, %d पारà¥à¤¸à¥‡ करणे अशकà¥à¤¯\n" #: ../parser_regex.c:355 ../parser_regex.c:361 #, c-format msgid "%s: Unable to parse input line '%s'\n" msgstr "%s: इनपà¥à¤Ÿ लाईन '%s' पारà¥à¤¸à¥‡ करणे अशकà¥à¤¯\n" #: ../parser_regex.c:397 ../parser_regex.c:405 #, c-format msgid "%s: Invalid profile name '%s' - bad regular expression\n" msgstr "" #: ../parser_policy.c:202 ../parser_policy.c:402 #, c-format msgid "ERROR merging rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:234 #, c-format msgid "" "ERROR profile %s contains policy elements not usable with this kernel:\n" "\t'*', '?', character ranges, and alternations are not allowed.\n" "\t'**' may only be used at the end of a rule.\n" msgstr "" #: ../parser_policy.c:279 ../parser_policy.c:359 #, c-format msgid "ERROR processing regexs for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:306 ../parser_policy.c:389 #, c-format msgid "ERROR expanding variables for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:390 ../parser_policy.c:382 #, c-format msgid "ERROR adding hat access rule for profile %s\n" msgstr "" #: ../parser_policy.c:490 ../parser_policy.c:271 #, c-format msgid "ERROR in profile %s, failed to load\n" msgstr "पà¥à¤°à¥‹à¤«à¤¾à¤ˆà¤² %s मधे चà¥à¤•, लोड करणà¥à¤¯à¤¾à¤¤ अपयश\n" #: ../parser_policy.c:675 #, c-format msgid "%s: Errors found during postprocessing. Aborting.\n" msgstr "" #: ../parser_policy.c:682 ../parser_policy.c:704 #, c-format msgid "%s: Errors found during regex postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:689 #, c-format msgid "%s: Errors found during postprocess. Aborting.\n" msgstr "" #: ../parser_policy.c:696 #, c-format msgid "%s: Errors found in combining rules postprocessing. Aborting.\n" msgstr "" "%s: नियमांचे पोसà¥à¤Ÿ पà¥à¤°à¥‹à¤¸à¥‡à¤¸à¤¿à¤‚ग à¤à¤•à¤¤à¥à¤° करणà¥à¤¯à¤¾à¤¤ चूक आढळली. सोडून देत आहे.\n" #: parser_lex.l:180 #, c-format msgid "Could not process include directory '%s' in '%s'" msgstr "" #: ../parser_main.c:660 msgid "Feature buffer full." msgstr "" #: ../parser_main.c:1115 ../parser_main.c:1132 msgid "Out of memory" msgstr "" #: ../parser_main.c:1182 #, c-format msgid "Can't create cache directory: %s\n" msgstr "" #: ../parser_main.c:1185 #, c-format msgid "File in cache directory location: %s\n" msgstr "" #: ../parser_main.c:1188 #, c-format msgid "Can't update cache directory: %s\n" msgstr "" #: ../parser_misc.c:833 #, c-format msgid "Internal: unexpected DBus mode character '%c' in input" msgstr "" #: ../parser_misc.c:857 #, c-format msgid "Internal error generated invalid DBus perm 0x%x\n" msgstr "" #: parser_yacc.y:575 msgid "deny prefix not allowed" msgstr "" #: parser_yacc.y:612 msgid "owner prefix not allowed" msgstr "" #: parser_yacc.y:660 msgid "owner prefix not allow on mount rules" msgstr "" #: parser_yacc.y:677 msgid "owner prefix not allow on dbus rules" msgstr "" #: parser_yacc.y:704 msgid "owner prefix not allow on capability rules" msgstr "" #: parser_yacc.y:1357 #, c-format msgid "invalid mount conditional %s%s" msgstr "" #: parser_yacc.y:1374 msgid "bad mount rule" msgstr "" #: parser_yacc.y:1381 msgid "mount point conditions not currently supported" msgstr "" #: parser_yacc.y:1398 #, c-format msgid "invalid pivotroot conditional '%s'" msgstr "" #: ../parser_regex.c:241 #, c-format msgid "" "%s: Regex grouping error: Invalid close ], no matching open [ detected\n" msgstr "" #: ../parser_regex.c:257 #, c-format msgid "%s: Regex grouping error: Exceeded maximum nesting of {}\n" msgstr "" #: ../parser_policy.c:366 #, c-format msgid "ERROR processing policydb rules for profile %s, failed to load\n" msgstr "" #: ../parser_policy.c:396 #, c-format msgid "ERROR replacing aliases for profile %s, failed to load\n" msgstr "" #: ../parser_interface.c:635 ../parser_interface.c:638 #, c-format msgid "%s: Unable to write %s\n" msgstr "" #: ../parser_main.c:721 #, c-format msgid "Error: Could not read binary profile or cache file %s: %s.\n" msgstr "" #: ../parser_main.c:811 #, c-format msgid "Error: Could not read cache file '%s', skipping...\n" msgstr "" #: ../parser_misc.c:575 #, c-format msgid "Internal: unexpected %s mode character '%c' in input" msgstr "" #: ../parser_misc.c:599 #, c-format msgid "Internal error generated invalid %s perm 0x%x\n" msgstr "" #: parser_yacc.y:703 msgid "owner prefix not allowed on mount rules" msgstr "" #: parser_yacc.y:720 msgid "owner prefix not allowed on dbus rules" msgstr "" #: parser_yacc.y:736 msgid "owner prefix not allowed on signal rules" msgstr "" #: parser_yacc.y:752 msgid "owner prefix not allowed on ptrace rules" msgstr "" #: parser_yacc.y:768 msgid "owner prefix not allowed on unix rules" msgstr "" #: parser_yacc.y:794 msgid "owner prefix not allowed on capability rules" msgstr "" #: parser_yacc.y:1293 #, c-format msgid "dbus rule: invalid conditional group %s=()" msgstr "" #: parser_yacc.y:1371 #, c-format msgid "unix rule: invalid conditional group %s=()" msgstr "" #: ../parser_regex.c:368 #, c-format msgid "%s: Regex error: trailing '\\' escape character\n" msgstr "" apparmor-2.11.0/parser/libapparmor_re/0000755000175000017500000000000013034613166015501 5ustar jjjjapparmor-2.11.0/parser/libapparmor_re/Makefile0000644000175000017500000000152112504631025017133 0ustar jjjj# Profiling: #EXTRA_CFLAGS = -pg ifdef USE_SYSTEM # Using the system libapparmor INCLUDE_APPARMOR = else INCLUDE_APPARMOR = -I../../libraries/libapparmor/include endif TARGET=libapparmor_re.a CFLAGS ?= -g -Wall -O2 ${EXTRA_CFLAGS} -std=gnu++0x CXXFLAGS := ${CFLAGS} ${INCLUDE_APPARMOR} ARFLAGS=-rcs BISON := bison all : ${TARGET} UNITTESTS = tst_parse libapparmor_re.a: parse.o expr-tree.o hfa.o chfa.o aare_rules.o ar ${ARFLAGS} $@ $^ expr-tree.o: expr-tree.cc expr-tree.h hfa.o: hfa.cc apparmor_re.h hfa.h ../immunix.h aare_rules.o: aare_rules.cc aare_rules.h apparmor_re.h expr-tree.h hfa.h chfa.h parse.h ../immunix.h chfa.o: chfa.cc chfa.h ../immunix.h parse.o : parse.cc apparmor_re.h expr-tree.h parse.cc : parse.y parse.h flex-tables.h ../immunix.h ${BISON} -o $@ $< clean: rm -f *.o parse.cc ${TARGET} *.gcda *.gcno apparmor-2.11.0/parser/libapparmor_re/chfa.h0000644000175000017500000000350212263645730016560 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2012 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Create a compressed hfa (chfa) from and hfa */ #ifndef __LIBAA_RE_CHFA_H #define __LIBAA_RE_CHFA_H #include #include #include "hfa.h" #define BASE32_FLAGS 0xff000000 #define DiffEncodeBit32 0x80000000 #define base_mask_size(X) ((X) & ~BASE32_FLAGS) using namespace std; class CHFA { typedef vector > DefaultBase; typedef vector > NextCheck; public: CHFA(DFA &dfa, map &eq, dfaflags_t flags); void dump(ostream & os); void flex_table(ostream &os, const char *name); void init_free_list(vector > &free_list, size_t prev, size_t start); bool fits_in(vector > &free_list, size_t base, StateTrans &cases); void insert_state(vector > &free_list, State *state, DFA &dfa); private: vector accept; vector accept2; DefaultBase default_base; NextCheck next_check; map num; map &eq; uchar max_eq; size_t first_free; unsigned int chfaflags; }; #endif /* __LIBAA_RE_CHFA_H */ apparmor-2.11.0/parser/libapparmor_re/expr-tree.h0000644000175000017500000004445512647540630017605 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2013 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Functions to create/manipulate an expression tree for regular expressions * that have been parsed. * * The expression tree can be used directly after the parse creates it, or * it can be factored so that the set of important nodes is smaller. * Having a reduced set of important nodes generally results in a dfa that * is closer to minimum (fewer redundant states are created). It also * results in fewer important nodes in a the state set during subset * construction resulting in less memory used to create a dfa. * * Generally it is worth doing expression tree simplification before dfa * construction, if the regular expression tree contains any alternations. * Even if the regular expression doesn't simplification should be fast * enough that it can be used with minimal overhead. */ #ifndef __LIBAA_RE_EXPR_H #define __LIBAA_RE_EXPR_H #include #include #include #include #include #include "apparmor_re.h" using namespace std; typedef unsigned char uchar; typedef set Chars; ostream &operator<<(ostream &os, uchar c); /* Compute the union of two sets. */ template set operator+(const set &a, const set &b) { set c(a); c.insert(b.begin(), b.end()); return c; } /** * When creating DFAs from regex trees, a DFA state is constructed from * a set of important nodes in the syntax tree. This includes AcceptNodes, * which indicate that when a match ends in a particular state, the * regular expressions that the AcceptNode belongs to match. */ class Node; class ImportantNode; typedef set NodeSet; /** * Text-dump a state (for debugging). */ ostream &operator<<(ostream &os, const NodeSet &state); /** * Out-edges from a state to another: we store the follow-set of Nodes * for each input character that is not a default match in * cases (i.e., following a CharNode or CharSetNode), and default * matches in otherwise as well as in all matching explicit cases * (i.e., following an AnyCharNode or NotCharSetNode). This avoids * enumerating all the explicit tranitions for default matches. */ typedef struct Cases { typedef map::iterator iterator; iterator begin() { return cases.begin(); } iterator end() { return cases.end(); } Cases(): otherwise(0) { } map cases; NodeSet *otherwise; } Cases; ostream &operator<<(ostream &os, Node &node); /* An abstract node in the syntax tree. */ class Node { public: Node(): nullable(false), label(0) { child[0] = child[1] = 0; } Node(Node *left): nullable(false), label(0) { child[0] = left; child[1] = 0; } Node(Node *left, Node *right): nullable(false), label(0) { child[0] = left; child[1] = right; } virtual ~Node() { if (child[0]) child[0]->release(); if (child[1]) child[1]->release(); } /** * See the "Dragon Book" for an explanation of nullable, firstpos, * lastpos, and followpos. */ virtual void compute_nullable() { } virtual void compute_firstpos() = 0; virtual void compute_lastpos() = 0; virtual void compute_followpos() { } virtual int eq(Node *other) = 0; virtual ostream &dump(ostream &os) = 0; void dump_syntax_tree(ostream &os); virtual void normalize(int dir) { if (child[dir]) child[dir]->normalize(dir); if (child[!dir]) child[!dir]->normalize(dir); } /* return false if no work done */ virtual int normalize_eps(int dir __attribute__((unused))) { return 0; } bool nullable; NodeSet firstpos, lastpos, followpos; /* child 0 is left, child 1 is right */ Node *child[2]; unsigned int label; /* unique number for debug etc */ /** * We indirectly release Nodes through a virtual function because * accept and Eps Nodes are shared, and must be treated specially. * We could use full reference counting here but the indirect release * is sufficient and has less overhead */ virtual void release(void) { delete this; } }; class InnerNode: public Node { public: InnerNode(): Node() { }; InnerNode(Node *left): Node(left) { }; InnerNode(Node *left, Node *right): Node(left, right) { }; }; class OneChildNode: public InnerNode { public: OneChildNode(Node *left): InnerNode(left) { }; }; class TwoChildNode: public InnerNode { public: TwoChildNode(Node *left, Node *right): InnerNode(left, right) { }; virtual int normalize_eps(int dir); }; class LeafNode: public Node { public: LeafNode(): Node() { }; virtual void normalize(int dir __attribute__((unused))) { return; } }; /* Match nothing (//). */ class EpsNode: public LeafNode { public: EpsNode(): LeafNode() { nullable = true; label = 0; } void release(void) { /* don't delete Eps nodes because there is a single static * instance shared by all trees. Look for epsnode in the code */ } void compute_firstpos() { } void compute_lastpos() { } int eq(Node *other) { if (dynamic_cast(other)) return 1; return 0; } ostream &dump(ostream &os) { return os << "[]"; } }; /** * Leaf nodes in the syntax tree are important to us: they describe the * characters that the regular expression matches. We also consider * AcceptNodes import: they indicate when a regular expression matches. */ class ImportantNode: public LeafNode { public: ImportantNode(): LeafNode() { } void compute_firstpos() { firstpos.insert(this); } void compute_lastpos() { lastpos.insert(this); } virtual void follow(Cases &cases) = 0; virtual int is_accept(void) = 0; virtual int is_postprocess(void) = 0; }; /* common base class for all the different classes that contain * character information. */ class CNode: public ImportantNode { public: CNode(): ImportantNode() { } int is_accept(void) { return false; } int is_postprocess(void) { return false; } }; /* Match one specific character (/c/). */ class CharNode: public CNode { public: CharNode(uchar c): c(c) { } void follow(Cases &cases) { NodeSet **x = &cases.cases[c]; if (!*x) { if (cases.otherwise) *x = new NodeSet(*cases.otherwise); else *x = new NodeSet; } (*x)->insert(followpos.begin(), followpos.end()); } int eq(Node *other) { CharNode *o = dynamic_cast(other); if (o) { return c == o->c; } return 0; } ostream &dump(ostream &os) { return os << c; } uchar c; }; /* Match a set of characters (/[abc]/). */ class CharSetNode: public CNode { public: CharSetNode(Chars &chars): chars(chars) { } void follow(Cases &cases) { for (Chars::iterator i = chars.begin(); i != chars.end(); i++) { NodeSet **x = &cases.cases[*i]; if (!*x) { if (cases.otherwise) *x = new NodeSet(*cases.otherwise); else *x = new NodeSet; } (*x)->insert(followpos.begin(), followpos.end()); } } int eq(Node *other) { CharSetNode *o = dynamic_cast(other); if (!o || chars.size() != o->chars.size()) return 0; for (Chars::iterator i = chars.begin(), j = o->chars.begin(); i != chars.end() && j != o->chars.end(); i++, j++) { if (*i != *j) return 0; } return 1; } ostream &dump(ostream &os) { os << '['; for (Chars::iterator i = chars.begin(); i != chars.end(); i++) os << *i; return os << ']'; } Chars chars; }; /* Match all except one character (/[^abc]/). */ class NotCharSetNode: public CNode { public: NotCharSetNode(Chars &chars): chars(chars) { } void follow(Cases &cases) { if (!cases.otherwise) cases.otherwise = new NodeSet; for (Chars::iterator j = chars.begin(); j != chars.end(); j++) { NodeSet **x = &cases.cases[*j]; if (!*x) *x = new NodeSet(*cases.otherwise); } /* Note: Add to the nonmatching characters after copying away * the old otherwise state for the matching characters. */ cases.otherwise->insert(followpos.begin(), followpos.end()); for (Cases::iterator i = cases.begin(); i != cases.end(); i++) { if (chars.find(i->first) == chars.end()) i->second->insert(followpos.begin(), followpos.end()); } } int eq(Node *other) { NotCharSetNode *o = dynamic_cast(other); if (!o || chars.size() != o->chars.size()) return 0; for (Chars::iterator i = chars.begin(), j = o->chars.begin(); i != chars.end() && j != o->chars.end(); i++, j++) { if (*i != *j) return 0; } return 1; } ostream &dump(ostream &os) { os << "[^"; for (Chars::iterator i = chars.begin(); i != chars.end(); i++) os << *i; return os << ']'; } Chars chars; }; /* Match any character (/./). */ class AnyCharNode: public CNode { public: AnyCharNode() { } void follow(Cases &cases) { if (!cases.otherwise) cases.otherwise = new NodeSet; cases.otherwise->insert(followpos.begin(), followpos.end()); for (Cases::iterator i = cases.begin(); i != cases.end(); i++) i->second->insert(followpos.begin(), followpos.end()); } int eq(Node *other) { if (dynamic_cast(other)) return 1; return 0; } ostream &dump(ostream &os) { return os << "."; } }; /* Match a node zero or more times. (This is a unary operator.) */ class StarNode: public OneChildNode { public: StarNode(Node *left): OneChildNode(left) { nullable = true; } void compute_firstpos() { firstpos = child[0]->firstpos; } void compute_lastpos() { lastpos = child[0]->lastpos; } void compute_followpos() { NodeSet from = child[0]->lastpos, to = child[0]->firstpos; for (NodeSet::iterator i = from.begin(); i != from.end(); i++) { (*i)->followpos.insert(to.begin(), to.end()); } } int eq(Node *other) { if (dynamic_cast(other)) return child[0]->eq(other->child[0]); return 0; } ostream &dump(ostream &os) { os << '('; child[0]->dump(os); return os << ")*"; } }; /* Match a node one or more times. (This is a unary operator.) */ class PlusNode: public OneChildNode { public: PlusNode(Node *left): OneChildNode(left) { } void compute_nullable() { nullable = child[0]->nullable; } void compute_firstpos() { firstpos = child[0]->firstpos; } void compute_lastpos() { lastpos = child[0]->lastpos; } void compute_followpos() { NodeSet from = child[0]->lastpos, to = child[0]->firstpos; for (NodeSet::iterator i = from.begin(); i != from.end(); i++) { (*i)->followpos.insert(to.begin(), to.end()); } } int eq(Node *other) { if (dynamic_cast(other)) return child[0]->eq(other->child[0]); return 0; } ostream &dump(ostream &os) { os << '('; child[0]->dump(os); return os << ")+"; } }; /* Match a pair of consecutive nodes. */ class CatNode: public TwoChildNode { public: CatNode(Node *left, Node *right): TwoChildNode(left, right) { } void compute_nullable() { nullable = child[0]->nullable && child[1]->nullable; } void compute_firstpos() { if (child[0]->nullable) firstpos = child[0]->firstpos + child[1]->firstpos; else firstpos = child[0]->firstpos; } void compute_lastpos() { if (child[1]->nullable) lastpos = child[0]->lastpos + child[1]->lastpos; else lastpos = child[1]->lastpos; } void compute_followpos() { NodeSet from = child[0]->lastpos, to = child[1]->firstpos; for (NodeSet::iterator i = from.begin(); i != from.end(); i++) { (*i)->followpos.insert(to.begin(), to.end()); } } int eq(Node *other) { if (dynamic_cast(other)) { if (!child[0]->eq(other->child[0])) return 0; return child[1]->eq(other->child[1]); } return 0; } ostream &dump(ostream &os) { child[0]->dump(os); child[1]->dump(os); return os; } void normalize(int dir); }; /* Match one of two alternative nodes. */ class AltNode: public TwoChildNode { public: AltNode(Node *left, Node *right): TwoChildNode(left, right) { } void compute_nullable() { nullable = child[0]->nullable || child[1]->nullable; } void compute_lastpos() { lastpos = child[0]->lastpos + child[1]->lastpos; } void compute_firstpos() { firstpos = child[0]->firstpos + child[1]->firstpos; } int eq(Node *other) { if (dynamic_cast(other)) { if (!child[0]->eq(other->child[0])) return 0; return child[1]->eq(other->child[1]); } return 0; } ostream &dump(ostream &os) { os << '('; child[0]->dump(os); os << '|'; child[1]->dump(os); os << ')'; return os; } void normalize(int dir); }; class SharedNode: public ImportantNode { public: SharedNode() { } void release(void) { /* don't delete SharedNodes via release as they are shared, and * will be deleted when the table they are stored in is deleted */ } void follow(Cases &cases __attribute__ ((unused))) { /* Nothing to follow. */ } /* requires shared nodes to be common by pointer */ int eq(Node *other) { return (this == other); } }; /** * Indicate that a regular expression matches. An AcceptNode itself * doesn't match anything, so it will never generate any transitions. */ class AcceptNode: public SharedNode { public: AcceptNode() { } int is_accept(void) { return true; } int is_postprocess(void) { return false; } }; class MatchFlag: public AcceptNode { public: MatchFlag(uint32_t flag, uint32_t audit): flag(flag), audit(audit) { } ostream &dump(ostream &os) { return os << "< 0x" << hex << flag << '>'; } uint32_t flag; uint32_t audit; }; class ExactMatchFlag: public MatchFlag { public: ExactMatchFlag(uint32_t flag, uint32_t audit): MatchFlag(flag, audit) {} }; class DenyMatchFlag: public MatchFlag { public: DenyMatchFlag(uint32_t flag, uint32_t quiet): MatchFlag(flag, quiet) {} }; /* Traverse the syntax tree depth-first in an iterator-like manner. */ class depth_first_traversal { stackpos; void push_left(Node *node) { pos.push(node); while (dynamic_cast(node)) { pos.push(node->child[0]); node = node->child[0]; } } public: depth_first_traversal(Node *node) { push_left(node); } Node *operator*() { return pos.top(); } Node *operator->() { return pos.top(); } operator bool() { return !pos.empty(); } void operator++(int) { Node *last = pos.top(); pos.pop(); if (!pos.empty()) { /* no need to dynamic cast, as we just popped a node so * the top node must be an inner node */ InnerNode *node = (InnerNode *) (pos.top()); if (node->child[1] && node->child[1] != last) { push_left(node->child[1]); } } } }; struct node_counts { int charnode; int charset; int notcharset; int alt; int plus; int star; int any; int cat; }; extern EpsNode epsnode; int debug_tree(Node *t); Node *simplify_tree(Node *t, dfaflags_t flags); void label_nodes(Node *root); unsigned long hash_NodeSet(NodeSet *ns); void flip_tree(Node *node); /* * hashedNodes - for efficient set comparison */ class hashedNodeSet { public: unsigned long hash; NodeSet *nodes; hashedNodeSet(NodeSet *n): nodes(n) { hash = hash_NodeSet(n); } bool operator<(hashedNodeSet const &rhs)const { if (hash == rhs.hash) { if (nodes->size() == rhs.nodes->size()) return *nodes < *(rhs.nodes); else return nodes->size() < rhs.nodes->size(); } else { return hash < rhs.hash; } } }; class hashedNodeVec { public: typedef ImportantNode ** iterator; iterator begin() { return nodes; } iterator end() { iterator t = nodes ? &nodes[len] : NULL; return t; } unsigned long hash; unsigned long len; ImportantNode **nodes; hashedNodeVec(NodeSet *n) { hash = hash_NodeSet(n); len = n->size(); nodes = new ImportantNode *[n->size()]; unsigned int j = 0; for (NodeSet::iterator i = n->begin(); i != n->end(); i++, j++) { nodes[j] = *i; } } hashedNodeVec(NodeSet *n, unsigned long h): hash(h) { len = n->size(); nodes = new ImportantNode *[n->size()]; ImportantNode **j = nodes; for (NodeSet::iterator i = n->begin(); i != n->end(); i++) { *(j++) = *i; } } ~hashedNodeVec() { delete nodes; } unsigned long size()const { return len; } bool operator<(hashedNodeVec const &rhs)const { if (hash == rhs.hash) { if (len == rhs.size()) { for (unsigned int i = 0; i < len; i++) { if (nodes[i] != rhs.nodes[i]) return nodes[i] < rhs.nodes[i]; } return false; } return len < rhs.size(); } return hash < rhs.hash; } }; class CacheStats { public: unsigned long dup, sum, max; CacheStats(void): dup(0), sum(0), max(0) { }; void clear(void) { dup = sum = max = 0; } virtual unsigned long size(void) const = 0; }; class NodeCache: public CacheStats { public: set cache; NodeCache(void): cache() { }; ~NodeCache() { clear(); }; virtual unsigned long size(void) const { return cache.size(); } void clear() { for (set::iterator i = cache.begin(); i != cache.end(); i++) { delete i->nodes; } cache.clear(); CacheStats::clear(); } NodeSet *insert(NodeSet *nodes) { if (!nodes) return NULL; pair::iterator,bool> uniq; uniq = cache.insert(hashedNodeSet(nodes)); if (uniq.second == false) { delete(nodes); dup++; } else { sum += nodes->size(); if (nodes->size() > max) max = nodes->size(); } return uniq.first->nodes; } }; struct deref_less_than { bool operator()(hashedNodeVec * const &lhs, hashedNodeVec * const &rhs)const { return *lhs < *rhs; } }; class NodeVecCache: public CacheStats { public: set cache; NodeVecCache(void): cache() { }; ~NodeVecCache() { clear(); }; virtual unsigned long size(void) const { return cache.size(); } void clear() { for (set::iterator i = cache.begin(); i != cache.end(); i++) { delete *i; } cache.clear(); CacheStats::clear(); } hashedNodeVec *insert(NodeSet *nodes) { if (!nodes) return NULL; pair::iterator,bool> uniq; hashedNodeVec *nv = new hashedNodeVec(nodes); uniq = cache.insert(nv); if (uniq.second == false) { delete nv; dup++; } else { sum += nodes->size(); if (nodes->size() > max) max = nodes->size(); } delete(nodes); return (*uniq.first); } }; #endif /* __LIBAA_RE_EXPR */ apparmor-2.11.0/parser/libapparmor_re/aare_rules.h0000644000175000017500000000552112543101312017764 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2012 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Wrapper around the dfa to convert aa rules into a dfa */ #ifndef __LIBAA_RE_RULES_H #define __LIBAA_RE_RULES_H #include #include "apparmor_re.h" #include "expr-tree.h" class UniquePerm { public: bool deny; bool exact_match; uint32_t perms; uint32_t audit; bool operator<(UniquePerm const &rhs)const { if (deny == rhs.deny) { if (exact_match == rhs.exact_match) { if (perms == rhs.perms) return audit < rhs.audit; return perms < rhs.perms; } return exact_match; } return deny; } }; class UniquePermsCache { public: typedef map UniquePermMap; typedef UniquePermMap::iterator iterator; UniquePermMap nodes; UniquePermsCache(void) { }; ~UniquePermsCache() { clear(); } void clear() { for (iterator i = nodes.begin(); i != nodes.end(); i++) { delete i->second; } nodes.clear(); } Node *insert(bool deny, uint32_t perms, uint32_t audit, bool exact_match) { UniquePerm tmp = { deny, exact_match, perms, audit }; iterator res = nodes.find(tmp); if (res == nodes.end()) { Node *node; if (deny) node = new DenyMatchFlag(perms, audit); else if (exact_match) node = new ExactMatchFlag(perms, audit); else node = new MatchFlag(perms, audit); pair val = nodes.insert(make_pair(tmp, node)); if (val.second == false) return val.first->second; return node; } return res->second; } }; typedef std::map PermExprMap; class aare_rules { Node *root; void add_to_rules(Node *tree, Node *perms); UniquePermsCache unique_perms; PermExprMap expr_map; public: int reverse; int rule_count; aare_rules(void): root(NULL), unique_perms(), expr_map(), reverse(0), rule_count(0) { }; aare_rules(int reverse): root(NULL), unique_perms(), expr_map(), reverse(reverse), rule_count(0) { }; ~aare_rules(); bool add_rule(const char *rule, int deny, uint32_t perms, uint32_t audit, dfaflags_t flags); bool add_rule_vec(int deny, uint32_t perms, uint32_t audit, int count, const char **rulev, dfaflags_t flags); void *create_dfa(size_t *size, dfaflags_t flags); }; #endif /* __LIBAA_RE_RULES_H */ apparmor-2.11.0/parser/libapparmor_re/apparmor_re.h0000644000175000017500000000402012263643650020161 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2012 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . */ #ifndef APPARMOR_RE_H #define APPARMOR_RE_H typedef int dfaflags_t; #define DFA_CONTROL_EQUIV (1 << 0) #define DFA_CONTROL_TREE_NORMAL (1 << 1) #define DFA_CONTROL_TREE_SIMPLE (1 << 2) #define DFA_CONTROL_TREE_LEFT (1 << 3) #define DFA_CONTROL_MINIMIZE (1 << 4) #define DFA_CONTROL_FILTER_DENY (1 << 6) #define DFA_CONTROL_REMOVE_UNREACHABLE (1 << 7) #define DFA_CONTROL_TRANS_HIGH (1 << 8) #define DFA_CONTROL_DIFF_ENCODE (1 << 9) #define DFA_DUMP_DIFF_PROGRESS (1 << 10) #define DFA_DUMP_DIFF_ENCODE (1 << 11) #define DFA_DUMP_DIFF_STATS (1 << 12) #define DFA_DUMP_MIN_PARTS (1 << 13) #define DFA_DUMP_UNIQ_PERMS (1 << 14) #define DFA_DUMP_MIN_UNIQ_PERMS (1 << 15) #define DFA_DUMP_TREE_STATS (1 << 16) #define DFA_DUMP_TREE (1 << 17) #define DFA_DUMP_SIMPLE_TREE (1 << 18) #define DFA_DUMP_PROGRESS (1 << 19) #define DFA_DUMP_STATS (1 << 20) #define DFA_DUMP_STATES (1 << 21) #define DFA_DUMP_GRAPH (1 << 22) #define DFA_DUMP_TRANS_PROGRESS (1 << 23) #define DFA_DUMP_TRANS_STATS (1 << 24) #define DFA_DUMP_TRANS_TABLE (1 << 25) #define DFA_DUMP_EQUIV (1 << 26) #define DFA_DUMP_EQUIV_STATS (1 << 27) #define DFA_DUMP_MINIMIZE (1 << 28) #define DFA_DUMP_UNREACHABLE (1 << 29) #define DFA_DUMP_RULE_EXPR (1 << 30) #define DFA_DUMP_NODE_TO_DFA (1 << 31) #endif /* APPARMOR_RE_H */ apparmor-2.11.0/parser/libapparmor_re/parse.h0000644000175000017500000000166711537136245017002 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2010 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Parsing of regular expression into expression trees as implemented in * expr-tree */ #ifndef __LIBAA_RE_PARSE_H #define __LIBAA_RE_PARSE_H int regex_parse(Node **tree, const char *rule); #endif /* __LIBAA_RE_PARSE_H */ apparmor-2.11.0/parser/libapparmor_re/flex-tables.h0000644000175000017500000000143012263642433020060 0ustar jjjj#ifndef __FLEX_TABLES_H #define __FLEX_TABLES_H #include #include #define YYTH_MAGIC 0xF13C57B1 #define YYTH_FLAG_DIFF_ENCODE 1 struct table_set_header { uint32_t th_magic; /* TH_MAGIC */ uint32_t th_hsize; uint32_t th_ssize; uint16_t th_flags; /* char th_version[]; char th_name[]; char th_pad64[];*/ } __attribute__ ((packed)); #define YYTD_ID_ACCEPT 1 #define YYTD_ID_BASE 2 #define YYTD_ID_CHK 3 #define YYTD_ID_DEF 4 #define YYTD_ID_EC 5 #define YYTD_ID_META 6 #define YYTD_ID_ACCEPT2 7 #define YYTD_ID_NXT 8 #define YYTD_DATA8 1 #define YYTD_DATA16 2 #define YYTD_DATA32 4 struct table_header { uint16_t td_id; uint16_t td_flags; uint32_t td_hilen; uint32_t td_lolen; /* char td_data[]; char td_pad64[];*/ } __attribute__ ((packed)); #endif apparmor-2.11.0/parser/libapparmor_re/expr-tree.cc0000644000175000017500000003764412607537726017755 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2013 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Functions to create/manipulate an expression tree for regular expressions * that have been parsed. * * The expression tree can be used directly after the parse creates it, or * it can be factored so that the set of important nodes is smaller. * Having a reduced set of important nodes generally results in a dfa that * is closer to minimum (fewer redundant states are created). It also * results in fewer important nodes in a the state set during subset * construction resulting in less memory used to create a dfa. * * Generally it is worth doing expression tree simplification before dfa * construction, if the regular expression tree contains any alternations. * Even if the regular expression doesn't simplification should be fast * enough that it can be used with minimal overhead. */ #include #include #include "expr-tree.h" #include "apparmor_re.h" /* Use a single static EpsNode as it carries no node specific information */ EpsNode epsnode; ostream &operator<<(ostream &os, uchar c) { const char *search = "\a\033\f\n\r\t|*+[](). ", *replace = "aefnrt|*+[](). ", *s; if ((s = strchr(search, c)) && *s != '\0') { os << '\\' << replace[s - search]; } else if (c < 32 || c >= 127) { os << '\\' << '0' << char ('0' + (c >> 6)) << char ('0' + ((c >> 3) & 7)) << char ('0' + (c & 7)); } else { os << (char)c; } return os; } /** * Text-dump a state (for debugging). */ ostream &operator<<(ostream &os, const NodeSet &state) { os << '{'; if (!state.empty()) { NodeSet::iterator i = state.begin(); for (;;) { os << (*i)->label; if (++i == state.end()) break; os << ','; } } os << '}'; return os; } ostream &operator<<(ostream &os, Node &node) { node.dump(os); return os; } /** * hash_NodeSet - generate a hash for the Nodes in the set */ unsigned long hash_NodeSet(NodeSet *ns) { unsigned long hash = 5381; for (NodeSet::iterator i = ns->begin(); i != ns->end(); i++) { hash = ((hash << 5) + hash) + (unsigned long)*i; } return hash; } /** * label_nodes - label the node positions for pretty-printing debug output * * TODO: separate - node labels should be separate and optional, if not * present pretty printing should use Node address */ void label_nodes(Node *root) { int nodes = 1; for (depth_first_traversal i(root); i; i++) i->label = nodes++; } /** * Text-dump the syntax tree (for debugging). */ void Node::dump_syntax_tree(ostream &os) { for (depth_first_traversal i(this); i; i++) { os << i->label << '\t'; if ((*i)->child[0] == 0) os << **i << '\t' << (*i)->followpos << endl; else { if ((*i)->child[1] == 0) os << (*i)->child[0]->label << **i; else os << (*i)->child[0]->label << **i << (*i)->child[1]->label; os << '\t' << (*i)->firstpos << (*i)->lastpos << endl; } } os << endl; } /* * Normalize the regex parse tree for factoring and cancelations. Normalization * reorganizes internal (alt and cat) nodes into a fixed "normalized" form that * simplifies factoring code, in that it produces a canonicalized form for * the direction being normalized so that the factoring code does not have * to consider as many cases. * * left normalization (dir == 0) uses these rules * (E | a) -> (a | E) * (a | b) | c -> a | (b | c) * (ab)c -> a(bc) * * right normalization (dir == 1) uses the same rules but reversed * (a | E) -> (E | a) * a | (b | c) -> (a | b) | c * a(bc) -> (ab)c * * Note: This is written iteratively for a given node (the top node stays * fixed and the children are rotated) instead of recursively. * For a given node under examination rotate over nodes from * dir to !dir. Until no dir direction node meets the criterial. * Then recurse to the children (which will have a different node type) * to make sure they are normalized. * Normalization of a child node is guarenteed to not affect the * normalization of the parent. * * For cat nodes the depth first traverse order is guarenteed to be * maintained. This is not necessary for altnodes. * * Eg. For left normalization * * |1 |1 * / \ / \ * |2 T -> a |2 * / \ / \ * |3 c b |3 * / \ / \ * a b c T * */ static void rotate_node(Node *t, int dir) { // (a | b) | c -> a | (b | c) // (ab)c -> a(bc) Node *left = t->child[dir]; t->child[dir] = left->child[dir]; left->child[dir] = left->child[!dir]; left->child[!dir] = t->child[!dir]; t->child[!dir] = left; } /* return False if no work done */ int TwoChildNode::normalize_eps(int dir) { if ((&epsnode == child[dir]) && (&epsnode != child[!dir])) { // (E | a) -> (a | E) // Ea -> aE // Test for E | (E | E) and E . (E . E) which will // result in an infinite loop Node *c = child[!dir]; if (dynamic_cast(c) && &epsnode == c->child[dir] && &epsnode == c->child[!dir]) { c->release(); c = &epsnode; } child[!dir] = child[dir]; child[dir] = c; return 1; } return 0; } void CatNode::normalize(int dir) { for (;;) { if (normalize_eps(dir)) { continue; } else if (dynamic_cast(child[dir])) { // (ab)c -> a(bc) rotate_node(this, dir); } else { break; } } if (child[dir]) child[dir]->normalize(dir); if (child[!dir]) child[!dir]->normalize(dir); } void AltNode::normalize(int dir) { for (;;) { if (normalize_eps(dir)) { continue; } else if (dynamic_cast(child[dir])) { // (a | b) | c -> a | (b | c) rotate_node(this, dir); } else if (dynamic_cast(child[dir]) && dynamic_cast(child[!dir])) { // [a] | b -> b | [a] Node *c = child[dir]; child[dir] = child[!dir]; child[!dir] = c; } else { break; } } if (child[dir]) child[dir]->normalize(dir); if (child[!dir]) child[!dir]->normalize(dir); } //charset conversion is disabled for now, //it hinders tree optimization in some cases, so it need to be either //done post optimization, or have extra factoring rules added #if 0 static Node *merge_charset(Node *a, Node *b) { if (dynamic_cast(a) && dynamic_cast(b)) { Chars chars; chars.insert(dynamic_cast(a)->c); chars.insert(dynamic_cast(b)->c); CharSetNode *n = new CharSetNode(chars); return n; } else if (dynamic_cast(a) && dynamic_cast(b)) { Chars *chars = &dynamic_cast(b)->chars; chars->insert(dynamic_cast(a)->c); return b; } else if (dynamic_cast(a) && dynamic_cast(b)) { Chars *from = &dynamic_cast(a)->chars; Chars *to = &dynamic_cast(b)->chars; for (Chars::iterator i = from->begin(); i != from->end(); i++) to->insert(*i); return b; } //return ???; } static Node *alt_to_charsets(Node *t, int dir) { /* Node *first = NULL; Node *p = t; Node *i = t; for (;dynamic_cast(i);) { if (dynamic_cast(i->child[dir]) || dynamic_cast(i->child[dir])) { if (!first) { first = i; p = i; i = i->child[!dir]; } else { first->child[dir] = merge_charset(first->child[dir], i->child[dir]); p->child[!dir] = i->child[!dir]; Node *tmp = i; i = tmp->child[!dir]; tmp->child[!dir] = NULL; tmp->release(); } } else { p = i; i = i->child[!dir]; } } // last altnode of chain check other dir as well if (first && (dynamic_cast(i) || dynamic_cast(i))) { } */ /* if (dynamic_cast(t->child[dir]) || dynamic_cast(t->child[dir])) char_test = true; (char_test && (dynamic_cast(i->child[dir]) || dynamic_cast(i->child[dir])))) { */ return t; } #endif static Node *basic_alt_factor(Node *t, int dir) { if (!dynamic_cast(t)) return t; if (t->child[dir]->eq(t->child[!dir])) { // (a | a) -> a Node *tmp = t->child[dir]; t->child[dir] = NULL; t->release(); return tmp; } // (ab) | (ac) -> a(b|c) if (dynamic_cast(t->child[dir]) && dynamic_cast(t->child[!dir]) && t->child[dir]->child[dir]->eq(t->child[!dir]->child[dir])) { // (ab) | (ac) -> a(b|c) Node *left = t->child[dir]; Node *right = t->child[!dir]; t->child[dir] = left->child[!dir]; t->child[!dir] = right->child[!dir]; right->child[!dir] = NULL; right->release(); left->child[!dir] = t; return left; } // a | (ab) -> a (E | b) -> a (b | E) if (dynamic_cast(t->child[!dir]) && t->child[dir]->eq(t->child[!dir]->child[dir])) { Node *c = t->child[!dir]; t->child[dir]->release(); t->child[dir] = c->child[!dir]; t->child[!dir] = &epsnode; c->child[!dir] = t; return c; } // ab | (a) -> a (b | E) if (dynamic_cast(t->child[dir]) && t->child[dir]->child[dir]->eq(t->child[!dir])) { Node *c = t->child[dir]; t->child[!dir]->release(); t->child[dir] = c->child[!dir]; t->child[!dir] = &epsnode; c->child[!dir] = t; return c; } return t; } static Node *basic_simplify(Node *t, int dir) { if (dynamic_cast(t) && &epsnode == t->child[!dir]) { // aE -> a Node *tmp = t->child[dir]; t->child[dir] = NULL; t->release(); return tmp; } return basic_alt_factor(t, dir); } /* * assumes a normalized tree. reductions shown for left normalization * aE -> a * (a | a) -> a ** factoring patterns * a | (a | b) -> (a | b) * a | (ab) -> a (E | b) -> a (b | E) * (ab) | (ac) -> a(b|c) * * returns t - if no simplifications were made * a new root node - if simplifications were made */ Node *simplify_tree_base(Node *t, int dir, bool &mod) { if (dynamic_cast(t)) return t; for (int i = 0; i < 2; i++) { if (t->child[i]) { Node *c = simplify_tree_base(t->child[i], dir, mod); if (c != t->child[i]) { t->child[i] = c; mod = true; } } } // only iterate on loop if modification made for (;; mod = true) { Node *tmp = basic_simplify(t, dir); if (tmp != t) { t = tmp; continue; } /* all tests after this must meet 2 alt node condition */ if (!dynamic_cast(t) || !dynamic_cast(t->child[!dir])) break; // a | (a | b) -> (a | b) // a | (b | (c | a)) -> (b | (c | a)) Node *p = t; Node *i = t->child[!dir]; for (; dynamic_cast(i); p = i, i = i->child[!dir]) { if (t->child[dir]->eq(i->child[dir])) { Node *tmp = t->child[!dir]; t->child[!dir] = NULL; t->release(); t = tmp; continue; } } // last altnode of chain check other dir as well if (t->child[dir]->eq(p->child[!dir])) { Node *tmp = t->child[!dir]; t->child[!dir] = NULL; t->release(); t = tmp; continue; } //exact match didn't work, try factoring front //a | (ac | (ad | () -> (a (E | c)) | (...) //ab | (ac | (...)) -> (a (b | c)) | (...) //ab | (a | (...)) -> (a (b | E)) | (...) Node *pp; int count = 0; Node *subject = t->child[dir]; Node *a = subject; if (dynamic_cast(subject)) a = subject->child[dir]; for (pp = p = t, i = t->child[!dir]; dynamic_cast(i);) { if ((dynamic_cast(i->child[dir]) && a->eq(i->child[dir]->child[dir])) || (a->eq(i->child[dir]))) { // extract matching alt node p->child[!dir] = i->child[!dir]; i->child[!dir] = subject; subject = basic_simplify(i, dir); if (dynamic_cast(subject)) a = subject->child[dir]; else a = subject; i = p->child[!dir]; count++; } else { pp = p; p = i; i = i->child[!dir]; } } // last altnode in chain check other dir as well if ((dynamic_cast(i) && a->eq(i->child[dir])) || (a->eq(i))) { count++; if (t == p) { t->child[dir] = subject; t = basic_simplify(t, dir); } else { t->child[dir] = p->child[dir]; p->child[dir] = subject; pp->child[!dir] = basic_simplify(p, dir); } } else { t->child[dir] = i; p->child[!dir] = subject; } if (count == 0) break; } return t; } int debug_tree(Node *t) { int nodes = 1; if (!dynamic_cast(t)) { if (t->child[0]) nodes += debug_tree(t->child[0]); if (t->child[1]) nodes += debug_tree(t->child[1]); } return nodes; } static void count_tree_nodes(Node *t, struct node_counts *counts) { if (dynamic_cast(t)) { counts->alt++; count_tree_nodes(t->child[0], counts); count_tree_nodes(t->child[1], counts); } else if (dynamic_cast(t)) { counts->cat++; count_tree_nodes(t->child[0], counts); count_tree_nodes(t->child[1], counts); } else if (dynamic_cast(t)) { counts->plus++; count_tree_nodes(t->child[0], counts); } else if (dynamic_cast(t)) { counts->star++; count_tree_nodes(t->child[0], counts); } else if (dynamic_cast(t)) { counts->charnode++; } else if (dynamic_cast(t)) { counts->any++; } else if (dynamic_cast(t)) { counts->charset++; } else if (dynamic_cast(t)) { counts->notcharset++; } } #include "stdio.h" #include "stdint.h" #include "apparmor_re.h" Node *simplify_tree(Node *t, dfaflags_t flags) { bool update; if (flags & DFA_DUMP_TREE_STATS) { struct node_counts counts = { 0, 0, 0, 0, 0, 0, 0, 0 }; count_tree_nodes(t, &counts); fprintf(stderr, "expr tree: c %d, [] %d, [^] %d, | %d, + %d, * %d, . %d, cat %d\n", counts.charnode, counts.charset, counts.notcharset, counts.alt, counts.plus, counts.star, counts.any, counts.cat); } do { update = false; //default to right normalize first as this reduces the number //of trailing nodes which might follow an internal * //or **, which is where state explosion can happen //eg. in one test this makes the difference between // the dfa having about 7 thousands states, // and it having about 1.25 million states int dir = 1; if (flags & DFA_CONTROL_TREE_LEFT) dir = 0; for (int count = 0; count < 2; count++) { bool modified; do { modified = false; if (flags & DFA_CONTROL_TREE_NORMAL) t->normalize(dir); t = simplify_tree_base(t, dir, modified); if (modified) update = true; } while (modified); if (flags & DFA_CONTROL_TREE_LEFT) dir++; else dir--; } } while (update); if (flags & DFA_DUMP_TREE_STATS) { struct node_counts counts = { 0, 0, 0, 0, 0, 0, 0, 0 }; count_tree_nodes(t, &counts); fprintf(stderr, "simplified expr tree: c %d, [] %d, [^] %d, | %d, + %d, * %d, . %d, cat %d\n", counts.charnode, counts.charset, counts.notcharset, counts.alt, counts.plus, counts.star, counts.any, counts.cat); } return t; } /** * Flip the children of all cat nodes. This causes strings to be matched * back-forth. */ void flip_tree(Node *node) { for (depth_first_traversal i(node); i; i++) { if (CatNode *cat = dynamic_cast(*i)) { swap(cat->child[0], cat->child[1]); } } } void dump_regex_rec(ostream &os, Node *tree) { if (tree->child[0]) dump_regex_rec(os, tree->child[0]); os << *tree; if (tree->child[1]) dump_regex_rec(os, tree->child[1]); } void dump_regex(ostream &os, Node *tree) { dump_regex_rec(os, tree); os << endl; } apparmor-2.11.0/parser/libapparmor_re/parse.y0000644000175000017500000001053312607537726017023 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2010 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Parsing of regular expression into expression trees as implemented in * expr-tree */ %{ /* #define DEBUG_TREE */ #include "expr-tree.h" %} %union { char c; Node *node; Chars *cset; } %{ void regex_error(Node **, const char *, const char *); #define YYLEX_PARAM &text int regex_lex(YYSTYPE *, const char **); static inline Chars *insert_char(Chars* cset, uchar a) { cset->insert(a); return cset; } static inline Chars* insert_char_range(Chars* cset, uchar a, uchar b) { if (a > b) swap(a, b); for (uchar i = a; i <= b; i++) cset->insert(i); return cset; } %} %define api.pure /* %error-verbose */ %lex-param {YYLEX_PARAM} %parse-param {Node **root} %parse-param {const char *text} %name-prefix "regex_" %token CHAR %type regex_char cset_char1 cset_char cset_charN %type charset cset_chars %type regex expr terms0 terms qterm term /** * Note: destroy all nodes upon failure, but *not* the start symbol once * parsing succeeds! */ %destructor { $$->release(); } expr terms0 terms qterm term %% /* FIXME: Does not parse "[--]", "[---]", "[^^-x]". I don't actually know which precise grammer Perl regexs use, and rediscovering that is proving to be painful. */ regex : /* empty */ { *root = $$ = &epsnode; } | expr { *root = $$ = $1; } ; expr : terms | expr '|' terms0 { $$ = new AltNode($1, $3); } | '|' terms0 { $$ = new AltNode(&epsnode, $2); } ; terms0 : /* empty */ { $$ = &epsnode; } | terms ; terms : qterm | terms qterm { $$ = new CatNode($1, $2); } ; qterm : term | term '*' { $$ = new StarNode($1); } | term '+' { $$ = new PlusNode($1); } ; term : '.' { $$ = new AnyCharNode; } | regex_char { $$ = new CharNode($1); } | '[' charset ']' { $$ = new CharSetNode(*$2); delete $2; } | '[' '^' charset ']' { $$ = new NotCharSetNode(*$3); delete $3; } | '[' '^' '^' cset_chars ']' { $4->insert('^'); $$ = new NotCharSetNode(*$4); delete $4; } | '(' regex ')' { $$ = $2; } ; regex_char : CHAR | '^' { $$ = '^'; } | '-' { $$ = '-'; } | ']' { $$ = ']'; } ; charset : cset_char1 cset_chars { $$ = insert_char($2, $1); } | cset_char1 '-' cset_charN cset_chars { $$ = insert_char_range($4, $1, $3); } ; cset_chars : /* nothing */ { $$ = new Chars; } | cset_chars cset_charN { $$ = insert_char($1, $2); } | cset_chars cset_charN '-' cset_charN { $$ = insert_char_range($1, $2, $4); } ; cset_char1 : cset_char | ']' { $$ = ']'; } | '-' { $$ = '-'; } ; cset_charN : cset_char | '^' { $$ = '^'; } ; cset_char : CHAR | '[' { $$ = '['; } | '*' { $$ = '*'; } | '+' { $$ = '+'; } | '.' { $$ = '.'; } | '|' { $$ = '|'; } | '(' { $$ = '('; } | ')' { $$ = ')'; } ; %% #include "../lib.h" int regex_lex(YYSTYPE *val, const char **pos) { int tmp; val->c = **pos; switch(*(*pos)++) { case '\0': (*pos)--; return 0; case '*': case '+': case '.': case '|': case '^': case '-': case '[': case ']': case '(' : case ')': return *(*pos - 1); case '\\': tmp = str_escseq(pos, "*+.|^$-[](){}"); if (tmp == -1) { /* bad escape sequence, just skip it for now, that * is output \\ followed by the invalid esc seq * TODO: output error message */ val->c = '\\'; (*pos)--; } else val->c = tmp; break; } return CHAR; } void regex_error(Node ** __attribute__((unused)), const char *text __attribute__((unused)), const char *error __attribute__((unused))) { /* We don't want the library to print error messages. */ } apparmor-2.11.0/parser/libapparmor_re/hfa.h0000644000175000017500000002053512401704710016406 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2012 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Base of implementation based on the Lexical Analysis chapter of: * Alfred V. Aho, Ravi Sethi, Jeffrey D. Ullman: * Compilers: Principles, Techniques, and Tools (The "Dragon Book"), * Addison-Wesley, 1986. */ #ifndef __LIBAA_RE_HFA_H #define __LIBAA_RE_HFA_H #include #include #include #include #include #include "expr-tree.h" #define DiffEncodeFlag 1 class State; typedef map StateTrans; typedef list Partition; #include "../immunix.h" class perms_t { public: perms_t(void) throw(int): allow(0), deny(0), audit(0), quiet(0), exact(0) { }; bool is_accept(void) { return (allow | audit | quiet); } void dump(ostream &os) { os << " (0x " << hex << allow << "/" << deny << "/" << audit << "/" << quiet << ')' << dec; } void clear(void) { allow = deny = audit = quiet = 0; } void add(perms_t &rhs) { deny |= rhs.deny; if (!is_merged_x_consistent(allow & ALL_USER_EXEC, rhs.allow & ALL_USER_EXEC)) { if ((exact & AA_USER_EXEC_TYPE) && !(rhs.exact & AA_USER_EXEC_TYPE)) { /* do nothing */ } else if ((rhs.exact & AA_USER_EXEC_TYPE) && !(exact & AA_USER_EXEC_TYPE)) { allow = (allow & ~AA_USER_EXEC_TYPE) | (rhs.allow & AA_USER_EXEC_TYPE); } else throw 1; } else allow |= rhs.allow & AA_USER_EXEC_TYPE; if (!is_merged_x_consistent(allow & ALL_OTHER_EXEC, rhs.allow & ALL_OTHER_EXEC)) { if ((exact & AA_OTHER_EXEC_TYPE) && !(rhs.exact & AA_OTHER_EXEC_TYPE)) { /* do nothing */ } else if ((rhs.exact & AA_OTHER_EXEC_TYPE) && !(exact & AA_OTHER_EXEC_TYPE)) { allow = (allow & ~AA_OTHER_EXEC_TYPE) | (rhs.allow & AA_OTHER_EXEC_TYPE); } else throw 1; } else allow |= rhs.allow & AA_OTHER_EXEC_TYPE; allow = (allow | (rhs.allow & ~ALL_AA_EXEC_TYPE)); audit |= rhs.audit; quiet = (quiet | rhs.quiet); /* if (exec & AA_USER_EXEC_TYPE && (exec & AA_USER_EXEC_TYPE) != (allow & AA_USER_EXEC_TYPE)) throw 1; if (exec & AA_OTHER_EXEC_TYPE && (exec & AA_OTHER_EXEC_TYPE) != (allow & AA_OTHER_EXEC_TYPE)) throw 1; */ } int apply_and_clear_deny(void) { if (deny) { allow &= ~deny; quiet &= deny; deny = 0; return !is_accept(); } return 0; } bool operator<(perms_t const &rhs)const { if (allow < rhs.allow) return allow < rhs.allow; if (deny < rhs.deny) return deny < rhs.deny; if (audit < rhs.audit) return audit < rhs.audit; return quiet < rhs.quiet; } uint32_t allow, deny, audit, quiet, exact; }; int accept_perms(NodeSet *state, perms_t &perms); /* * ProtoState - NodeSet and ancillery information used to create a state */ class ProtoState { public: hashedNodeVec *nnodes; NodeSet *anodes; /* init is used instead of a constructor because ProtoState is used * in a union */ void init(hashedNodeVec *n, NodeSet *a = NULL) { nnodes = n; anodes = a; } bool operator<(ProtoState const &rhs)const { if (nnodes == rhs.nnodes) return anodes < rhs.anodes; return nnodes < rhs.nnodes; } unsigned long size(void) { if (anodes) return nnodes->size() + anodes->size(); return nnodes->size(); } }; /* Temporary state structure used when building differential encoding * @parents - set of states that have transitions to this state * @depth - level in the DAG * @state - back reference to state this DAG entry belongs * @rel - state that this state is relative to for differential encoding */ struct DiffDag { Partition parents; int depth; State *state; State *rel; }; /* * State - DFA individual state information * label: a unique label to identify the state used for pretty printing * the non-matching state is setup to have label == 0 and * the start state is setup to have label == 1 * audit: the audit permission mask for the state * accept: the accept permissions for the state * trans: set of transitions from this state * otherwise: the default state for transitions not in @trans * parition: Is a temporary work variable used during dfa minimization. * it can be replaced with a map, but that is slower and uses more * memory. * proto: Is a temporary work variable used during dfa creation. It can * be replaced by using the nodemap, but that is slower */ class State { public: State(int l, ProtoState &n, State *other) throw(int): label(l), flags(0), perms(), trans() { int error; if (other) otherwise = other; else otherwise = this; proto = n; /* Compute permissions associated with the State. */ error = accept_perms(n.anodes, perms); if (error) { //cerr << "Failing on accept perms " << error << "\n"; throw error; } }; State *next(uchar c) { State *state = this; do { StateTrans::iterator i = state->trans.find(c); if (i != state->trans.end()) return i->second; if (!(state->flags & DiffEncodeFlag)) return state->otherwise; state = state->otherwise; } while (state); /* never reached */ assert(0); return NULL; } int diff_weight(State *rel); int make_relative(State *rel); void flatten_relative(void); int apply_and_clear_deny(void) { return perms.apply_and_clear_deny(); } int label; int flags; perms_t perms; StateTrans trans; State *otherwise; /* temp storage for State construction */ union { Partition *partition; /* used during minimization */ ProtoState proto; /* used during creation */ DiffDag *diff; /* used during diff encoding */ }; }; ostream &operator<<(ostream &os, const State &state); class NodeMap: public CacheStats { public: typedef map::iterator iterator; iterator begin() { return cache.begin(); } iterator end() { return cache.end(); } map cache; NodeMap(void): cache() { }; ~NodeMap() { clear(); }; virtual unsigned long size(void) const { return cache.size(); } void clear() { cache.clear(); CacheStats::clear(); } pair insert(ProtoState &proto, State *state) { pair uniq; uniq = cache.insert(make_pair(proto, state)); if (uniq.second == false) { dup++; } else { sum += proto.size(); if (proto.size() > max) max = proto.size(); } return uniq; } }; /* Transitions in the DFA. */ class DFA { void dump_node_to_dfa(void); State *add_new_state(NodeSet *nodes, State *other); State *add_new_state(NodeSet *anodes, NodeSet *nnodes, State *other); void update_state_transitions(State *state); void process_work_queue(const char *header, dfaflags_t); void dump_diff_chain(ostream &os, map &relmap, Partition &chain, State *state, unsigned int &count, unsigned int &total, unsigned int &max); /* temporary values used during computations */ NodeCache anodes_cache; NodeVecCache nnodes_cache; NodeMap node_map; list work_queue; public: DFA(Node *root, dfaflags_t flags); virtual ~DFA(); State *match_len(State *state, const char *str, size_t len); State *match_until(State *state, const char *str, const char term); State *match(const char *str); void remove_unreachable(dfaflags_t flags); bool same_mappings(State *s1, State *s2); void minimize(dfaflags_t flags); int apply_and_clear_deny(void); void diff_encode(dfaflags_t flags); void undiff_encode(void); void dump_diff_encode(ostream &os); void dump(ostream &os); void dump_dot_graph(ostream &os); void dump_uniq_perms(const char *s); map equivalence_classes(dfaflags_t flags); void apply_equivalence_classes(map &eq); unsigned int diffcount; Node *root; State *nonmatching, *start; Partition states; }; void dump_equivalence_classes(ostream &os, map &eq); #endif /* __LIBAA_RE_HFA_H */ apparmor-2.11.0/parser/libapparmor_re/README0000644000175000017500000001037710604456124016370 0ustar jjjjRegular Expression Scanner Generator ==================================== Notes in the scanner File Format -------------------------------- The file format used is based on the GNU flex table file format (--tables-file option; see Table File Format in the flex info pages and the flex sources for documentation). The magic number used in the header is set to 0x1B5E783D insted of 0xF13C57B1 though, which is meant to indicate that the file format logically is not the same: the YY_ID_CHK (check) and YY_ID_DEF (default) tables are used differently. Flex uses state compression to store only the differences between states for states that are similar. The amount of compresion influences the parse speed. The following two states could be stored as in the tables outlined below: States and transitions on specific characters to next states ------------------------------------------------------------ 1: ('a' => 2, 'b' => 3, 'c' => 4) 2: ('a' => 2, 'b' => 3, 'd' => 5) Flex-like table format ---------------------- index: (default, base) 0: ( 0, 0) <== dummy state (nonmatching) 1: ( 0, 0) 2: ( 1, 256) index: (next, check) 0: ( 0, 0) <== unused entry ( 0, 1) <== ord('a') identical entries 0+'a': ( 2, 1) 0+'b': ( 3, 1) 0+'c': ( 4, 1) ( 0, 1) <== (255 - ord('c')) identical entries 256+'c': ( 0, 2) 256+'d': ( 5, 2) Here, state 2 is described as ('c' => 0, 'd' => 5), and everything else as in state 1. The matching algorithm is as follows. Flex-like scanner algorithm --------------------------- /* current state is in , input character */ while (check[base[state] + c] != state) state = default[state]; state = next[state]; /* continue with the next input character */ This state compression algorithm performs well, except when there are many inverted or wildcard matches ("[^x]", "."). Each input character may cause several iterations in the while loop. We will have many inverted character classes ("[^/]") that wouldn't compress very well. Therefore, the regexp matcher uses no state compression, and uses the check and default tables differently. The above states could be stored as follows: Regexp table format ------------------- index: (default, base) 0: ( 0, 0) <== dummy state (nonmatching) 1: ( 0, 0) 2: ( 1, 3) index: (next, check) 0: ( 0, 0) <== unused entry ( 0, 0) <== ord('a') identical, unused entries 0+'a': ( 2, 1) 0+'b': ( 3, 1) 0+'c': ( 4, 1) 3+'a': ( 2, 2) 3+'b': ( 3, 2) 3+'c': ( 0, 0) <== entry is unused 3+'d': ( 5, 2) ( 0, 0) <== (255 - ord('d')) identical, unused entries All the entries with 0 in check (except the first entry, which is deliberately reserved) are still available for other states that fit in there. Regexp scanner algorithm ------------------------ /* current state is in , matching character */ if (check[base[state] + c] == state) state = next[state]; else state = default[state]; /* continue with the next input character */ This representation and algorithm allows states which match more characters than they do not match to be represented as their inverse. For example, a third state that accepts everything other than 'a' can be added to the tables as one entry in (default, base) and one entry in (next, check): State ----- 3: ('a' => 0, everything else => 5) Regexp tables ------------- index: (default, base) 0: ( 0, 0) <== dummy state (nonmatching) 1: ( 0, 0) 2: ( 1, 3) 3: ( 5, 7) index: (next, check) 0: ( 0, 0) <== unused entry ( 0, 0) <== ord('a') identical, unused entries 0+'a': ( 2, 1) 0+'b': ( 3, 1) 0+'c': ( 4, 1) 3+'a': ( 2, 2) 3+'b': ( 3, 2) 3+'c': ( 0, 0) <== entry is unused 3+'d': ( 5, 2) 7+'a': ( 0, 3) ( 0, 0) <== (255 - ord('a')) identical, unused entries While the current code does not implement any form of state compression, the flex state compression representation could be combined by remembering (in a bit per state, for example) which default entries refer to inverted matches, and which refer to parent states. apparmor-2.11.0/parser/libapparmor_re/hfa.cc0000644000175000017500000011207512502330163016544 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2012 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Base of implementation based on the Lexical Analysis chapter of: * Alfred V. Aho, Ravi Sethi, Jeffrey D. Ullman: * Compilers: Principles, Techniques, and Tools (The "Dragon Book"), * Addison-Wesley, 1986. */ #include #include #include #include #include #include #include #include #include #include "expr-tree.h" #include "hfa.h" #include "../immunix.h" ostream &operator<<(ostream &os, const CacheStats &cache) { /* dump the state label */ os << "cache: size="; os << cache.size(); os << " dups="; os << cache.dup; os << " longest="; os << cache.max; if (cache.size()) { os << " avg="; os << cache.sum / cache.size(); } return os; } ostream &operator<<(ostream &os, const ProtoState &proto) { /* dump the state label */ os << '{'; os << proto.nnodes; os << ','; os << proto.anodes; os << '}'; return os; } ostream &operator<<(ostream &os, const State &state) { /* dump the state label */ os << '{'; os << state.label; os << '}'; return os; } /** * diff_weight - Find differential compression distance between @rel and @this * @rel: State to compare too * Returns: An integer indicating how good rel is as a base, larger == better * * Find the relative weighted difference for differential state compression * with queried state being compressed against @rel * * +1 for each transition that matches (char and dest - saves a transition) * 0 for each transition that doesn't match and exists in both states * 0 for transition that self has and @other doesn't (no extra required) * -1 for each transition that is in @rel and not in @this (have to override) * * @rel should not be a state that has already been made differential or it may * introduce extra transitions as it does not recurse to find all transitions * * Should be applied after state minimization */ int State::diff_weight(State *rel) { int weight = 0; if (this == rel) return 0; if (rel->diff->rel) { /* Can only be diff encoded against states that are relative * to a state of a lower depth. ie, at most one sibling in * the chain */ if (rel->diff->rel->diff->depth >= this->diff->depth) return 0; } else if (rel->diff->depth >= this->diff->depth) return 0; if (rel->flags & DiffEncodeFlag) { for (int i = 0; i < 256; i++) { State *state = rel->next(i); StateTrans::iterator j = trans.find(i); if (j != trans.end()) { if (state == j->second) weight++; /* else 0 - keep transition to mask */ } else if (state == otherwise) { /* 0 - match of default against @rel * We don't save a transition but don't have * to mask either */ } else { /* @rel has transition not covered by @this. * Need to add a transition to mask it */ weight--; } } return weight; } unsigned int count = 0; for (StateTrans::iterator i = rel->trans.begin(); i != rel->trans.end(); i++) { StateTrans::iterator j = trans.find(i->first); if (j != trans.end()) { if (i->second == j->second) weight++; /* } else { 0 - keep transition to mask */ count++; } else if (i->second == otherwise) { /* 0 - match of default against @rel * We don't save a transition but don't have to * mask either */ } else { /* rel has transition not covered by @this. Need to * add a transition to mask */ weight--; } } /* cover transitions in @this but not in @rel */ unsigned int this_count = 0; if (count < trans.size()) { for (StateTrans::iterator i = trans.begin(); i != trans.end(); i++) { StateTrans::iterator j = rel->trans.find(i->first); if (j == rel->trans.end()) { this_count++; if (i->second == rel->otherwise) /* replaced by rel->cases.otherwise */ weight++; } } } if (rel->otherwise != otherwise) { /* rel default transitions have to be masked with transitions * This covers all transitions not covered above */ weight -= 256 - (rel->trans.size() + this_count); } return weight; } /** * make_relative - Make this state relative to @rel * @rel: state to make this state relative too * * @rel can be a relative (differentially compressed state) */ int State::make_relative(State *rel) { int weight = 0; if (this == rel || !rel) return 0; if (flags & DiffEncodeFlag) return 0; flags |= DiffEncodeFlag; for (int i = 0; i < 256 ; i++) { State *next = rel->next(i); StateTrans::iterator j = trans.find(i); if (j != trans.end()) { if (j->second == next) { trans.erase(j); weight++; } /* else keep transition to mask */ } else if (otherwise == next) { /* do nothing, otherwise transition disappears when * reassigned */ } else { /* need a new transition to mask those in lower state */ trans[i] = otherwise; weight--; } } otherwise = rel; return weight; } /** * flatten_differential - remove differential encode from this state */ void State::flatten_relative(void) { if (!(flags & DiffEncodeFlag)) return; map count; for (int i = 0; i < 256; i++) count[next(i)] += 1; int j = 0; State *def = next(0); for (int i = 1; i < 256; i++) { if (count[next(i)] > count[next(j)]) { j = i; def = next(i); } } for (int i = 0; i < 256; i++) { if (trans.find(i) != trans.end()) { if (trans[i] == def) trans.erase(i); } else { if (trans[i] != def) trans[i] = next(i); } } otherwise = def; flags = flags & ~DiffEncodeFlag; } static void split_node_types(NodeSet *nodes, NodeSet **anodes, NodeSet **nnodes ) { *anodes = *nnodes = NULL; for (NodeSet::iterator i = nodes->begin(); i != nodes->end(); ) { if ((*i)->is_accept()) { if (!*anodes) *anodes = new NodeSet; (*anodes)->insert(*i); NodeSet::iterator k = i++; nodes->erase(k); } else i++; } *nnodes = nodes; } State *DFA::add_new_state(NodeSet *anodes, NodeSet *nnodes, State *other) { hashedNodeVec *nnodev; nnodev = nnodes_cache.insert(nnodes); anodes = anodes_cache.insert(anodes); ProtoState proto; proto.init(nnodev, anodes); State *state = new State(node_map.size(), proto, other); pair x = node_map.insert(proto, state); if (x.second == false) { delete state; } else { states.push_back(state); work_queue.push_back(state); } return x.first->second; } State *DFA::add_new_state(NodeSet *nodes, State *other) { /* The splitting of nodes should probably get pushed down into * follow(), ie. put in separate lists from the start */ NodeSet *anodes, *nnodes; split_node_types(nodes, &anodes, &nnodes); State *state = add_new_state(anodes, nnodes, other); return state; } void DFA::update_state_transitions(State *state) { /* Compute possible transitions for state->nodes. This is done by * iterating over all the nodes in state->nodes and combining the * transitions. * * The resultant transition set is a mapping of characters to * sets of nodes. * * Note: the follow set for accept nodes is always empty so we don't * need to compute follow for the accept nodes in a protostate */ Cases cases; for (hashedNodeVec::iterator i = state->proto.nnodes->begin(); i != state->proto.nnodes->end(); i++) (*i)->follow(cases); /* Now for each set of nodes in the computed transitions, make * sure that there is a state that maps to it, and add the * matching case to the state. */ /* check the default transition first */ if (cases.otherwise) state->otherwise = add_new_state(cases.otherwise, nonmatching); else state->otherwise = nonmatching; /* For each transition from *from, check if the set of nodes it * transitions to already has been mapped to a state */ for (Cases::iterator j = cases.begin(); j != cases.end(); j++) { State *target; target = add_new_state(j->second, nonmatching); /* Don't insert transition that the otherwise transition * already covers */ if (target != state->otherwise) state->trans[j->first] = target; } } /* WARNING: This routine can only be called from within DFA creation as * the nodes value is only valid during dfa construction. */ void DFA::dump_node_to_dfa(void) { cerr << "Mapping of States to expr nodes\n" " State <= Nodes\n" "-------------------\n"; for (Partition::iterator i = states.begin(); i != states.end(); i++) cerr << " " << (*i)->label << " <= " << (*i)->proto << "\n"; } void DFA::process_work_queue(const char *header, dfaflags_t flags) { int i = 0; while (!work_queue.empty()) { if (i % 1000 == 0 && (flags & DFA_DUMP_PROGRESS)) { cerr << "\033[2K" << header << ": queue " << work_queue.size() << "\tstates " << states.size() << "\teliminated duplicates " << node_map.dup << "\r"; } i++; State *from = work_queue.front(); work_queue.pop_front(); /* Update 'from's transitions, and if it transitions to any * unknown State create it and add it to the work_queue */ update_state_transitions(from); } /* while (!work_queue.empty()) */ } /** * Construct a DFA from a syntax tree. */ DFA::DFA(Node *root, dfaflags_t flags): root(root) { diffcount = 0; /* set by diff_encode */ if (flags & DFA_DUMP_PROGRESS) fprintf(stderr, "Creating dfa:\r"); for (depth_first_traversal i(root); i; i++) { (*i)->compute_nullable(); (*i)->compute_firstpos(); (*i)->compute_lastpos(); } if (flags & DFA_DUMP_PROGRESS) fprintf(stderr, "Creating dfa: followpos\r"); for (depth_first_traversal i(root); i; i++) { (*i)->compute_followpos(); } nonmatching = add_new_state(new NodeSet, NULL); start = add_new_state(new NodeSet(root->firstpos), nonmatching); /* the work_queue contains the states that need to have their * transitions computed. This could be done with a recursive * algorithm instead of a work_queue, but it would be slightly slower * and consume more memory. * * TODO: currently the work_queue is treated in a breadth first * search manner. Test using the work_queue in a depth first * manner, this may help reduce the number of entries on the * work_queue at any given time, thus reducing peak memory use. */ work_queue.push_back(start); process_work_queue("Creating dfa", flags); /* cleanup Sets of nodes used computing the DFA as they are no longer * needed. */ for (depth_first_traversal i(root); i; i++) { (*i)->firstpos.clear(); (*i)->lastpos.clear(); (*i)->followpos.clear(); } if (flags & DFA_DUMP_NODE_TO_DFA) dump_node_to_dfa(); if (flags & (DFA_DUMP_STATS)) { cerr << "\033[2KCreated dfa: states " << states.size() << " proto { " << node_map << " }, nnodes { " << nnodes_cache << " }, anodes { " << anodes_cache << " }\n"; } /* Clear out uniq_nnodes as they are no longer needed. * Do not clear out uniq_anodes, as we need them for minimizations * diffs, unions, ... */ nnodes_cache.clear(); node_map.clear(); } DFA::~DFA() { anodes_cache.clear(); nnodes_cache.clear(); for (Partition::iterator i = states.begin(); i != states.end(); i++) delete *i; } State *DFA::match_len(State *state, const char *str, size_t len) { for (; len > 0; ++str, --len) state = state->next(*str); return state; } State *DFA::match_until(State *state, const char *str, const char term) { while (*str != term) state = state->next(*str++); return state; } State *DFA::match(const char *str) { return match_until(start, str, 0); } void DFA::dump_uniq_perms(const char *s) { set uniq; for (Partition::iterator i = states.begin(); i != states.end(); i++) uniq.insert((*i)->perms); cerr << "Unique Permission sets: " << s << " (" << uniq.size() << ")\n"; cerr << "----------------------\n"; for (set::iterator i = uniq.begin(); i != uniq.end(); i++) { cerr << " allow:" << hex << i->allow << " deny:" << i->deny << " audit:" << i->audit << " quiet:" << i->quiet << dec << "\n"; } } /* Remove dead or unreachable states */ void DFA::remove_unreachable(dfaflags_t flags) { set reachable; /* find the set of reachable states */ reachable.insert(nonmatching); work_queue.push_back(start); while (!work_queue.empty()) { State *from = work_queue.front(); work_queue.pop_front(); reachable.insert(from); if (from->otherwise != nonmatching && reachable.find(from->otherwise) == reachable.end()) work_queue.push_back(from->otherwise); for (StateTrans::iterator j = from->trans.begin(); j != from->trans.end(); j++) { if (reachable.find(j->second) == reachable.end()) work_queue.push_back(j->second); } } /* walk the set of states and remove any that aren't reachable */ if (reachable.size() < states.size()) { int count = 0; Partition::iterator i; Partition::iterator next; for (i = states.begin(); i != states.end(); i = next) { next = i; next++; if (reachable.find(*i) == reachable.end()) { if (flags & DFA_DUMP_UNREACHABLE) { cerr << "unreachable: " << **i; if (*i == start) cerr << " <=="; if ((*i)->perms.is_accept()) (*i)->perms.dump(cerr); cerr << "\n"; } State *current = *i; states.erase(i); delete(current); count++; } } if (count && (flags & DFA_DUMP_STATS)) cerr << "DFA: states " << states.size() << " removed " << count << " unreachable states\n"; } } /* test if two states have the same transitions under partition_map */ bool DFA::same_mappings(State *s1, State *s2) { /* assumes otherwise is set to best choice, if there are multiple * otherwise choices this will fail to fully minimize the dfa * if we are not careful. Make sure in cases with multiple * equiv otherwise we always choose the same otherwise to avoid */ if (s1->otherwise->partition != s2->otherwise->partition) return false; StateTrans::iterator j1; StateTrans::iterator j2; for (j1 = s1->trans.begin(), j2 = s2->trans.begin(); j1 != s1->trans.end() && j2 != s2->trans.end(); /*inc inline*/) { if (j1->first < j2->first) { if (j1->second->partition != s2->otherwise->partition) return false; j1++; } else if (j1->first == j2->first) { if (j1->second->partition != j2->second->partition) return false; j1++; j2++; } else { if (s1->otherwise->partition != j2->second->partition) return false; j2++; } } for ( ; j1 != s1->trans.end(); j1++) { if (j1->second->partition != s2->otherwise->partition) return false; } for ( ; j2 != s2->trans.end(); j2++) { if (j2->second->partition != s1->otherwise->partition) return false; } return true; } int DFA::apply_and_clear_deny(void) { int c = 0; for (Partition::iterator i = states.begin(); i != states.end(); i++) c += (*i)->apply_and_clear_deny(); return c; } /* minimize the number of dfa states */ void DFA::minimize(dfaflags_t flags) { map, Partition *> perm_map; list partitions; /* Set up the initial partitions * minimium of - 1 non accepting, and 1 accepting * if trans hashing is used the accepting and non-accepting partitions * can be further split based on the number and type of transitions * a state makes. * If permission hashing is enabled the accepting partitions can * be further divided by permissions. This can result in not * obtaining a truely minimized dfa but comes close, and can speedup * minimization. */ int accept_count = 0; int final_accept = 0; for (Partition::iterator i = states.begin(); i != states.end(); i++) { size_t hash = 0; uint64_t permtype = ((uint64_t) (PACK_AUDIT_CTL((*i)->perms.audit, (*i)->perms.quiet & (*i)->perms.deny)) << 32) | (uint64_t) (*i)->perms.allow; pair group = make_pair(permtype, hash); map, Partition *>::iterator p = perm_map.find(group); if (p == perm_map.end()) { Partition *part = new Partition(); part->push_back(*i); perm_map.insert(make_pair(group, part)); partitions.push_back(part); (*i)->partition = part; if (permtype) accept_count++; } else { (*i)->partition = p->second; p->second->push_back(*i); } if ((flags & DFA_DUMP_PROGRESS) && (partitions.size() % 1000 == 0)) cerr << "\033[2KMinimize dfa: partitions " << partitions.size() << "\tinit " << partitions.size() << " (accept " << accept_count << ")\r"; } /* perm_map is no longer needed so free the memory it is using. * Don't remove - doing it manually here helps reduce peak memory usage. */ perm_map.clear(); int init_count = partitions.size(); if (flags & DFA_DUMP_PROGRESS) cerr << "\033[2KMinimize dfa: partitions " << partitions.size() << "\tinit " << init_count << " (accept " << accept_count << ")\r"; /* Now do repartitioning until each partition contains the set of * states that are the same. This will happen when the partition * splitting stables. With a worse case of 1 state per partition * ie. already minimized. */ Partition *new_part; int new_part_count; do { new_part_count = 0; for (list::iterator p = partitions.begin(); p != partitions.end(); p++) { new_part = NULL; State *rep = *((*p)->begin()); Partition::iterator next; for (Partition::iterator s = ++(*p)->begin(); s != (*p)->end();) { if (same_mappings(rep, *s)) { ++s; continue; } if (!new_part) { new_part = new Partition; list::iterator tmp = p; partitions.insert(++tmp, new_part); new_part_count++; } new_part->push_back(*s); s = (*p)->erase(s); } /* remapping partition_map for new_part entries * Do not do this above as it messes up same_mappings */ if (new_part) { for (Partition::iterator m = new_part->begin(); m != new_part->end(); m++) { (*m)->partition = new_part; } } if ((flags & DFA_DUMP_PROGRESS) && (partitions.size() % 100 == 0)) cerr << "\033[2KMinimize dfa: partitions " << partitions.size() << "\tinit " << init_count << " (accept " << accept_count << ")\r"; } } while (new_part_count); if (partitions.size() == states.size()) { if (flags & DFA_DUMP_STATS) cerr << "\033[2KDfa minimization no states removed: partitions " << partitions.size() << "\tinit " << init_count << " (accept " << accept_count << ")\n"; goto out; } /* Remap the dfa so it uses the representative states * Use the first state of a partition as the representative state * At this point all states with in a partion have transitions * to states within the same partitions, however this can slow * down compressed dfa compression as there are more states, */ if (flags & DFA_DUMP_MIN_PARTS) cerr << "Partitions after minimization\n"; for (list::iterator p = partitions.begin(); p != partitions.end(); p++) { /* representative state for this partition */ State *rep = *((*p)->begin()); if (flags & DFA_DUMP_MIN_PARTS) cerr << *rep << " : "; /* update representative state's transitions */ rep->otherwise = *rep->otherwise->partition->begin(); for (StateTrans::iterator c = rep->trans.begin(); c != rep->trans.end(); ) { Partition *partition = c->second->partition; if (rep->otherwise != *partition->begin()) { c->second = *partition->begin(); c++; } else /* transition is now covered by otherwise */ c = rep->trans.erase(c); } //if ((*p)->size() > 1) //cerr << rep->label << ": "; /* clear the state label for all non representative states, * and accumulate permissions */ for (Partition::iterator i = ++(*p)->begin(); i != (*p)->end(); i++) { //cerr << " " << (*i)->label; if (flags & DFA_DUMP_MIN_PARTS) cerr << **i << ", "; (*i)->label = -1; rep->perms.add((*i)->perms); } if (rep->perms.is_accept()) final_accept++; //if ((*p)->size() > 1) //cerr << "\n"; if (flags & DFA_DUMP_MIN_PARTS) cerr << "\n"; } if (flags & DFA_DUMP_STATS) cerr << "\033[2KMinimized dfa: final partitions " << partitions.size() << " (accept " << final_accept << ")" << "\tinit " << init_count << " (accept " << accept_count << ")\n"; /* make sure nonmatching and start state are up to date with the * mappings */ { Partition *partition = nonmatching->partition; if (*partition->begin() != nonmatching) { nonmatching = *partition->begin(); } partition = start->partition; if (*partition->begin() != start) { start = *partition->begin(); } } /* Now that the states have been remapped, remove all states * that are not the representive states for their partition, they * will have a label == -1 */ for (Partition::iterator i = states.begin(); i != states.end();) { if ((*i)->label == -1) { State *s = *i; i = states.erase(i); delete(s); } else i++; } out: /* Cleanup */ while (!partitions.empty()) { Partition *p = partitions.front(); partitions.pop_front(); delete(p); } } /* diff_encode helper functions */ static unsigned int add_to_dag(DiffDag *dag, State *state, State *parent) { unsigned int rc = 0; if (!state->diff) { dag->rel = NULL; if (parent) dag->depth = parent->diff->depth + 1; else dag->depth = 1; dag->state = state; state->diff = dag; rc = 1; } if (parent && parent->diff->depth < state->diff->depth) state->diff->parents.push_back(parent); return rc; } static int diff_partition(State *state, Partition &part, State **candidate) { int weight = 0; *candidate = NULL; for (Partition::iterator i = part.begin(); i != part.end(); i++) { if (*i == state) continue; int tmp = state->diff_weight(*i); if (tmp > weight) { weight = tmp; *candidate = *i; } } return weight; } /** * diff_encode - compress dfa by differentially encoding state transitions * @dfa_flags: flags controling dfa creation * * This function reduces the number of transitions that need to be stored * by encoding transitions as the difference between the state and a * another transitions that is set as the states default. * * For performance reasons this function does not try to compute the * absolute best encoding (maximal spanning tree) but instead computes * a very good encoding within the following limitations. * - Not all states have to be differentially encoded. This allows for * multiple states to be used as a terminating basis. * - The number of state transitions needed to match an input of length * m will be 2m * * To guarentee this the ordering and distance calculation is done in the * following manner. * - A DAG of the DFA is created starting with the start state(s). * - A state can only be relative (have a differential encoding) to * another state if that state has * - a lower depth in the DAG * - is a sibling (same depth) that is not relative * - is a sibling that is relative to a state with lower depth in the DAG * * The run time constraints are maintained by the DAG ordering + relative * state constraints. For any input character C when at state S with S being * at level N in the DAG then at most 2N states must be traversed to find the * transition for C. However on the maximal number of transitions is not m*m, * because when a character is matched and forward movement is made through * the DFA any relative transition search will move back through the DAG order. * So say for character C we start matching on a state S that is at depth 10 * in the DAG. The transition for C is not found in S and we recurse backwards * to a depth of 6. A transition is found and it steps to the next state, but * the state transition at most will only move 1 deeper into the DAG so for * the next state the maximum number of states traversed is 2*7. */ void DFA::diff_encode(dfaflags_t flags) { DiffDag *dag; unsigned int xcount = 0, xweight = 0, transitions = 0, depth = 0; /* clear the depth flag */ for (Partition::iterator i = states.begin(); i != states.end(); i++) { (*i)->diff = NULL; transitions += (*i)->trans.size(); } /* Prealloc structures we need. We know the exact number of elements, * and once setup they don't change so we don't need the flexibility * or overhead of stl, just allocate the needed data as an array */ dag = new DiffDag [states.size()]; /* Generate DAG ordering and parent sets */ add_to_dag(&dag[0], nonmatching, NULL); add_to_dag(&dag[1], start, NULL); unsigned int tail = 2; for (unsigned int i = 1; i < tail; i++) { State *state = dag[i].state; State *child = dag[i].state->otherwise; if (child) tail += add_to_dag(&dag[tail], child, state); for (StateTrans::iterator j = state->trans.begin(); j != state->trans.end(); j++) { child = j->second; tail += add_to_dag(&dag[tail], child, state); } } depth = dag[tail - 1].depth; /* calculate which state to make a transitions relative too */ for (unsigned int i = 2; i < tail; i++) { State *state = dag[i].state; State *candidate = NULL; int weight = diff_partition(state, state->otherwise->diff->parents, &candidate); for (StateTrans::iterator j = state->trans.begin(); j != state->trans.end(); j++) { State *tmp_candidate; int tmp = diff_partition(state, j->second->diff->parents, &tmp_candidate); if (tmp > weight) { weight = tmp; candidate = tmp_candidate; } } if ((flags & DFA_DUMP_DIFF_PROGRESS) && (i % 100 == 0)) cerr << "\033[2KDiff Encode: " << i << " of " << tail << ". Diff states " << xcount << " Savings " << xweight << "\r"; state->diff->rel = candidate; if (candidate) { xcount++; xweight += weight; } } /* now make transitions relative, start at the back of the list so * as to start with the last transitions and work backwards to avoid * having to traverse multiple previous states (that have been made * relative already) to reconstruct previous state transition table */ unsigned int aweight = 0; diffcount = 0; for (int i = tail - 1; i > 1; i--) { if (dag[i].rel) { int weight = dag[i].state->make_relative(dag[i].rel); aweight += weight; diffcount++; } } if (flags & DFA_DUMP_DIFF_STATS) cerr << "Diff encode states: " << diffcount << " of " << tail << " reached @ depth " << depth << ". " << aweight << " trans removed\n"; if (xweight != aweight) cerr << "Diff encode error: actual savings " << aweight << " != expected " << xweight << "\n"; if (xcount != diffcount) cerr << "Diff encode error: actual count " << diffcount << " != expected " << xcount << " \n"; /* cleanup */ for (unsigned int i = 0; i < tail; i++) dag[i].parents.clear(); delete [] dag; } /** * flatten_differential - remove differential state encoding * * Flatten the dfa back into a flat encoding. */ void DFA::undiff_encode(void) { for (Partition::iterator i = states.begin(); i != states.end(); i++) (*i)->flatten_relative(); diffcount = 0; } void DFA::dump_diff_chain(ostream &os, map &relmap, Partition &chain, State *state, unsigned int &count, unsigned int &total, unsigned int &max) { if (relmap[state].size() == 0) { for (Partition::iterator i = chain.begin(); i != chain.end(); i++) os << **i << " <- "; os << *state << "\n"; count++; total += chain.size() + 1; if (chain.size() + 1 > max) max = chain.size() + 1; } chain.push_back(state); for (Partition::iterator i = relmap[state].begin(); i != relmap[state].end(); i++) dump_diff_chain(os, relmap, chain, *i, count, total, max); chain.pop_back(); } /* Dump the DFA diff_encoding chains */ void DFA::dump_diff_encode(ostream &os) { map rel; Partition base, chain; for (Partition::iterator i = states.begin(); i != states.end(); i++) { if ((*i)->flags & DiffEncodeFlag) rel[(*i)->otherwise].push_back(*i); else base.push_back(*i); } unsigned int count = 0, total = 0, max = 0; for (Partition::iterator i = base.begin(); i != base.end(); i++) dump_diff_chain(os, rel, chain, *i, count, total, max); os << base.size() << " non-differentially encoded states\n"; os << "chains: " << count - base.size() << "\n"; os << "average chain size: " << (double) (total - base.size()) / (double) (count - base.size()) << "\n"; os << "longest chain: " << max << "\n"; } /** * text-dump the DFA (for debugging). */ void DFA::dump(ostream & os) { for (Partition::iterator i = states.begin(); i != states.end(); i++) { if (*i == start || (*i)->perms.is_accept()) { os << **i; if (*i == start) os << " <== (allow/deny/audit/quiet)"; if ((*i)->perms.is_accept()) (*i)->perms.dump(os); os << "\n"; } } os << "\n"; for (Partition::iterator i = states.begin(); i != states.end(); i++) { Chars excluded; for (StateTrans::iterator j = (*i)->trans.begin(); j != (*i)->trans.end(); j++) { if (j->second == nonmatching) { excluded.insert(j->first); } else { os << **i; if ((*i)->perms.is_accept()) os << " ", (*i)->perms.dump(os); os << " -> " << *(j)->second << ": 0x" << hex << (int) j->first; if (isprint(j->first)) os << " " << j->first; os << dec << "\n"; } } if ((*i)->otherwise != nonmatching) { os << **i; if ((*i)->perms.is_accept()) os << " ", (*i)->perms.dump(os); os << " -> " << *(*i)->otherwise << ": ["; if (!excluded.empty()) { os << "^"; for (Chars::iterator k = excluded.begin(); k != excluded.end(); k++) { if (isprint(*k)) os << *k; else os << "\\0x" << hex << (int) *k << dec; } } os << "]\n"; } } os << "\n"; } /** * Create a dot (graphviz) graph from the DFA (for debugging). */ void DFA::dump_dot_graph(ostream & os) { os << "digraph \"dfa\" {" << "\n"; for (Partition::iterator i = states.begin(); i != states.end(); i++) { if (*i == nonmatching) continue; os << "\t\"" << **i << "\" [" << "\n"; if (*i == start) { os << "\t\tstyle=bold" << "\n"; } if ((*i)->perms.is_accept()) { os << "\t\tlabel=\"" << **i << "\\n"; (*i)->perms.dump(os); os << "\"\n"; } os << "\t]" << "\n"; } for (Partition::iterator i = states.begin(); i != states.end(); i++) { Chars excluded; for (StateTrans::iterator j = (*i)->trans.begin(); j != (*i)->trans.end(); j++) { if (j->second == nonmatching) excluded.insert(j->first); else { os << "\t\"" << **i << "\" -> \"" << *j->second << "\" [" << "\n"; os << "\t\tlabel=\""; if (isprint(j->first)) os << j->first; else os << "\\0x" << hex << (int) j->first << dec; os << "\"\n\t]" << "\n"; } } if ((*i)->otherwise != nonmatching) { os << "\t\"" << **i << "\" -> \"" << *(*i)->otherwise << "\" [" << "\n"; if (!excluded.empty()) { os << "\t\tlabel=\"[^"; for (Chars::iterator i = excluded.begin(); i != excluded.end(); i++) { if (isprint(*i)) os << *i; else os << "\\0x" << hex << (int) *i << dec; } os << "]\"" << "\n"; } os << "\t]" << "\n"; } } os << '}' << "\n"; } /** * Compute character equivalence classes in the DFA to save space in the * transition table. */ map DFA::equivalence_classes(dfaflags_t flags) { map classes; uchar next_class = 1; for (Partition::iterator i = states.begin(); i != states.end(); i++) { /* Group edges to the same next state together */ map node_sets; for (StateTrans::iterator j = (*i)->trans.begin(); j != (*i)->trans.end(); j++) node_sets[j->second].insert(j->first); for (map::iterator j = node_sets.begin(); j != node_sets.end(); j++) { /* Group edges to the same next state together by class */ map node_classes; bool class_used = false; for (Chars::iterator k = j->second.begin(); k != j->second.end(); k++) { pair::iterator, bool> x = classes.insert(make_pair(*k, next_class)); if (x.second) class_used = true; pair::iterator, bool> y = node_classes.insert(make_pair(x.first->second, Chars())); y.first->second.insert(*k); } if (class_used) { next_class++; class_used = false; } for (map::iterator k = node_classes.begin(); k != node_classes.end(); k++) { /** * If any other characters are in the same class, move * the characters in this class into their own new * class */ map::iterator l; for (l = classes.begin(); l != classes.end(); l++) { if (l->second == k->first && k->second.find(l->first) == k->second.end()) { class_used = true; break; } } if (class_used) { for (Chars::iterator l = k->second.begin(); l != k->second.end(); l++) { classes[*l] = next_class; } next_class++; class_used = false; } } } } if (flags & DFA_DUMP_EQUIV_STATS) fprintf(stderr, "Equiv class reduces to %d classes\n", next_class - 1); return classes; } /** * Text-dump the equivalence classes (for debugging). */ void dump_equivalence_classes(ostream &os, map &eq) { map rev; for (map::iterator i = eq.begin(); i != eq.end(); i++) { Chars &chars = rev.insert(make_pair(i->second, Chars())).first->second; chars.insert(i->first); } os << "(eq):" << "\n"; for (map::iterator i = rev.begin(); i != rev.end(); i++) { os << (int)i->first << ':'; Chars &chars = i->second; for (Chars::iterator j = chars.begin(); j != chars.end(); j++) { os << ' ' << *j; } os << "\n"; } } /** * Replace characters with classes (which are also represented as * characters) in the DFA transition table. */ void DFA::apply_equivalence_classes(map &eq) { /** * Note: We only transform the transition table; the nodes continue to * contain the original characters. */ for (Partition::iterator i = states.begin(); i != states.end(); i++) { map tmp; tmp.swap((*i)->trans); for (StateTrans::iterator j = tmp.begin(); j != tmp.end(); j++) (*i)->trans.insert(make_pair(eq[j->first], j->second)); } } #if 0 typedef set AcceptNodes; map dominance(DFA & dfa) { map is_dominated; for (States::iterator i = dfa.states.begin(); i != dfa.states.end(); i++) { AcceptNodes set1; for (State::iterator j = (*i)->begin(); j != (*i)->end(); j++) { if (AcceptNode * accept = dynamic_cast(*j)) set1.insert(accept); } for (AcceptNodes::iterator j = set1.begin(); j != set1.end(); j++) { pair::iterator, bool> x = is_dominated.insert(make_pair(*j, set1)); if (!x.second) { AcceptNodes & set2(x.first->second), set3; for (AcceptNodes::iterator l = set2.begin(); l != set2.end(); l++) { if (set1.find(*l) != set1.end()) set3.insert(*l); } set3.swap(set2); } } } return is_dominated; } #endif static inline int diff_qualifiers(uint32_t perm1, uint32_t perm2) { return ((perm1 & AA_EXEC_TYPE) && (perm2 & AA_EXEC_TYPE) && (perm1 & AA_EXEC_TYPE) != (perm2 & AA_EXEC_TYPE)); } /** * Compute the permission flags that this state corresponds to. If we * have any exact matches, then they override the execute and safe * execute flags. */ int accept_perms(NodeSet *state, perms_t &perms) { int error = 0; uint32_t exact_match_allow = 0; uint32_t exact_audit = 0; perms.clear(); if (!state) return error; for (NodeSet::iterator i = state->begin(); i != state->end(); i++) { MatchFlag *match; if (!(match = dynamic_cast(*i))) continue; if (dynamic_cast(match)) { /* exact match only ever happens with x */ if (!is_merged_x_consistent(exact_match_allow, match->flag)) error = 1;; exact_match_allow |= match->flag; exact_audit |= match->audit; } else if (dynamic_cast(match)) { perms.deny |= match->flag; perms.quiet |= match->audit; } else { if (!is_merged_x_consistent(perms.allow, match->flag)) error = 1; perms.allow |= match->flag; perms.audit |= match->audit; } } perms.allow |= exact_match_allow & ~(ALL_AA_EXEC_TYPE); perms.audit |= exact_audit & ~(ALL_AA_EXEC_TYPE); if (exact_match_allow & AA_USER_EXEC) { perms.allow = (exact_match_allow & AA_USER_EXEC_TYPE) | (perms.allow & ~AA_USER_EXEC_TYPE); perms.exact = AA_USER_EXEC_TYPE; } if (exact_match_allow & AA_OTHER_EXEC) { perms.allow = (exact_match_allow & AA_OTHER_EXEC_TYPE) | (perms.allow & ~AA_OTHER_EXEC_TYPE); perms.exact |= AA_OTHER_EXEC_TYPE; } if (AA_USER_EXEC & perms.deny) perms.deny |= AA_USER_EXEC_TYPE; if (AA_OTHER_EXEC & perms.deny) perms.deny |= AA_OTHER_EXEC_TYPE; perms.allow &= ~perms.deny; perms.quiet &= perms.deny; if (error) fprintf(stderr, "profile has merged rule with conflicting x modifiers\n"); return error; } apparmor-2.11.0/parser/libapparmor_re/aare_rules.cc0000644000175000017500000001463012607537726020152 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2013 Canonical Ltd. (All rights reserved) * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Wrapper around the dfa to convert aa rules into a dfa */ #include #include #include #include #include #include #include #include "aare_rules.h" #include "expr-tree.h" #include "parse.h" #include "hfa.h" #include "chfa.h" #include "../immunix.h" aare_rules::~aare_rules(void) { if (root) root->release(); unique_perms.clear(); expr_map.clear(); } bool aare_rules::add_rule(const char *rule, int deny, uint32_t perms, uint32_t audit, dfaflags_t flags) { return add_rule_vec(deny, perms, audit, 1, &rule, flags); } void aare_rules::add_to_rules(Node *tree, Node *perms) { if (reverse) flip_tree(tree); Node *base = expr_map[perms]; if (base) expr_map[perms] = new AltNode(base, tree); else expr_map[perms] = tree; } static Node *cat_with_null_seperator(Node *l, Node *r) { return new CatNode(new CatNode(l, new CharNode(0)), r); } bool aare_rules::add_rule_vec(int deny, uint32_t perms, uint32_t audit, int count, const char **rulev, dfaflags_t flags) { Node *tree = NULL, *accept; int exact_match; if (regex_parse(&tree, rulev[0])) return false; for (int i = 1; i < count; i++) { Node *subtree = NULL; if (regex_parse(&subtree, rulev[i])) return false; tree = cat_with_null_seperator(tree, subtree); } /* * Check if we have an expression with or without wildcards. This * determines how exec modifiers are merged in accept_perms() based * on how we split permission bitmasks here. */ exact_match = 1; for (depth_first_traversal i(tree); i && exact_match; i++) { if (dynamic_cast(*i) || dynamic_cast(*i) || dynamic_cast(*i) || dynamic_cast(*i) || dynamic_cast(*i)) exact_match = 0; } if (reverse) flip_tree(tree); accept = unique_perms.insert(deny, perms, audit, exact_match); if (flags & DFA_DUMP_RULE_EXPR) { cerr << "rule: "; cerr << rulev[0]; for (int i = 1; i < count; i++) { cerr << "\\x00"; cerr << rulev[i]; } cerr << " -> "; tree->dump(cerr); if (deny) cerr << " deny"; cerr << " (0x" << hex << perms <<"/" << audit << dec << ")"; accept->dump(cerr); cerr << "\n\n"; } add_to_rules(tree, accept); rule_count++; return true; } /* create a dfa from the ruleset * returns: buffer contain dfa tables, @size set to the size of the tables * else NULL on failure */ void *aare_rules::create_dfa(size_t *size, dfaflags_t flags) { char *buffer = NULL; /* finish constructing the expr tree from the different permission * set nodes */ PermExprMap::iterator i = expr_map.begin(); if (i != expr_map.end()) { if (flags & DFA_CONTROL_TREE_SIMPLE) { Node *tmp = simplify_tree(i->second, flags); root = new CatNode(tmp, i->first); } else root = new CatNode(i->second, i->first); for (i++; i != expr_map.end(); i++) { Node *tmp; if (flags & DFA_CONTROL_TREE_SIMPLE) { tmp = simplify_tree(i->second, flags); } else tmp = i->second; root = new AltNode(root, new CatNode(tmp, i->first)); } } /* dumping of the none simplified tree without -O no-expr-simplify * is broken because we need to build the tree above first, and * simplification is woven into the build. Reevaluate how to fix * this debug dump. */ label_nodes(root); if (flags & DFA_DUMP_TREE) { cerr << "\nDFA: Expression Tree\n"; root->dump(cerr); cerr << "\n\n"; } if (flags & DFA_CONTROL_TREE_SIMPLE) { /* This is old total tree, simplification point * For now just do simplification up front. It gets most * of the benefit running on the smaller chains, and is * overall faster because there are less nodes. Reevaluate * once tree simplification is rewritten */ //root = simplify_tree(root, flags); if (flags & DFA_DUMP_SIMPLE_TREE) { cerr << "\nDFA: Simplified Expression Tree\n"; root->dump(cerr); cerr << "\n\n"; } } stringstream stream; try { DFA dfa(root, flags); if (flags & DFA_DUMP_UNIQ_PERMS) dfa.dump_uniq_perms("dfa"); if (flags & DFA_CONTROL_MINIMIZE) { dfa.minimize(flags); if (flags & DFA_DUMP_MIN_UNIQ_PERMS) dfa.dump_uniq_perms("minimized dfa"); } if (flags & DFA_CONTROL_FILTER_DENY && flags & DFA_CONTROL_MINIMIZE && dfa.apply_and_clear_deny()) { /* Do a second minimization pass as removal of deny * information has moved some states from accepting * to none accepting partitions * * TODO: add this as a tail pass to minimization * so we don't need to do a full second pass */ dfa.minimize(flags); if (flags & DFA_DUMP_MIN_UNIQ_PERMS) dfa.dump_uniq_perms("minimized dfa"); } if (flags & DFA_CONTROL_REMOVE_UNREACHABLE) dfa.remove_unreachable(flags); if (flags & DFA_DUMP_STATES) dfa.dump(cerr); if (flags & DFA_DUMP_GRAPH) dfa.dump_dot_graph(cerr); map eq; if (flags & DFA_CONTROL_EQUIV) { eq = dfa.equivalence_classes(flags); dfa.apply_equivalence_classes(eq); if (flags & DFA_DUMP_EQUIV) { cerr << "\nDFA equivalence class\n"; dump_equivalence_classes(cerr, eq); } } else if (flags & DFA_DUMP_EQUIV) cerr << "\nDFA did not generate an equivalence class\n"; if (flags & DFA_CONTROL_DIFF_ENCODE) { dfa.diff_encode(flags); if (flags & DFA_DUMP_DIFF_ENCODE) dfa.dump_diff_encode(cerr); } CHFA chfa(dfa, eq, flags); if (flags & DFA_DUMP_TRANS_TABLE) chfa.dump(cerr); chfa.flex_table(stream, ""); } catch(int error) { *size = 0; return NULL; } stringbuf *buf = stream.rdbuf(); buf->pubseekpos(0); *size = buf->in_avail(); buffer = (char *)malloc(*size); if (!buffer) return NULL; buf->sgetn(buffer, *size); return buffer; } apparmor-2.11.0/parser/libapparmor_re/chfa.cc0000644000175000017500000003027412264041743016717 0ustar jjjj/* * (C) 2006, 2007 Andreas Gruenbacher * Copyright (c) 2003-2008 Novell, Inc. (All rights reserved) * Copyright 2009-2012 Canonical Ltd. * * The libapparmor library is licensed under the terms of the GNU * Lesser General Public License, version 2.1. Please see the file * COPYING.LGPL. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see . * * * Create a compressed hfa from and hfa */ #include #include #include #include #include #include #include #include #include "hfa.h" #include "chfa.h" #include "../immunix.h" #include "flex-tables.h" void CHFA::init_free_list(vector > &free_list, size_t prev, size_t start) { for (size_t i = start; i < free_list.size(); i++) { if (prev) free_list[prev].second = i; free_list[i].first = prev; prev = i; } free_list[free_list.size() - 1].second = 0; } /** * new Construct the transition table. */ CHFA::CHFA(DFA &dfa, map &eq, dfaflags_t flags): eq(eq) { if (flags & DFA_DUMP_TRANS_PROGRESS) fprintf(stderr, "Compressing HFA:\r"); if (dfa.diffcount) chfaflags = YYTH_FLAG_DIFF_ENCODE; else chfaflags = 0; if (eq.empty()) max_eq = 255; else { max_eq = 0; for (map::iterator i = eq.begin(); i != eq.end(); i++) { if (i->second > max_eq) max_eq = i->second; } } /* Do initial setup adding up all the transitions and sorting by * transition count. */ size_t optimal = 2; multimap order; vector > free_list; for (Partition::iterator i = dfa.states.begin(); i != dfa.states.end(); i++) { if (*i == dfa.start || *i == dfa.nonmatching) continue; optimal += (*i)->trans.size(); if (flags & DFA_CONTROL_TRANS_HIGH) { size_t range = 0; if ((*i)->trans.size()) range = (*i)->trans.rbegin()->first - (*i)->trans.begin()->first; size_t ord = ((256 - (*i)->trans.size()) << 8) | (256 - range); /* reverse sort by entry count, most entries first */ order.insert(make_pair(ord, *i)); } } /* Insert the dummy nonmatching transition by hand */ next_check.push_back(make_pair(dfa.nonmatching, dfa.nonmatching)); default_base.push_back(make_pair(dfa.nonmatching, 0)); num.insert(make_pair(dfa.nonmatching, num.size())); accept.resize(max(dfa.states.size(), (size_t) 2)); accept2.resize(max(dfa.states.size(), (size_t) 2)); next_check.resize(max(optimal, (size_t) 256)); free_list.resize(next_check.size()); accept[0] = 0; accept2[0] = 0; first_free = 1; init_free_list(free_list, 0, 1); insert_state(free_list, dfa.start, dfa); accept[1] = 0; accept2[1] = 0; num.insert(make_pair(dfa.start, num.size())); int count = 2; if (!(flags & DFA_CONTROL_TRANS_HIGH)) { for (Partition::iterator i = dfa.states.begin(); i != dfa.states.end(); i++) { if (*i != dfa.nonmatching && *i != dfa.start) { insert_state(free_list, *i, dfa); accept[num.size()] = (*i)->perms.allow; accept2[num.size()] = PACK_AUDIT_CTL((*i)->perms.audit, (*i)->perms.quiet & (*i)->perms.deny); num.insert(make_pair(*i, num.size())); } if (flags & (DFA_DUMP_TRANS_PROGRESS)) { count++; if (count % 100 == 0) fprintf(stderr, "\033[2KCompressing trans table: insert state: %d/%zd\r", count, dfa.states.size()); } } } else { for (multimap::iterator i = order.begin(); i != order.end(); i++) { if (i->second != dfa.nonmatching && i->second != dfa.start) { insert_state(free_list, i->second, dfa); accept[num.size()] = i->second->perms.allow; accept2[num.size()] = PACK_AUDIT_CTL(i->second->perms.audit, i->second->perms.quiet & i->second->perms.deny); num.insert(make_pair(i->second, num.size())); } if (flags & (DFA_DUMP_TRANS_PROGRESS)) { count++; if (count % 100 == 0) fprintf(stderr, "\033[2KCompressing trans table: insert state: %d/%zd\r", count, dfa.states.size()); } } } if (flags & (DFA_DUMP_TRANS_STATS | DFA_DUMP_TRANS_PROGRESS)) { ssize_t size = 4 * next_check.size() + 6 * dfa.states.size(); fprintf(stderr, "\033[2KCompressed trans table: states %zd, next/check %zd, optimal next/check %zd avg/state %.2f, compression %zd/%zd = %.2f %%\n", dfa.states.size(), next_check.size(), optimal, (float)next_check.size() / (float)dfa.states.size(), size, 512 * dfa.states.size(), 100.0 - ((float)size * 100.0 /(float)(512 * dfa.states.size()))); } } /** * Does fit into position of the transition table? */ bool CHFA::fits_in(vector > &free_list __attribute__ ((unused)), size_t pos, StateTrans &trans) { size_t c, base = pos - trans.begin()->first; for (StateTrans::iterator i = trans.begin(); i != trans.end(); i++) { c = base + i->first; /* if it overflows the next_check array it fits in as we will * resize */ if (c >= next_check.size()) return true; if (next_check[c].second) return false; } return true; } /** * Insert of into the transition table. */ void CHFA::insert_state(vector > &free_list, State *from, DFA &dfa) { State *default_state = dfa.nonmatching; size_t base = 0; int resize; StateTrans &trans = from->trans; size_t c = trans.begin()->first; size_t prev = 0; size_t x = first_free; if (from->otherwise) default_state = from->otherwise; if (trans.empty()) goto do_insert; repeat: resize = 0; /* get the first free entry that won't underflow */ while (x && (x < c)) { prev = x; x = free_list[x].second; } /* try inserting until we succeed. */ while (x && !fits_in(free_list, x, trans)) { prev = x; x = free_list[x].second; } if (!x) { resize = 256 - trans.begin()->first; x = free_list.size(); /* set prev to last free */ } else if (x + 255 - trans.begin()->first >= next_check.size()) { resize = (255 - trans.begin()->first - (next_check.size() - 1 - x)); for (size_t y = x; y; y = free_list[y].second) prev = y; } if (resize) { /* expand next_check and free_list */ size_t old_size = free_list.size(); next_check.resize(next_check.size() + resize); free_list.resize(free_list.size() + resize); init_free_list(free_list, prev, old_size); if (!first_free) first_free = old_size;; if (x == old_size) goto repeat; } base = x - c; for (StateTrans::iterator j = trans.begin(); j != trans.end(); j++) { next_check[base + j->first] = make_pair(j->second, from); size_t prev = free_list[base + j->first].first; size_t next = free_list[base + j->first].second; if (prev) free_list[prev].second = next; if (next) free_list[next].first = prev; if (base + j->first == first_free) first_free = next; } do_insert: if (from->flags & DiffEncodeFlag) base |= DiffEncodeBit32; default_base.push_back(make_pair(default_state, base)); } /** * Text-dump the transition table (for debugging). */ void CHFA::dump(ostream &os) { map st; for (map::iterator i = num.begin(); i != num.end(); i++) { st.insert(make_pair(i->second, i->first)); } os << "size=" << default_base.size() << " (accept, default, base): {state} -> {default state}" << "\n"; for (size_t i = 0; i < default_base.size(); i++) { os << i << ": "; os << "(" << accept[i] << ", " << num[default_base[i].first] << ", " << default_base[i].second << ")"; if (st[i]) os << " " << *st[i]; if (default_base[i].first) os << " -> " << *default_base[i].first; os << "\n"; } os << "size=" << next_check.size() << " (next, check): {check state} -> {next state} : offset from base\n"; for (size_t i = 0; i < next_check.size(); i++) { if (!next_check[i].second) continue; os << i << ": "; if (next_check[i].second) { os << "(" << num[next_check[i].first] << ", " << num[next_check[i].second] << ")" << " " << *next_check[i].second << " -> " << *next_check[i].first << ": "; size_t offs = i - base_mask_size(default_base[num[next_check[i].second]].second); if (eq.size()) os << offs; else os << (uchar) offs; } os << "\n"; } } /** * Create a flex-style binary dump of the DFA tables. The table format * was partly reverse engineered from the flex sources and from * examining the tables that flex creates with its --tables-file option. * (Only the -Cf and -Ce formats are currently supported.) */ #define YYTH_REGEX_MAGIC 0x1B5E783D static inline size_t pad64(size_t i) { return (i + (size_t) 7) & ~(size_t) 7; } string fill64(size_t i) { const char zeroes[8] = { }; string fill(zeroes, (i & 7) ? 8 - (i & 7) : 0); return fill; } template size_t flex_table_size(Iter pos, Iter end) { return pad64(sizeof(struct table_header) + sizeof(*pos) * (end - pos)); } template void write_flex_table(ostream &os, int id, Iter pos, Iter end) { struct table_header td = { 0, 0, 0, 0 }; size_t size = end - pos; td.td_id = htons(id); td.td_flags = htons(sizeof(*pos)); td.td_lolen = htonl(size); os.write((char *)&td, sizeof(td)); for (; pos != end; ++pos) { switch (sizeof(*pos)) { case 4: os.put((char)(*pos >> 24)); os.put((char)(*pos >> 16)); case 2: os.put((char)(*pos >> 8)); case 1: os.put((char)*pos); } } os << fill64(sizeof(td) + sizeof(*pos) * size); } void CHFA::flex_table(ostream &os, const char *name) { const char th_version[] = "notflex"; struct table_set_header th = { 0, 0, 0, 0 }; /** * Change the following two data types to adjust the maximum flex * table size. */ typedef uint16_t state_t; typedef uint32_t trans_t; if (default_base.size() >= (state_t) - 1) { cerr << "Too many states (" << default_base.size() << ") for " "type state_t\n"; exit(1); } if (next_check.size() >= (trans_t) - 1) { cerr << "Too many transitions (" << next_check.size() << ") for " "type trans_t\n"; exit(1); } /** * Create copies of the data structures so that we can dump the tables * using the generic write_flex_table() routine. */ vector equiv_vec; if (eq.size()) { equiv_vec.resize(256); for (map::iterator i = eq.begin(); i != eq.end(); i++) { equiv_vec[i->first] = i->second; } } vector default_vec; vector base_vec; for (DefaultBase::iterator i = default_base.begin(); i != default_base.end(); i++) { default_vec.push_back(num[i->first]); base_vec.push_back(i->second); } vector next_vec; vector check_vec; for (NextCheck::iterator i = next_check.begin(); i != next_check.end(); i++) { next_vec.push_back(num[i->first]); check_vec.push_back(num[i->second]); } /* Write the actual flex parser table. */ size_t hsize = pad64(sizeof(th) + sizeof(th_version) + strlen(name) + 1); th.th_magic = htonl(YYTH_REGEX_MAGIC); th.th_flags = htonl(chfaflags); th.th_hsize = htonl(hsize); th.th_ssize = htonl(hsize + flex_table_size(accept.begin(), accept.end()) + flex_table_size(accept2.begin(), accept2.end()) + (eq.size() ? flex_table_size(equiv_vec.begin(), equiv_vec.end()) : 0) + flex_table_size(base_vec.begin(), base_vec.end()) + flex_table_size(default_vec.begin(), default_vec.end()) + flex_table_size(next_vec.begin(), next_vec.end()) + flex_table_size(check_vec.begin(), check_vec.end())); os.write((char *)&th, sizeof(th)); os << th_version << (char)0 << name << (char)0; os << fill64(sizeof(th) + sizeof(th_version) + strlen(name) + 1); write_flex_table(os, YYTD_ID_ACCEPT, accept.begin(), accept.end()); write_flex_table(os, YYTD_ID_ACCEPT2, accept2.begin(), accept2.end()); if (eq.size()) write_flex_table(os, YYTD_ID_EC, equiv_vec.begin(), equiv_vec.end()); write_flex_table(os, YYTD_ID_BASE, base_vec.begin(), base_vec.end()); write_flex_table(os, YYTD_ID_DEF, default_vec.begin(), default_vec.end()); write_flex_table(os, YYTD_ID_NXT, next_vec.begin(), next_vec.end()); write_flex_table(os, YYTD_ID_CHK, check_vec.begin(), check_vec.end()); } apparmor-2.11.0/parser/techdoc.tex0000644000175000017500000014301711752320402014635 0ustar jjjj\documentclass[a4paper]{article} %\usepackage{graphicx} %\usepackage{subfigure} \usepackage[utf8]{inputenc} \usepackage{url} %\usepackage{times} \usepackage[pdftex, pdfauthor={Andreas Gruenbacher and Seth Arnold}, pdftitle={AppArmor Technical Documentation},% \ifx\fixedpdfdate\@empty\else pdfcreationdate={\fixedpdfdate}, pdfmoddate={\fixedpdfdate}, \fi pdfsubject={AppArmor}, pdfkeywords={AppArmor} ]{hyperref} \hyphenation{App-Armor} \hyphenation{name-space} \renewcommand{\H}{\hspace{0pt}} \title{AppArmor Technical Documentation} \author{Andreas Gruenbacher and Seth Arnold \\ \url{{agruen,seth.arnold}@suse.de} \\ SUSE Labs / Novell} % don't include the (build!) date \date{} \begin{document} \maketitle \tableofcontents \newpage %\begin{abstract} %\end{abstract} \section{Introduction} In this paper we describe AppArmor from a technical point of view, introduce its concepts, and explain the design decisions taken. This text is intended for people interested in understanding why AppArmor works the way it does. You may be looking for less detailed, low-level, or kernel centric documentation; in that case, please refer to the AppArmor documentation web site~\cite{apparmor}. Sections~\ref{sec:overview} and ~\ref{sec:model} discuss the AppArmor security model, while Section~\ref{sec:walk-through} shows how to use it from a low-level point of view. Please be aware that lots of details are discussed here which the higher-level tools hide from the average user. \section{Overview} \label{sec:overview} AppArmor protects systems from insecure or untrusted processes by running them in confinement, still allowing them to share files with other parts of the system, exercising privilege, and communicating with other processes, but with some restrictions. These restrictions are mandatory; they are not bound to identity, group membership, or object ownership. In particular, the restrictions also apply to processes running with superuser privileges. AppArmor achieves this by plugging into the Linux Security Module (LSM) framework. The protections provided are in addition to the kernel's regular access control mechanisms. The AppArmor kernel module and accompanying user-space tools are available under the GPL license. (The exception is the libapparmor library, available under the LGPL license, which allows change\_hat(2) to be used by non-GPL binaries.) At the moment, AppArmor knows about two types of resources: files, and POSIX.1e (draft) capabilities. By controlling access to these resources, AppArmor can effectively prevent confined processes from accessing files in unwanted ways, from executing binaries which they are not meant to execute, and from exercising privileges such as acting on behalf of another user (which are traditionally restricted to the superuser). One use case for this kind of protection is a network daemon: even if the daemon is broken into, the additional restrictions imposed by AppArmor will prevent the attacker from attaining additional privileges beyond what the daemon is normally allowed to do. Because AppArmor controls which files a process can access in which ways down to the individual file level, the potential damage is much limited. There is work going on for teaching AppArmor about additional resources like ulimits, and interprocess and network communication, but at this time, these resource types are not covered. This is less severe than it might initially seem: in order to attack another process from a broken-into process like a network daemon, that other process has to actively listen. The set of actively listening processes is relatively small, and this sort of interprocess communication is a natural security boundary, so listening processes should be validating all their input already. For protection against bugs in the input validation of those processes, they should also be confined by AppArmor though, thus further limiting the potential damage. AppArmor protection is selective: it only confines processes for which policies (referred to as profiles) have been defined. All other processes will continue to run unrestricted by AppArmor. To confine a process, all it takes is to write a profile for it, take an existing profile, or automatically generate a profile: for the latter, the process can be run in \textit{learning} or \textit{complain} mode in which AppArmor allows all accesses, and logs all accesses that are not allowed by the current profile already. This log can then be used to automatically generate a suitable new profile, or refine an existing one. The application does not need to be modified. An example profile together with a complete low-level walk-through of AppArmor can be found in Section~\ref{sec:walk-through}. The apparmor.d(5) manual page contains further details. AppArmor is not based on labeling or label-based access and transition rules, so it does not stick a label on each each file in the file system (or more generally, on each object). It identifies files by name rather than by label, so if a process is granted read access to /etc/shadow and the system administrator renames /etc/shadow to /etc/shadow.old and replaces it with a copy (that may have an additional user in it, for example), the process will have access to the new /etc/shadow, and not to /etc/shadow.old. \section{The AppArmor Security Model} \label{sec:model} When a file is accessed by name with open(2), mkdir(2), etc., the kernel looks up the location of the object associated with the specified pathname in the file system hierarchy. The lookup is relative to the root directory for pathnames starting with a slash, and to the current working directory otherwise. Different processes can have have different working directories as well as different root directories. See path\_resolution(2) for a detailed discussion of how pathname resolution works. Either way, the result of the lookup is a pair of (dentry, vfsmount) kernel-internal objects that uniquely identify the location of the file in the file system hierarchy. The dentry points to the object if the object already exists, and is a placeholder for the object to be created otherwise. AppArmor uses the (dentry, vfsmount) pair to compute the pathname of the file within a process's filesystem namespace. The resulting pathname contains no relative pathname components (``.'' or ``..''), or symlinks. AppArmor checks if the current profile contains rules that match this pathname, and if those rules allow the requested access. Accesses that are not explicitly allowed are denied. \subsection{Symbolic Links} When looking up the (dentry, vfsmount) pair of a file, the kernel resolves symlinks where appropriate (and fails the lookup where symlink resolution is inappropriate). The pathname that AppArmor computes from a (dentry, vfsmount) pair never contains symlinks. This also means that if symlinks are used instead of directories for paths like /tmp, profiles need to be adjusted accordingly. A future version of AppArmor may have built-in support for this kind of pathname rewriting. \subsection{Namespaces} Linux allows different processes to live in separate namespaces, each of which forms an independent file system hierarchy. A recent paper by Al Viro and Ram Pai~\cite{ols06-pai} discusses all the intricate things possible with namespaces in recent 2.6 kernels. From the point of view of a process, an absolute path is a path that goes all the way up to the root directory of that process. This is ambiguous if processes have different root directories. Therefore, instead of paths relative to process root directories, AppArmor uses paths relative to the namespace root. Pathnames are meaningful only within a namespace. Each namespace has a root where all the files, directories, and mount points are hanging off from. The privilege of creating new namespaces is bound to the CAP\_{\H}SYS\_{\H}ADMIN capability, which grants a multitude of other things that would allow a process to break out of AppArmor confinement, so confined processes are not supposed to have this privilege, and processes with this capability need to be considered trusted. In this setup, privileged processes can still create separate namespaces and start processes in those namespaces; processes confinement will be relative to whatever namespace a process ends up in. It is unclear at this point how AppArmor should support separate namespaces --- either by computing all pathnames relative to one particular namespace considered global (assuming that such a globally meaningful namespace will exist in all setups in which AppArmor is relevant), or by allowing different sets of profiles to be associated with different namespaces. \subsection{Disconnected Files and Pseudo File Systems} In some situations, a process can end up with a file descriptor or working directory that was looked up by name at some point, but is not connected to the process's namespace anymore (and hasn't been deleted, either). This can happen when file descriptors are passed between processes that do not share the same namespace, or when a file system has been lazily unmounted (see the MNT\_DETACH flag of umount2(2)). Such files may still be visible to other processes, and they may become reconnected. AppArmor cannot compute the pathnames of such files. Granting unrestricted access would be insecure, and so AppArmor denies access to disconnected files. As a special case, the kernel supports a number of file systems that users can have file descriptors open for, but that can never be mounted. Those files are by definition disconnected. Anonymous pipes, futexes, inotify, and epoll are all examples of that. Accesses to those files is always allowed. Future versions of AppArmor will have better control over disconnected files by controlling file descriptor passing between processes. \subsection{Mount} Mounting can change a process's namespace in almost arbitrary ways. This is a problem because AppArmor's file access control is pathname based, and granting a process the right to arbitrarily change its namespace would subvert this protection mechanism. AppArmor therefore denies confined processes access to the mount(2), umount(2), and umount2(2) system calls. Future versions of AppArmor may offer fine-grained control over mount, and may grant confined processes specific mount operations. \subsection{The Kernel NFS Daemon} The security model of the various versions of NFS is that files are looked up by name as usual, but after that lookup, each file is only identified by a file handle in successive acesses. The file handle at a minimum includes some sort of filesystem identifier and the file's inode number. In Linux, the file handles used by most filesystems also include the inode number of the parent directory; this may change in the future. File handles are persistent across server restarts. This means that when the NFS daemon is presented with a file handle, clients must get access without having specified a pathname. A pathname can be computed from a (parent, child) inode pair that identifies the file down to the directory level if the dentry is properly connected to the dcache, but multiple hardlinks to the same file within the same directory cannot be distinguished, and properly connecting dentries comes at a cost in the NFS daemon. Because of this overhead and the questionable benefit, most setups do not guarantee that dentries will be connected, and so pathnames cannot always be computed. (See the no\_subtree\_check option in exports(5).) In addition, the NFS daemon is implemented in the kernel rather than as a user space process. There is no memory separation or other protection between the daemon and the rest of the kernel. This means that at best, the NFS daemon could cooperate with an additional access control mechanism like AppArmor --- but there would be no enforcement. Because of all of this, it makes little sense to put the kernel NFS daemon under AppArmor control. Administrators are advised to not assign profiles to the kernel nfsd daemons. \subsection{Why are the computed pathnames meaningful?} Whenever a process performs a name-based file access, the pathname or pathname component always refers to a specific path to that file: the path is either relative to the chroot if an absolute path is used, or else relative to the current working directory. The chroot or current working directory always has a unique pathname up to the namespace root (even if the process itself has no direct access above the chroot). This means that each name-based file access maps to a unique, canonical, absolute pathname. There may be additional paths pointing to the same file, but a particular name-based access still always refers to only one of them. These are the pathnames that AppArmor uses for permission checks. If directories along the path get renamed after a process changes into them (either with chroot(2) or with chdir(2)), the resulting pathname will differ from the pathnames that the process used. Consider the following sequence of operations for example: \begin{tabbing} \begin{tabular}{ll} \textbf{Process 1} & \textbf{Process 2} \\ chdir("/var/tmp/foo"); & \\ & rename("/var/tmp/foo", "/var/tmp/bar"); \\ creat("baz", 0666); & \\ \end{tabular} \end{tabbing} The creat operation will check against the path /var/tmp/\textit{bar}/baz, even though Process~1 never used \textit{bar.} This is the expected behavior; we are interested in the names of the objects along the path at the time of the access, not in their previous names. As already mentioned, a path lookup results in a pair of (dentry, vfsmount) kernel-internal objects. The pathname that AppArmor checks against is computed from these two objects after these objects have been looked up. The lookup and the pathname computation are not atomic, which means that pathname components could even be renamed after the lookup but before the pathname has been computed. It matters that the AppArmor access check is performed between the lookup and the actual access, but atomicity between the lookup and that access check is not necessary: there is no difference between a rename before the lookup and a rename after the lookup from AppArmor's point of view; all we care about is the current pathname at some point between the lookup and the access. A special case occurs when the lookup succeeds, but the file is deleted before the AppArmor access check. In this case the access is denied and errno is set to ENOENT, the same behavior as if the lookup had failed. \subsection{Path Permission Checking} On UNIX systems, when files are looked up by name, the lookup starts either at the root or the current working directory of a process. From there, each directory reached is checked for search permission (x). The permissions on the directories leading to the current working directory are not checked. When a file is being created or deleted, the parent directory of that file is checked for write and search access (wx). When a file is being accessed, the permissions of that file are checked for r, w, or x access, or a combination thereof. Each check can result in a failure with errno set to EACCES (Permission denied). In contrast, AppArmor first computes the pathname to a file. If a file is being created, the name being looked up is the name of the new file and not the name of the parent directory. If the file being looked up is a directory, AppArmor appends a slash to the pathname so that directory pathnames always end in a slash; otherwise the pathname will not end in a slash. It then checks for file access rules in the process's profile that match that pathname, and decides based on that. With some exceptions for execute modes as described in Section~\ref{sec:merging}, the permissions granted are the union of permissions of all matching rules. \subsection{Profile Permissions} \label{sec:permissions} AppArmor differentiates between slightly more permissions than UNIX does, as shown in Table~\ref{tab:permissions}: file access rules in AppArmor support the read (r), write (w), execute (x), memory map as executable (m), and link (l) permissions. The execute permission requires a modifier that further specifies which kind of execution is being granted: inherit the current profile (ix), use the profile defined for that executable (px), or execute unconfined without a profile (ux). In addition, the px and ux permissions have Px and Ux forms that will trigger Secure Execution (see Section~\ref{sec:secure-exec} below). The different permissions are used as follows: \begin{table}[tb] \center \begin{tabular}{|l|l|} \hline r & Read. \\ w & Write. \\ ix & Execute and inherit the current profile. \\ px & Execute under a specific profile. \\ Px & Execute secure and under a specific profile. \\ ux & Execute unconfined. \\ Ux & Execute secure and unconfined. \\ m & Memory map as executable. \\ l & Link. \\ \hline \end{tabular} \caption{File Access Permissions in Profiles} \label{tab:permissions} \end{table} \begin{description} \item[Read.] The profile read permission is required by all system calls that require the UNIX read permission. This includes open with O\_RDONLY, getdents (i.e., readdir), listxattr, getxattr, and mmap with PROT\_READ. \item[Write.] The profile write permission is required by all system calls that require the UNIX write permission, except for operations that create or remove files: while UNIX requires write access to the parent directory, AppArmor requires write access on the new file in this case (which does not exist at the time of the permission check for file creates). Operations that create files include open with O\_CREAT, creat, mkdir, symlink, and mknod. Operations that remove files include rename, unlink and rmdir. Operations that require write access in UNIX as well as AppArmor include open with O\_WRONLY (O\_RDWR requires read and write), setxattr, removexattr, and mmap with PROT\_WRITE. Other system calls such as chmod, chown, utime, and utimes are bound to file ownership or the respective capabilities in UNIX. AppArmor also requires profile write access for those operations. \item[Execute.] As mentioned above, AppArmor distinguishes a few different ways how files may be executed as described above. For directories, the UNIX execute permission maps to search access. AppArmor does not control directory search access. Traversing directories is always granted. \item[Memory map as executable.] The Linux kernel only requires read access to files in order to memory map them for execution with the PROT\_EXEC flag. AppArmor makes a distinction here, and requires the m profile permission in order for files to be mapped as executable. That way, it is more obvious in profiles what applications are allowed to do even if from a security point of view, the m permission provides a similar level of protection as the ix permission --- execute under the current profile. \item[Link.] Creating a hardlink requires the profile link permission (l) on the new path. In addition, the new path must have a subset of the r, w, x, and m permissions of the old path, and if the new path has the x permission, the execute flags (i, u, U, p, and P) of the old and the new path must be equal. \item[Rename.] A rename requires profile read and write access for the source file, and profile write access for the target file. \item[Stat.] Retrieving information about files is always allowed. We believe that providing policy for file information retrieval is more troublesome than the benefit it would provide. \end{description} \subsection{System Calls Taking File Handles, At System Calls} A number of system calls take file descriptors instead of pathnames as their parameters (ftruncate, fchmod, etc.), or take directory file descriptors, and resolve pathnames relative to those directories (openat, mkdirat, etc.). These system calls are treated like their non-f and non-at equivalents, and the same access checks are performed. At the point where AppArmor is asked to validate those file accesses, it is passed a (dentry, vfsmount) pair no matter which system call variant is used. \subsection{File Descriptor Passing and Revalidation} After a file descriptor has been obtained, the permitted accesses (read and/or write) are encoded in the file descriptor, and reads and writes are not revalidated against the profile for each access. This is consistent with how access checks are done in UNIX; such access checks would have a severe performance impact. The picture changes when a file descriptor is passed between processes and the other process is running under a different profile, or when a process switches profiles: in that case, read and write accesses are revalidated under the new profile. If the new profile does not allow them, the access is denied and errno is set to EACCES (Permission denied). File descriptors opened by unconfined processes are exempt from this rule. This is so that processes will still have access to their stdin, stdout, and stderr without having to list all possible sources of input and output in all profiles. \subsection{Deleted Files} Revalidation is problematic for deleted files for which a process still has an open file descriptor --- after all, the idea of the pathname of a deleted file is somewhat peculiar: the file is no longer reachable by any pathname, and it also cannot become re-attached to the filesystem namespace again. The traditional UNIX behavior is to determine access upon file access, and to never check again. Applications depend on this, particularly for temporary files. In addition to temporary files, deleted files can be used as an interprocess communication mechanism if the file descriptor is shared among multiple processes. AppArmor grants access to deleted files, just like it grants access to files opened by unconfined processes. It may control interprocess communication, including file descriptor passing, in a future version. \subsection{The access System Call} This system call determines whether a process has a given mode of access to a file in terms of the read, write, and execute permissions. This is not a sufficient replacement for performing the access check at the time of access even under traditional UNIX, because the access system call and the subsequent access are not atomic, and the permissions might change between the two operations. Applications are not supposed to rely on access(2). AppArmor introduces additional restrictions, some of which cannot be modeled in terms of read, write, and execute: for example, an AppArmor profile may allow a process to create files /tmp/foo-*, but not any other files in /tmp. There is no way to express this with access(2); in traditional UNIX, all that is required for creating files is write access to the parent directory. Access(2) will indicate that some accesses are allowed even when AppArmor will eventually deny them. \subsection{The ptrace System Call} The ability to ptrace allows a process to look up information about another process, read and write the memory of that process, and attach to (or trace) that process in order to debug it, or analyze its behavior. This gives total control over the process being traced, and so the kernel employs some restrictions over which processes may ptrace with other processes. In addition to these restrictions, AppArmor requires that if the tracing task is confined, it must either have the CAP\_{\H}SYS\_{\H}PTRACE capability, or be confined by the same profile and sub-profile as the process being traced. Attempts to switch to another profile or sub-profile by a process being traced is denied. \subsection{Secure Execution} \label{sec:secure-exec} In this mode, the kernel passes a flag to user space. When glibc finds this flag set, it unsets environment variables that are considered dangerous, and it prevents the dynamic loader from loading libraries controlled by the environment. With non-secure exec, the LD\_LIBRARY\_PATH environment variable can be used to switch to a different set of libraries, for example. The secure exec mechanism is not specific to AppArmor: set-user-id and set-group-id executables also use it, as well as SELinux, which introduced this glibc feature. \subsection{Exec Mode Merging in Profiles, Exact Matches} \label{sec:merging} When more than one rule in a profile matches a given path, all the permissions accumulate except for ix, px, Px, ux, and Ux: those permissions would conflict with each other; it would be unclear how to execute the new binary if more than one of these flags was set. To deal with this situation, AppArmor differentiates between rules that define exact matches and wildcard rules (see Table~\ref{tab:globbing} on page~\pageref{tab:globbing}). Execute flags in exact matches override execute flags in wildcard matches. If the execute flags of multiple rules still disagree, the profile is rejected at profile load time. \subsection{Capabilities} AppArmor uses the standard Linux capability mechanism. When the kernel checks if a certain capability can be exercised, AppArmor additionally checks if the current profile allows the requested capability, and rejects the use of the capability otherwise. \subsection{The sysctl System Call and /proc/sys} The sysctl system call and files below /proc/sys can be used to read and modify various kernel parameters. Root processes can easily bring the system down by setting kernel parameters to invalid values. To prevent against that, AppArmor denies confined processes that do not have the CAP\_{\H}SYS\_{\H}ADMIN capability write access to kernel parameters. \subsection{Subprofiles aka. Hats} Profiles can contain subprofiles that processes may switch to from the main profile. Switching from a subprofile into a sibling subprofile or back to the parent profile is allowed depending on how the subprofile was entered, and provided that the child knows a magic cookie.\footnote{ \textbf{A word of warning about change\_hat(2):} When used with a non-zero magic cookie for changing into a subprofile, that magic cookie can be used to change back out of the subprofile; in this mode, change\_hat(2) is not a strong confinement mechanism. If the code running in the subprofile can guess the magic cookie, it can break out of the subprofile. Likewise, if that code can manipulate the processes' behavior beyond the point where the process returns from the subprofile, it can influence what is done under the parent profile. Therefore, change\_hat(2) with a non-zero magic cookie is only safe in combination with restricted code environments, such as when the subprofile is used for executing Safe Perl (see Safe(3pm)), etc. } See the change\_hat(2) manual page for details. Each process may consist of multiple tasks. Each task may only change its own subprofile. The superuser cannot put a task into a different hat, but he can replace the entire profile and its subprofiles, or he can put a process in a different top-level profile (see Section~\ref{sec:association}). Internally, change\_hat(2) is implemented by writing to a special kernel-provided file. This is equivalent to a command like: \begin{small} \begin{verbatim} $ echo "changehat 123^hat_name" > /proc/$PID/attr/current \end{verbatim} \end{small} Here, the number is the magic cookie value, and hat\_name obviously is the name of the hat; either may be replaced by the empty string (but not both). \subsection{Association of Profiles with Processes} \label{sec:association} Profiles are associated with kernel tasks, which roughly correspond to threads in user space (see clone(2) for details). Currently there are two ways how a profile can be associated with a task: when an executable is started and a profile is defined for that executable, or when the administrator assigns a profile to a task explicitly. In addition to that, once a task is confined by a profile, that profile determines which other executables may be executed, and under which profile they may run (under the profile defined for that executable, the same profile as the current task, or unconfined; see Section~\ref{sec:permissions}). A process will consist of a single task after an exec, so in the exec case, the entire process will be confined. New tasks (threads as well as processes) inherit the same profile and subprofile as their parent task. Unconfined processes with the CAP\_{\H}SYS\_{\H}ADMIN privilege may assign a profile to a task with a command like this: \begin{small} \begin{verbatim} $ echo "setprofile /name/of/profile" > \ /proc/$PID/attr/current \end{verbatim} \end{small} After that, the task will be in the new top-level profile, even if the process was in a subprofile before. Processes with the CAP\_{\H}SYS\_{\H}ADMIN privilege as well as the process itself can query the profile a process is in by reading from that file: \begin{small} \begin{verbatim} $ cat /proc/$PID/attr/current unconfined $ cat /proc/$PID/attr/current /name/of/profile (complain) $ cat /proc/$PID/attr/current /name/of/profile^hat_name (enforce) \end{verbatim} \end{small} The output includes the name of the profile and subprofile as well as the mode the active profile is in. (When a task is in a subprofile, the subprofile is the active profile.) \subsection{Profile Loading, Replacement, and Removal} Before the kernel can use any profiles, they must be loaded. The profile sources consist of plain text. This text representation is converted into in a binary representation that the kernel can more easily deal with by the user-space profile loader. Profiles contain potentially long lists of file access rules that may include wildcards. In order to make the lookup efficient, the AppArmor kernel module does not actually go through all the file access rules when checking for access. Instead, the profile loader takes those rules and compiles them into transition tables. Pathnames are then looked up in those tables with a simple and efficient algorithm, the theory behind which is explained in the Lexical Analysis section of the Dragon Book~\cite{dragon86}. An init script loads all the known profiles into the kernel at an early boot stage. This happens automatically and the system administrator tools will take care of loading, reloading, or removing profiles after they manipulate them, so end users will not usually notice this step. Profiles can be replaced at any time during runtime, and all processes running under old profiles will transparently be switched to the updated versions. Profiles can also be removed. All processes running under a profile that is removed will become unconfined. Profiles are always replaced together with all their subprofiles. It may be that an updated profile no longer contains a specific subprofile. If that happens while processes are using that subprofile, those processes will be put in a profile that denies all accesses. Such processes may still change to sibling subprofiles or back to the parent profile subject to the change\_hat(2) semantics. \section{AppArmor Walk-Through} \label{sec:walk-through} AppArmor consists of a set of kernel patches and accompanying user-space tools, both of which are available at \url{http://developer.novell.com/wiki/index.php/Apparmor}. \subsection{Kernel Patches and Configuration} The AppArmor kernel patches are provided in a format convenient for use with quilt,\footnote{ \url{http://savannah.nongnu.org/projects/quilt} } however, other tools for applying the patches can be used, too. The patches are supposed to apply against recent kernel.org git kernels. A copy of the current git tree can be obtained from \url{git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git} with \textit{git clone} (see the \hbox{git-clone(1)} manual page). In case the the differences between the latest git tree and the tree the AppArmor patches are based on is too big, the patches won't apply cleanly. In this case, trying an older git tree may work better. After obtaining the AppArmor patches tarball and the git tree which will end up in the linux-2.6 directory by default, the AppArmor patches can be applied to the git tree as follows: \begin{small} \begin{verbatim} $ tar zxvf apparmor.tar.gz $ cd linux-2.6/ $ ln -s ../apparmor patches $ quilt push -a \end{verbatim} \end{small} When configuring the kernel, make sure that AppArmor is built in or as a module (CONFIG\_{\H}SECURITY\_{\H}APPARMOR must be 'y' or 'm'). AppArmor cannot be used together with other Linux Security Modules, so if CONFIG\_{\H}SECURITY\_{\H}CAPABILITIES or CONFIG\_{\H}SECURITY\_{\H}SELINUX is set to 'y', they must be disabled by adding \texttt{selinux=0} and/or \texttt{capability.disable=1} to the kernel command line (grub, lilo, yaboot, etc.). It is not sufficient to put SELinux into permissive mode --- at this time, AppArmor cannot be combined with other LSMs. \subsection{The securityfs file system} AppArmor uses securityfs for configuration and to report information. The usual mountpoint for securityfs is /sys/{\H}kernel/{\H}security. Unless your distribution automatically does so, you can mount securityfs with: \begin{small} \begin{verbatim} $ mount securityfs -t securityfs /sys/kernel/security \end{verbatim} \end{small} Once securityfs has been mounted and the apparmor module loaded, /sys/{\H}kernel/{\H}security/{\H}apparmor/{\H}profiles will show the profiles loaded into the kernel, as well as mark if the profiles are in enforcement mode or in learning mode: \begin{small} \begin{verbatim} $ cat /sys/kernel/security/apparmor/profiles /usr/bin/opera (complain) /usr/lib/firefox/firefox.sh (complain) /sbin/lspci (enforce) ... \end{verbatim} \end{small} Profile loading, replacement, and unloading, as well as configuration of AppArmor is also done via securityfs. %/sys/kernel/security/apparmor/control/ control seldom-used features of AppArmor: % audit if '1', audit all actions by confined processes % complain if '1', allow all actions by confined processes, report % accesses not granted by policy % debug if '1', emit copius debugging % logsyscall if '1', use audit framework's syscall debugging, if audit % has been instructed to create per-task contexts.[2] \subsection{Profile Loading} Profile loading, replacement, and removal is performed by the apparmor\_parser utility from the apparmor-parser package. The package can easily be built by running make in the package's top-level directory. Once that is done and the AppArmor module loaded, you may use the parser to load profiles with: \begin{small} \begin{verbatim} $ echo "/tmp/ls { /tmp/ls rm, }" | apparmor_parser \end{verbatim} \end{small} Once a profile for a program has been loaded into the kernel, you must use the --replace option for replacing the existing profile with a new one (this option may be used even if no profile by that name exists): \begin{small} \begin{verbatim} $ echo "/tmp/ls { /tmp/ls rm, }" | apparmor_parser --replace \end{verbatim} \end{small} \subsection{Anatomy of a Profile} AppArmor profiles use a simple declaritive language, fully described in the apparmor.d(5) manual page. By convention, profiles are stored in /etc/{\H}apparmor.d/. The AppArmor parser supports a simple cpp-style include mechanism to allow sharing pieces of policy. A simple profile looks like this: \begin{small} \begin{verbatim} /bin/ls flags=(complain) { /bin/ls rm, /lib/ld-2.5.so rmix, /etc/ld.so.cache rm, /lib/lib*.so* rm, /dev/pts/* w, /proc/meminfo r, /var/run/nscd/socket w, /var/run/nscd/passwd r, /var/run/nscd/group r, /tmp/ r, } \end{verbatim} \end{small} Here, the first /bin/ls is the name of the profile. This profile will be automatically used whenever an unconfined process executes /bin/ls. The flags instruct AppArmor to put the profile in complain (aka. learning) mode: in this mode, all operations are allowed, and any events that would have been denied are logged. This helps users to incrementally deploy AppArmor in production environments. The default if no flags are specified is enforcement mode, in which all operations not allowed by the profile are logged and denied. Complain mode can be enabled individually for profiles as shown above (followed by reloading the profile), or by globally putting all profiles in complain mode with: \begin{small} \begin{verbatim} $ echo 1 > /sys/kernel/security/apparmor/control/complain \end{verbatim} \end{small} The user-space tools also include two small utilities, enforce and complain, which will put profiles into enforce or complain mode: \begin{small} \begin{verbatim} $ enforce firefox Setting /usr/lib/firefox/firefox.sh to enforce mode. \end{verbatim} \end{small} Inside the body of the profile are any number of rules consisting of a pathname expression that may include globbing, and a set of permissions. Table~\ref{tab:globbing} shows the supported shell-inspired globbing constructs; Section~\ref{sec:permissions} on page~\pageref{sec:permissions} describes the permissions. \begin{table}[tb] \center \begin{tabular}{|l|l|} \hline {?} & Any single character except ``/''. \\ {*} & Any number of characters except ``/''. \\ {**} & Any number of characters including ``/''. \\ {[ab]} & One of ``a'' or ``b''. \\ {[a-c]} & One of ``a'', ``b'', or ``c''. \\ \{ab,cd\} & Alternation: either ``ab'' or ``cd''. \\ \hline \end{tabular} \caption{Globbing in File Access Rules. Alternation counts as an exact match in file access rules; all others count as wildcards (see Section~\ref{sec:merging}).} \label{tab:globbing} \end{table} When AppArmor looks up a directory the pathname being looked up will end with a slash (e.g., /var/tmp/), otherwise it will not. Only rules that match that trailing slash will match directories. Some examples, none matching the /tmp directory itself, are: \begin{tabbing} \begin{tabular}{ll} {/tmp/*} & Files directly in /tmp. \\ {/tmp/*/} & Directories directly in /tmp. \\ {/tmp/**} & Files and directories anywhere underneath /tmp. \\ {/tmp/**/} & Directories anywhere underneath /tmp. \\ \end{tabular} \end{tabbing} As explained in Section~\ref{sec:model}, AppArmor does not require execute access to allow directory traversal, or write access on a directory to create or rename files inside the directory. Instead, write access is required on the specific files that a confined process attempts to create, remove, rename, etc. Read access is required for reading the contents of a directory. AppArmor also mediates the use of POSIX 1003.1e draft capabilities; capabilities that a process is allowed to use are listed in the profile by their name in lower-case (with ``CAP\_'' stripped off), e.g., \begin{small} \begin{verbatim} #include /sbin/lspci { #include #include capability sys_admin, /sbin/lspci mr, /sys/bus/pci/ r, /sys/bus/pci/devices/ r, /sys/devices/** r, /usr/share/pci.ids r, } \end{verbatim} \end{small} This profile uses predefined include files which are part of the apparmor-profiles package. \subsection{Logging} AppArmor uses the kernel standard audit facility for reporting. When a profile is in complain mode, the log messages look like this: \begin{small} \begin{verbatim} type=APPARMOR msg=audit(1174506429.573:1789): PERMITTING r access to /home/sarnold/ (ls(16504) profile /tmp/ls active /tmp/ls) \end{verbatim} \end{small} When a profile is in enforcement mode, the log messages look like this: \begin{small} \begin{verbatim} type=APPARMOR msg=audit(1174508205.298:1791): REJECTING r access to /bin/ (ls(16552) profile /tmp/ls active /tmp/ls) \end{verbatim} \end{small} These log messages are sent to the kernel auditing facility; if auditd is not running, the kernel will forward these messages to printk for collection by klogd. Auditd must be configured with --with-apparmor to enable the \#defines to handle AppArmor's message type correctly. AppArmor also logs some important events in the process lifecycle, such as when processes in learning mode fork and change domain via exec. These other events, while not strictly related to permissions requested by the process, help the genprof profile generation tool reconstruct when specific accesses are required by processes --- this allows the tool to make more relevant and meaningful policy suggestions. \subsection{Generating Profiles By Hand} While the majority of our users are expected to generate profiles with the help of our profile tools, it is possible to write policy by hand. This final section gives a very quick walkthrough generating a simple profile for firefox. Since the kernel resolves symlinks to their ``final destinations'' before presenting AppArmor with policy questions, we first must see if /usr/{\H}bin/{\H}firefox is a symlink or the shell script that starts firefox; on our system, it is a symlink: \begin{small} \begin{verbatim} $ ls -l /usr/bin/firefox lrwxrwxrwx 1 root root 25 Mar 21 13:36 /usr/bin/firefox -> ../lib/firefox/firefox.sh \end{verbatim} \end{small} So we will start a profile for /usr/{\H}lib/{\H}firefox/{\H}firefox.sh. This shell script will execute firefox-bin, as we will see later; when it does so, we will tell AppArmor to inherit this profile. Thus, firefox-bin will be executing under the profile for /usr/{\H}lib/{\H}firefox/{\H}firefox.sh. To get started, we can make some assumptions about the privileges that firefox will need (both as a shell script and as a fairly complex GUI application): \begin{small} \begin{verbatim} $ cat /etc/apparmor.d/usr.lib.firefox.firefox.sh /usr/lib/firefox/firefox.sh flags=(complain) { /usr/lib/firefox/firefox.sh r, /bin/bash rmix, /lib/ld-2.5.so rmix, /etc/ld.so.cache rm, /lib/lib*.so* rm, /usr/lib/lib*.so* rm, } $ apparmor_parser --reload < \ /etc/apparmor.d/usr.lib.firefox.firefox.sh Replacement succeeded for "/usr/lib/firefox/firefox.sh". \end{verbatim} \end{small} The easiest way to see what accesses AppArmor allows, start a tail -F /var/{\H}log/{\H}audit/{\H}audit.log (or /var/{\H}log/{\H}messages, or wherever your audit messages are being sent). In another terminal, start firefox. tail will show a few hundred PERMITTING audit events like these: \begin{small} \begin{verbatim} type=APPARMOR msg=audit(1174512269.026:1804): PERMITTING rw access to /dev/tty (firefox(16950) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) type=APPARMOR msg=audit(1174512269.026:1805): PERMITTING r access to /usr/share/locale/locale.alias (firefox(16950) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) type=APPARMOR msg=audit(1174512269.026:1806): PERMITTING r access to /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION (firefox(16950) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) \end{verbatim} \end{small} Because we want this profile to be fairly simple we'll be fairly permissive, add a few more rules to the profile and reload: \begin{small} \begin{verbatim} /dev/tty rw, /usr/share/locale/** r, /usr/lib/locale/** r, \end{verbatim} \end{small} Now re-run firefox. There is no need to handle all log entries at once. In complain mode, AppArmor will only report accesses that are not in the profile. This makes it fairly easy to add a few rules and re-run the application to determine what privileges are still necessary. We get a few more messages: \begin{small} \begin{verbatim} type=APPARMOR msg=audit(1174512791.236:5356): PERMITTING r access to /usr/lib/gconv/gconv-modules.cache (firefox(17031) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) type=APPARMOR msg=audit(1174512791.236:5357): PERMITTING r access to /proc/meminfo (firefox(17031) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) type=APPARMOR msg=audit(1174512791.240:5358): PERMITTING x access to /bin/basename (firefox(17032) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) type=APPARMOR msg=audit(1174512791.240:5359): LOGPROF-HINT changing_profile pid=17032 type=APPARMOR msg=audit(1174512791.240:5360): PERMITTING r access to /bin/basename (firefox(17032) profile null-complain-profile active null-complain-profile) ... type=APPARMOR msg=audit(1174512791.240:5364): PERMITTING mr access to /bin/basename (basename(17032) profile null-complain-profile active null-complain-profile) \end{verbatim} \end{small} So now, we add a few more rules: \begin{small} \begin{verbatim} /usr/lib/gconv/** r, /proc/meminfo r, /bin/basename rmix, \end{verbatim} \end{small} We selected ``rmix'' for /bin/basename --- most small shell utilities should not have a profile for themselves. There's nothing wrong with giving basename a profile, but the value of such a profile would be very limited. Giving other shell utilities their own profiles would be worse: the profile would need read access to the whole filesystem for shell scripts to function reliably. In our case, basename simply inherits privileges from another profile, then it has no more and no fewer privileges than the calling program --- which is often a fine tradeoff. The loader will need r and m access to execute basename, and we use ix to execute basename in the same profile. The kernel logs only reported r, m and x access; we have to choose the execute mode ourselves. Again, the standard user tools would prompt users for this decision and give consequences of decisions. We continue in this fashion, iteratively adding and changing rules as needed by the logs. Some of the logs report attribute modifications, such as: \begin{small} \begin{verbatim} type=APPARMOR msg=audit(1174519157.851:10357): PERMITTING attribute (mode,ctime,) change to /home/sarnold/.gnome2_private/ (firefox-bin(17338) profile /usr/lib/firefox/firefox.sh active /usr/lib/firefox/firefox.sh) \end{verbatim} \end{small} These need to be represented in the profile with simple w access. \begin{small} \begin{verbatim} /home/*/.gnome2_private/ w, \end{verbatim} \end{small} After nine iterations, the profile looks like this --- we have inserted blank lines between each iteration: \begin{small} \begin{verbatim} /usr/lib/firefox/firefox.sh flags=(complain) { /usr/lib/firefox/firefox.sh r, /bin/bash rmix, /lib/ld-2.5.so rmix, /etc/ld.so.cache rm, /lib/lib*.so* rm, /usr/lib/lib*.so* rm, /dev/tty rw, /usr/share/locale/** r, /usr/lib/locale/** r, /usr/lib/gconv/** r, /proc/meminfo r, /bin/basename rmix, /usr/bin/file rmix, /etc/magic r, /usr/share/misc/magic.mgc r, /bin/gawk rmix, /usr/lib/firefox/firefox-bin rmix, /usr/lib/firefox/lib*so rm, /opt/gnome/lib/lib*so* rm, /usr/share/X11/locale/* r, /var/run/nscd/socket w, /var/run/nscd/passwd r, /usr/share/X11/locale/** r, /home/*/.Xauthority r, /usr/lib/gconv/*so m, /home/*/.mozilla/** rw, /etc/resolv.conf r, /usr/lib/firefox/**.so rm, /usr/lib/firefox/** r, /etc/opt/gnome/** r, /var/run/dbus/system_bus_socket w, /etc/localtime r, /opt/gnome/lib/**.so rm, /var/cache/libx11/compose/* r, /tmp/orbit-*/ w, /dev/urandom r, /tmp/ r, /dev/null rw, /opt/gnome/lib/GConf/2/gconfd-2 rmix, /dev/log w, /tmp/orbit-*/* w, /tmp/gconfd-*/ r, /tmp/gconfd-*/** rwl, /home/*/.gconf/ r, /home/*/.gconf/* rw, /etc/fonts/** r, /var/cache/fontconfig/* r, /home/*/.fontconfig/** r, /usr/share/ghostscript/fonts/** r, /etc/passwd r, /var/tmp/ r, /bin/netstat rmix, /home/*/.gnome2_private/ w, /home/*/.gconfd/* rw, /proc/net/ r, /proc/net/* r, /usr/share/fonts/** r, /usr/lib/browser-plugins/ r, /usr/lib/browser-plugins/** rm, } \end{verbatim} \end{small} Sorting the entries in the profile can help show areas that can be collapsed with even more generic rules. After doing that and making a few rules slightly more generic, we end up with: \begin{small} \begin{verbatim} /usr/lib/firefox/firefox.sh { /bin/basename rmix, /bin/bash rmix, /bin/gawk rmix, /bin/netstat rmix, /dev/log w, /dev/null rw, /dev/tty rw, /dev/urandom r, /etc/fonts/** r, /etc/ld.so.cache rm, /etc/localtime r, /etc/magic r, /etc/opt/gnome/** r, /etc/passwd r, /etc/resolv.conf r, /home/*/.fontconfig/** r, /home/*/.gconfd/* rw, /home/*/.gconf/ r, /home/*/.gconf/* rw, /home/*/.gnome2_private/ w, /home/*/.mozilla/** rw, /home/*/.Xauthority r, /lib/ld-2.5.so rmix, /lib/lib*.so* rm, /opt/gnome/lib/GConf/2/gconfd-2 rmix, /opt/gnome/lib/**.so* rm, /proc/meminfo r, /proc/net/ r, /proc/net/* r, /tmp/gconfd-*/ r, /tmp/gconfd-*/** rwl, /tmp/orbit-*/ w, /tmp/orbit-*/* w, /tmp/ r, /usr/bin/file rmix, /usr/lib/browser-plugins/ r, /usr/lib/browser-plugins/** rm, /usr/lib/firefox/firefox-bin rmix, /usr/lib/firefox/firefox.sh r, /usr/lib/firefox/** r, /usr/lib/firefox/**.so rm, /usr/lib/gconv/** r, /usr/lib/gconv/*so m, /usr/lib/lib*.so* rm, /usr/lib/locale/** r, /usr/share/** r, /var/cache/fontconfig/* r, /var/cache/libx11/compose/* r, /var/run/dbus/system_bus_socket w, /var/run/nscd/passwd r, /var/run/nscd/socket w, /var/tmp/ r, } \end{verbatim} \end{small} \begin{thebibliography}{XX} \bibitem{apparmor} AppArmor documentation, \url{http://www.novell.com/documentation/apparmor/} \bibitem{ols06-pai} Al Viro and Ram Pai: {\em Shared-Subtree Concept, Implementation and Applications in Linux,} Ottawa Linux Symposium, July 19-22, 2006, \url{http://www.linuxsymposium.org/2006/} \bibitem{dragon86} Alfred V. Aho, Ravi Sethi, Jeffrey D. Ullman: {\em Compilers: Principles, Techniques, and Tools} (The ``Dragon Book''), Addison-Wesley, 1986, ISBN 0-201-10088-6. A second edition of this classic is available since August 2006 as ISBN 0-321-48681-1. \end{thebibliography} \end{document} % vim:textwidth=72 apparmor-2.11.0/parser/signal.h0000644000175000017500000000301312413327176014131 0ustar jjjj/* * Copyright (c) 2014 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_SIGNAL_H #define __AA_SIGNAL_H #include "parser.h" #include "rule.h" #include "profile.h" #define AA_MAY_SEND (1 << 1) #define AA_MAY_RECEIVE (1 << 2) #define AA_VALID_SIGNAL_PERMS (AA_MAY_SEND | AA_MAY_RECEIVE) typedef set Signals; int parse_signal_mode(const char *str_mode, int *mode, int fail); class signal_rule: public rule_t { void extract_sigs(struct value_list **list); void move_conditionals(struct cond_entry *conds); public: Signals signals; char *peer_label; int mode; int audit; int deny; signal_rule(int mode, struct cond_entry *conds); virtual ~signal_rule() { signals.clear(); free(peer_label); }; virtual ostream &dump(ostream &os); virtual int expand_variables(void); virtual int gen_policy_re(Profile &prof); virtual void post_process(Profile &prof unused) { }; }; #endif /* __AA_SIGNAL_H */ apparmor-2.11.0/parser/parser_lex.l0000644000175000017500000003731312723373114015033 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * Copyright (c) 2010 - 2013 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Canonical, Ltd. */ /* Definitions section */ /* %option main */ /* eliminates need to link with libfl */ %option noyywrap %option nounput %option stack %{ #include #include #include #include #include #include #include #include #include "parser.h" #include "profile.h" #include "parser_include.h" #include "parser_yacc.h" #include "lib.h" #include "policy_cache.h" #ifdef PDEBUG #undef PDEBUG #endif /* #define DEBUG */ #ifdef DEBUG static int yy_top_state(void); #define PDEBUG(fmt, args...) fprintf(stderr, "Lexer (Line %d) (state %s): " fmt, current_lineno, state_names[YY_START].c_str(), ## args) #else #define PDEBUG(fmt, args...) /* Do nothing */ #endif #define NPDEBUG(fmt, args...) /* Do nothing */ #define DUMP_PREPROCESS do { if (preprocess_only) ECHO; } while (0) #define DUMP_AND_DEBUG(X...) \ do { \ DUMP_PREPROCESS; \ PDEBUG(X); \ } while (0) #define EAT_TOKEN(X...) DUMP_AND_DEBUG(X) #define RETURN_TOKEN(X) \ do { \ DUMP_AND_DEBUG("Matched: '%s' Returning(%s)\n", yytext, #X); \ return (X); \ } while (0) #define POP() \ do { \ DUMP_AND_DEBUG(" (pop_to(%s)): Matched: %s\n", state_names[yy_top_state()].c_str(), yytext); \ yy_pop_state(); \ } while (0) #define POP_NODUMP() \ do { \ PDEBUG(" (pop_to(%s)): Matched: %s\n", state_names[yy_top_state()].c_str(), yytext); \ yy_pop_state(); \ } while (0) #define PUSH(X) \ do { \ DUMP_AND_DEBUG(" (push(%s)): Matched: %s\n", state_names[(X)].c_str(), yytext); \ yy_push_state(X); \ } while (0) #define POP_AND_RETURN(X) \ do { \ POP(); \ return (X); \ } while (0) #define PUSH_AND_RETURN(X, Y) \ do { \ PUSH(X); \ return (Y); \ } while (0) #define BEGIN_AND_RETURN(X, Y) \ do { \ DUMP_AND_DEBUG(" (begin(%s)): Matched: %s\n", state_names[(X)].c_str(), yytext); \ BEGIN(X); \ return (Y); \ } while (0) #define YY_NO_INPUT #define STATE_TABLE_ENT(X) {X, #X } extern unordered_map state_names; struct cb_struct { const char *fullpath; const char *filename; }; static int include_dir_cb(int dirfd unused, const char *name, struct stat *st, void *data) { struct cb_struct *d = (struct cb_struct *) data; autofree char *path = NULL; if (asprintf(&path, "%s/%s", d->fullpath, name) < 0) yyerror("Out of memory"); if (is_blacklisted(name, path)) return 0; if (S_ISREG(st->st_mode)) { if (!(yyin = fopen(path,"r"))) yyerror(_("Could not open '%s' in '%s'"), path, d->filename); PDEBUG("Opened include \"%s\" in \"%s\"\n", path, d->filename); update_mru_tstamp(yyin, path); push_include_stack(path); yypush_buffer_state(yy_create_buffer(yyin, YY_BUF_SIZE)); } return 0; } void include_filename(char *filename, int search) { FILE *include_file = NULL; struct stat my_stat; autofree char *fullpath = NULL; if (search) { if (preprocess_only) fprintf(yyout, "\n\n##included <%s>\n", filename); include_file = search_path(filename, &fullpath); } else { if (preprocess_only) fprintf(yyout, "\n\n##included \"%s\"\n", filename); fullpath = strdup(filename); include_file = fopen(fullpath, "r"); } if (!include_file) yyerror(_("Could not open '%s'"), fullpath ? fullpath: filename); if (fstat(fileno(include_file), &my_stat)) yyerror(_("fstat failed for '%s'"), fullpath); if (S_ISREG(my_stat.st_mode)) { yyin = include_file; update_mru_tstamp(include_file, fullpath); PDEBUG("Opened include \"%s\"\n", fullpath); push_include_stack(fullpath); yypush_buffer_state(yy_create_buffer( yyin, YY_BUF_SIZE )); } else if (S_ISDIR(my_stat.st_mode)) { struct cb_struct data = { fullpath, filename }; fclose(include_file); include_file = NULL; if (dirat_for_each(AT_FDCWD, fullpath, &data, include_dir_cb)) { yyerror(_("Could not process include directory" " '%s' in '%s'"), fullpath, filename);; } } } %} CARET "^" OPEN_BRACE \{ CLOSE_BRACE \} SLASH \/ COLON : AMPERSAND & END_OF_RULE [,] RANGE - MODE_CHARS ([RrWwaLlMmkXx])|(([Pp]|[Cc])[Xx])|(([Pp]|[Cc])?([IiUu])[Xx]) MODES {MODE_CHARS}+ WS [[:blank:]] NUMBER [[:digit:]]+ ID_CHARS [^ \t\n"!,] ID {ID_CHARS}|(,{ID_CHARS}|\\[ ]|\\\t|\\\"|\\!|\\,) IDS {ID}+ POST_VAR_ID_CHARS [^ \t\n"!,]{-}[=\+] POST_VAR_ID {POST_VAR_ID_CHARS}|(,{POST_VAR_ID_CHARS}|\\[ ]|\\\t|\\\"|\\!|\\,|\\\(|\\\)) LIST_VALUE_ID_CHARS ([^ \t\n"!,]{-}[()]|\\[ ]|\\\t|\\\"|\\!|\\,|\\\(|\\\)) LIST_VALUE_QUOTED_ID_CHARS [^\0"]|\\\" LIST_VALUE_ID {LIST_VALUE_ID_CHARS}+ QUOTED_LIST_VALUE_ID \"{LIST_VALUE_QUOTED_ID_CHARS}+\" ID_CHARS_NOEQ [^ \t\n"!,]{-}[=] LEADING_ID_CHARS_NOEQ [^ \t\n"!,]{-}[=()+&] ID_NOEQ {ID_CHARS_NOEQ}|(,{ID_CHARS_NOEQ}) IDS_NOEQ {LEADING_ID_CHARS_NOEQ}{ID_NOEQ}* ALLOWED_QUOTED_ID [^\0"]|\\\" QUOTED_ID \"{ALLOWED_QUOTED_ID}*\" IP {NUMBER}\.{NUMBER}\.{NUMBER}\.{NUMBER} HAT hat{WS}* PROFILE profile{WS}* KEYWORD [[:alpha:]_]+ VARIABLE_NAME [[:alpha:]][[:alnum:]_]* SET_VAR_PREFIX @ SET_VARIABLE {SET_VAR_PREFIX}(\{{VARIABLE_NAME}\}|{VARIABLE_NAME}) BOOL_VARIABLE $(\{{VARIABLE_NAME}\}|{VARIABLE_NAME}) LABEL (\/|{SET_VARIABLE}{POST_VAR_ID}|{COLON}|{AMPERSAND}){ID}* QUOTED_LABEL \"(\/|{SET_VAR_PREFIX}|{COLON}|{AMPERSAND})([^\0"]|\\\")*\" OPEN_PAREN \( CLOSE_PAREN \) COMMA \, EQUALS = ADD_ASSIGN \+= ARROW -> LT_EQUAL <= /* IF adding new state please update state_names table at eof */ %x SUB_ID %x SUB_ID_WS %x SUB_VALUE %x EXTCOND_MODE %x EXTCONDLIST_MODE %x NETWORK_MODE %x LIST_VAL_MODE %x LIST_COND_MODE %x LIST_COND_VAL %x LIST_COND_PAREN_VAL %x ASSIGN_MODE %x RLIMIT_MODE %x MOUNT_MODE %x DBUS_MODE %x SIGNAL_MODE %x PTRACE_MODE %x UNIX_MODE %x CHANGE_PROFILE_MODE %x INCLUDE %% %{ /* Copied directly into yylex function */ if (parser_token) { int t = parser_token; parser_token = 0; return t; } %} { {WS}+ { DUMP_PREPROCESS; /* Ignoring whitespace */ } } { (\<([^\> \t\n]+)\>|\"([^\" \t\n]+)\") { /* */ autofree char *filename = strndup(yytext, yyleng - 1); include_filename(filename + 1, *filename == '<'); POP_NODUMP(); } [^\<\>\" \t\n]+ { /* filename */ include_filename(yytext, 0); POP_NODUMP(); } } <> { fclose(yyin); pop_include_stack(); yypop_buffer_state(); if ( !YY_CURRENT_BUFFER ) yyterminate(); } { peer/{WS}*={WS}*\( { /* we match to the = in the lexer so that we can switch scanner * state. By the time the parser see the = it may be too late * as bison may have requested the next token from the scanner */ yylval.id = processid(yytext, yyleng); PUSH_AND_RETURN(EXTCONDLIST_MODE, TOK_CONDLISTID); } {VARIABLE_NAME}/{WS}*= { /* we match to the = in the lexer so that we can switch scanner * state. By the time the parser see the = it may be too late * as bison may have requested the next token from the scanner */ yylval.id = processid(yytext, yyleng); PUSH_AND_RETURN(EXTCOND_MODE, TOK_CONDID); } {VARIABLE_NAME}/{WS}+in{WS}*\( { /* we match to 'in' in the lexer so that we can switch scanner * state. By the time the parser see the 'in' it may be to * late as bison may have requested the next token from the * scanner */ yylval.id = processid(yytext, yyleng); PUSH_AND_RETURN(EXTCOND_MODE, TOK_CONDID); } } { ({IDS}|{QUOTED_ID}) { /* Go into separate state to match generic ID strings */ yylval.id = processid(yytext, yyleng); POP_AND_RETURN(TOK_ID); } } { ({IDS}|{QUOTED_ID}) { /* Go into separate state to match generic VALUE strings */ yylval.id = processid(yytext, yyleng); POP_AND_RETURN(TOK_VALUE); } } { {CLOSE_PAREN} { POP_AND_RETURN(TOK_CLOSEPAREN); } {COMMA} { EAT_TOKEN("listval: ,\n"); } ({LIST_VALUE_ID}|{QUOTED_ID}) { yylval.id = processid(yytext, yyleng); RETURN_TOKEN(TOK_VALUE); } } { {EQUALS}{WS}*/[^(\n]{-}{WS} { BEGIN_AND_RETURN(SUB_VALUE, TOK_EQUALS);} {EQUALS} { RETURN_TOKEN(TOK_EQUALS); } /* Don't push state here as this is a transition start condition and * we want to return to the start condition that invoked * when LIST_VAL_ID is done */ {OPEN_PAREN} { BEGIN_AND_RETURN(LIST_VAL_MODE, TOK_OPENPAREN); } in { RETURN_TOKEN(TOK_IN); } } { ({LIST_VALUE_ID}|{QUOTED_LIST_VALUE_ID}) { yylval.id = processid(yytext, yyleng); POP_AND_RETURN(TOK_VALUE); } } { {CLOSE_PAREN} { POP(); } ({LIST_VALUE_ID}|{QUOTED_LIST_VALUE_ID}) { yylval.id = processid(yytext, yyleng); RETURN_TOKEN(TOK_VALUE); } } { {CLOSE_PAREN} { POP_AND_RETURN(TOK_CLOSEPAREN); } {COMMA} { EAT_TOKEN("listcond: , \n"); } {ID_CHARS_NOEQ}+ { yylval.id = processid(yytext, yyleng); RETURN_TOKEN(TOK_CONDID); } {EQUALS}{WS}*{OPEN_PAREN} { PUSH_AND_RETURN(LIST_COND_PAREN_VAL, TOK_EQUALS); } {EQUALS} { PUSH_AND_RETURN(LIST_COND_VAL, TOK_EQUALS); } } { {EQUALS} { RETURN_TOKEN(TOK_EQUALS); } {OPEN_PAREN} { /* Don't push state here as this is a transition * start condition and we want to return to the start * condition that invoked when * LIST_VAL_ID is done */ BEGIN_AND_RETURN(LIST_COND_MODE, TOK_OPENPAREN); } } { ({IDS}|{QUOTED_ID}) { yylval.var_val = processid(yytext, yyleng); RETURN_TOKEN(TOK_VALUE); } {END_OF_RULE} { yylval.id = strdup(yytext); DUMP_PREPROCESS; yyerror(_("Variable declarations do not accept trailing commas")); } \\\n { DUMP_PREPROCESS; current_lineno++ ; } \r?\n { DUMP_PREPROCESS; current_lineno++; POP(); } } { {IDS} { yylval.id = strdup(yytext); RETURN_TOKEN(TOK_ID); } } { safe { RETURN_TOKEN(TOK_SAFE); } unsafe { RETURN_TOKEN(TOK_UNSAFE); } {ARROW} { /** * Push state so that we can return TOK_ID even when the * change_profile target is 'safe' or 'unsafe'. */ PUSH_AND_RETURN(SUB_ID_WS, TOK_ARROW); } ({IDS}|{QUOTED_ID}) { yylval.id = processid(yytext, yyleng); RETURN_TOKEN(TOK_ID); } } { -?{NUMBER} { yylval.var_val = strdup(yytext); RETURN_TOKEN(TOK_VALUE); } {KEYWORD} { yylval.id = strdup(yytext); if (strcmp(yytext, "infinity") == 0) RETURN_TOKEN(TOK_VALUE); RETURN_TOKEN(TOK_ID); } {LT_EQUAL} { RETURN_TOKEN(TOK_LE); } } { create { RETURN_TOKEN(TOK_CREATE); } listen { RETURN_TOKEN(TOK_LISTEN); } accept { RETURN_TOKEN(TOK_ACCEPT); } connect { RETURN_TOKEN(TOK_CONNECT); } getattr { RETURN_TOKEN(TOK_GETATTR); } setattr { RETURN_TOKEN(TOK_SETATTR); } getopt { RETURN_TOKEN(TOK_GETOPT); } setopt { RETURN_TOKEN(TOK_SETOPT); } shutdown { RETURN_TOKEN(TOK_SHUTDOWN); } } { bind { RETURN_TOKEN(TOK_BIND); } } { eavesdrop { RETURN_TOKEN(TOK_EAVESDROP); } } { send { RETURN_TOKEN(TOK_SEND); } receive { RETURN_TOKEN(TOK_RECEIVE); } } { trace { RETURN_TOKEN(TOK_TRACE); } readby { RETURN_TOKEN(TOK_READBY); } tracedby { RETURN_TOKEN(TOK_TRACEDBY); } } { read { RETURN_TOKEN(TOK_READ); } write { RETURN_TOKEN(TOK_WRITE); } {OPEN_PAREN} { PUSH_AND_RETURN(LIST_VAL_MODE, TOK_OPENPAREN); } (r|w|rw|wr)/([[:space:],]) { yylval.mode = strdup(yytext); RETURN_TOKEN(TOK_MODE); } } { {ARROW} { RETURN_TOKEN(TOK_ARROW); } } { ({IDS_NOEQ}|{LABEL}|{QUOTED_ID}) { yylval.id = processid(yytext, yyleng); RETURN_TOKEN(TOK_ID); } } #include/.*\r?\n { /* Don't use PUSH() macro here as we don't want #include echoed out. * It needs to be handled specially */ yy_push_state(INCLUDE); } include/{WS} { /* Don't use PUSH() macro here as we don't want #include echoed out. * It needs to be handled specially */ yy_push_state(INCLUDE); } #.*\r?\n { /* normal comment */ DUMP_AND_DEBUG("comment(%d): %s\n", current_lineno, yytext); current_lineno++; } {CARET} { PUSH_AND_RETURN(SUB_ID, TOK_CARET); } {ARROW} { RETURN_TOKEN(TOK_ARROW); } {EQUALS} { PUSH_AND_RETURN(ASSIGN_MODE, TOK_EQUALS); } {ADD_ASSIGN} { PUSH_AND_RETURN(ASSIGN_MODE, TOK_ADD_ASSIGN); } {SET_VARIABLE} { yylval.set_var = strdup(yytext); RETURN_TOKEN(TOK_SET_VAR); } {BOOL_VARIABLE} { yylval.bool_var = strdup(yytext); RETURN_TOKEN(TOK_BOOL_VAR); } {OPEN_BRACE} { RETURN_TOKEN(TOK_OPEN); } {CLOSE_BRACE} { RETURN_TOKEN(TOK_CLOSE); } ({LABEL}|{QUOTED_LABEL}) { yylval.id = processid(yytext, yyleng); RETURN_TOKEN(TOK_ID); } ({MODES})/([[:space:],]) { yylval.mode = strdup(yytext); RETURN_TOKEN(TOK_MODE); } {HAT} { PUSH_AND_RETURN(SUB_ID, TOK_HAT); } {PROFILE} { PUSH_AND_RETURN(SUB_ID, TOK_PROFILE); } {COLON} { RETURN_TOKEN(TOK_COLON); } {OPEN_PAREN} { PUSH_AND_RETURN(LIST_VAL_MODE, TOK_OPENPAREN); } {VARIABLE_NAME} { int token = get_keyword_token(yytext); int state = INITIAL; /* special cases */ switch (token) { case -1: /* no token found */ yylval.id = processunquoted(yytext, yyleng); RETURN_TOKEN(TOK_ID); break; case TOK_RLIMIT: state = RLIMIT_MODE; break; case TOK_NETWORK: state = NETWORK_MODE; break; case TOK_CHANGE_PROFILE: state = CHANGE_PROFILE_MODE; break; case TOK_MOUNT: case TOK_REMOUNT: case TOK_UMOUNT: state = MOUNT_MODE; break; case TOK_DBUS: state = DBUS_MODE; break; case TOK_SIGNAL: state = SIGNAL_MODE; break; case TOK_PTRACE: state = PTRACE_MODE; break; case TOK_UNIX: state = UNIX_MODE; break; default: /* nothing */ break; } PUSH_AND_RETURN(state, token); } { {END_OF_RULE} { if (YY_START != INITIAL) POP_NODUMP(); RETURN_TOKEN(TOK_END_OF_RULE); } \r?\n { DUMP_PREPROCESS; current_lineno++; } } { [^\n] { DUMP_PREPROCESS; /* Something we didn't expect */ yyerror(_("Found unexpected character: '%s'"), yytext); } } %% /* Create a table mapping lexer state number to the name used in the * in the code. This allows for better debug output */ unordered_map state_names = { STATE_TABLE_ENT(INITIAL), STATE_TABLE_ENT(SUB_ID), STATE_TABLE_ENT(SUB_ID_WS), STATE_TABLE_ENT(SUB_VALUE), STATE_TABLE_ENT(EXTCOND_MODE), STATE_TABLE_ENT(EXTCONDLIST_MODE), STATE_TABLE_ENT(NETWORK_MODE), STATE_TABLE_ENT(LIST_VAL_MODE), STATE_TABLE_ENT(LIST_COND_MODE), STATE_TABLE_ENT(LIST_COND_VAL), STATE_TABLE_ENT(LIST_COND_PAREN_VAL), STATE_TABLE_ENT(ASSIGN_MODE), STATE_TABLE_ENT(RLIMIT_MODE), STATE_TABLE_ENT(MOUNT_MODE), STATE_TABLE_ENT(DBUS_MODE), STATE_TABLE_ENT(SIGNAL_MODE), STATE_TABLE_ENT(PTRACE_MODE), STATE_TABLE_ENT(UNIX_MODE), STATE_TABLE_ENT(CHANGE_PROFILE_MODE), STATE_TABLE_ENT(INCLUDE), }; apparmor-2.11.0/parser/rc.apparmor.debian0000644000175000017500000000502511503736226016077 0ustar jjjj#!/bin/sh # ---------------------------------------------------------------------- # Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 # NOVELL (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc. # ---------------------------------------------------------------------- # rc.apparmor by Steve Beattie # # /etc/init.d/apparmor # # chkconfig: 2345 01 99 # description: AppArmor rc file. This rc script inserts the apparmor \ # module and runs the parser on the /etc/apparmor.d/ \ # directory. # ### BEGIN INIT INFO # Provides: apparmor # Required-Start: # Required-Stop: # Default-Start: 3 4 5 # Default-Stop: 0 1 2 6 # Short-Description: AppArmor initialization # Description: AppArmor rc file. This rc script inserts the apparmor # module and runs the parser on the /etc/apparmor.d/ # directory. ### END INIT INFO APPARMOR_FUNCTIONS=/lib/apparmor/rc.apparmor.functions aa_action() { STRING=$1 shift $* rc=$? if [ $rc -eq 0 ] ; then aa_log_success_msg $"$STRING " else aa_log_failure_msg $"$STRING " fi return $rc } aa_log_success_msg() { [ -n "$1" ] && echo -n $1 echo ": done." } aa_log_warning_msg() { [ -n "$1" ] && echo -n $1 echo ": Warning." } aa_log_failure_msg() { [ -n "$1" ] && echo -n $1 echo ": Failed." } aa_log_skipped_msg() { [ -n "$1" ] && echo -n $1 echo ": Skipped." } usage() { echo "Usage: $0 {start|stop|restart|try-restart|reload|force-reload|status|kill}" } # source apparmor function library if [ -f "${APPARMOR_FUNCTIONS}" ]; then . ${APPARMOR_FUNCTIONS} else aa_log_failure_msg "Unable to find AppArmor initscript functions" exit 1 fi test -x ${PARSER} || exit 0 # by debian policy case "$1" in start) apparmor_start rc=$? ;; stop) apparmor_stop rc=$? ;; restart|reload|force-reload) apparmor_restart rc=$? ;; try-restart) apparmor_try_restart rc=$? ;; kill) apparmor_kill rc=$? ;; status) apparmor_status rc=$? ;; *) usage exit 1 ;; esac exit $rc apparmor-2.11.0/parser/apparmor.7.html0000644000175000017500000001574013034613172015363 0ustar jjjj
 

NAME

AppArmor - kernel enhancement to confine programs to a limited set of resources.

DESCRIPTION

AppArmor is a kernel enhancement to confine programs to a limited set of resources. AppArmor's unique security model is to bind access control attributes to programs rather than to users.

AppArmor confinement is provided via profiles loaded into the kernel via apparmor_parser(8), typically through the /etc/init.d/apparmor SysV initscript, which is used like this:

        # /etc/init.d/apparmor start
        # /etc/init.d/apparmor stop
        # /etc/init.d/apparmor restart

AppArmor can operate in two modes: enforcement, and complain or learning:

  • enforcement - Profiles loaded in enforcement mode will result in enforcement of the policy defined in the profile as well as reporting policy violation attempts to syslogd.

  • complain - Profiles loaded in complain mode will not enforce policy. Instead, it will report policy violation attempts. This mode is convenient for developing profiles. To manage complain mode for individual profiles the utilities aa-complain(8) and aa-enforce(8) can be used. These utilities take a program name as an argument.

Profiles are traditionally stored in files in /etc/apparmor.d/ under filenames with the convention of replacing the / in pathnames with . (except for the root /) so profiles are easier to manage (e.g. the /usr/sbin/nscd profile would be named usr.sbin.nscd).

Profiles are applied to a process at exec(3) time (as seen through the execve(2) system call); an already running process cannot be confined. However, once a profile is loaded for a program, that program will be confined on the next exec(3).

AppArmor supports the Linux kernel's securityfs filesystem, and makes available the list of the profiles currently loaded; to mount the filesystem:

        # mount -tsecurityfs securityfs /sys/kernel/security
        $ cat /sys/kernel/security/apparmor/profiles
        /usr/bin/mutt
        /usr/bin/gpg
           ...

Normally, the initscript will mount securityfs if it has not already been done.

AppArmor also restricts what privileged operations a confined process may execute, even if the process is running as root. A confined process cannot call the following system calls:

        create_module(2) delete_module(2) init_module(2) ioperm(2)
        iopl(2) ptrace(2) reboot(2) setdomainname(2)
        sethostname(2) swapoff(2) swapon(2) sysctl(2)

ERRORS

When a confined process tries to access a file it does not have permission to access, the kernel will report a message through audit, similar to:

        audit(1386511672.612:238): apparmor="DENIED" operation="exec" 
          parent=7589 profile="/tmp/sh" name="/bin/uname" pid=7605 
          comm="sh" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

        audit(1386511672.613:239): apparmor="DENIED" operation="open" 
          parent=7589 profile="/tmp/sh" name="/bin/uname" pid=7605 
          comm="sh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

        audit(1386511772.804:246): apparmor="DENIED" operation="capable"
          parent=7246 profile="/tmp/sh" pid=7589 comm="sh" pid=7589 
          comm="sh" capability=2  capname="dac_override"

The permissions requested by the process are described in the operation= and denied_mask= (for files - capabilities etc. use a slightly different log format). The "name" and process id of the running program are reported, as well as the profile name including any "hat" that may be active, separated by "//". ("Name" is in quotes, because the process name is limited to 15 bytes; it is the same as reported through the Berkeley process accounting.)

For confined processes running under a profile that has been loaded in complain mode, enforcement will not take place and the log messages reported to audit will be of the form:

        audit(1386512577.017:275): apparmor="ALLOWED" operation="open"
          parent=8012 profile="/usr/bin/du" name="/etc/apparmor.d/tunables/"
          pid=8049 comm="du" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

        audit(1386512577.017:276): apparmor="ALLOWED" operation="open"
          parent=8012 profile="/usr/bin/du" name="/etc/apparmor.d/tunables/"
          pid=8049 comm="du" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

If the userland auditd is not running, the kernel will send audit events to klogd; klogd will send the messages to syslog, which will log the messages with the KERN facility. Thus, REJECTING and PERMITTING messages may go to either /var/log/audit/audit.log or /var/log/messages, depending upon local configuration.

FILES

/etc/init.d/apparmor
/etc/apparmor.d/
/var/lib/apparmor/
/var/log/audit/audit.log
/var/log/messages

SEE ALSO

apparmor_parser(8), aa_change_hat(2), apparmor.d(5), subdomain.conf(5), aa-autodep(1), clean(1), auditd(8), aa-unconfined(8), aa-enforce(1), aa-complain(1), and http://wiki.apparmor.net.

 
apparmor-2.11.0/parser/apparmor_parser.80000644000175000017500000004016113034613172015770 0ustar jjjj.\" Automatically generated by Pod::Man 2.28 (Pod::Simple 3.29) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is turned on, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{ . if \nF \{ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "APPARMOR_PARSER 8" .TH APPARMOR_PARSER 8 "2016-10-15" "AppArmor 2.11.0" "AppArmor" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" apparmor_parser \- loads AppArmor profiles into the kernel .SH "SYNOPSIS" .IX Header "SYNOPSIS" \&\fBapparmor_parser [options] [profiles]...\fR .PP \&\fBapparmor_parser [options] \fR .PP \&\fBapparmor_parser [\-hv] [\-\-help] [\-\-version]\fR .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBapparmor_parser\fR is used as a general tool to compile, and manage AppArmor policy, including loading new \fIapparmor.d\fR\|(5) profiles into the Linux kernel. .PP AppArmor profiles restrict the operations available to processes. .PP The \fBprofiles\fR are loaded into the Linux kernel by the \fBapparmor_parser\fR program. The \fBprofiles\fR may be specified by file name or a directory name containing a set of profiles. If a directory is specified then the \&\fBapparmor_parser\fR will try to do a profile load for each file in the directory that is not a dot file, or explicitly black listed (*.dpkg\-new, *.dpkg\-old, *.dpkg\-dist, *\-dpkg\-bak, *.repnew, *.rpmsave, *orig, *.rej, *~). The \fBapparmor_parser\fR will fall back to taking input from standard input if a profile or directory is not supplied. .PP The input supplied to \fBapparmor_parser\fR should be in the format described in \&\fIapparmor.d\fR\|(5). .SH "COMMANDS" .IX Header "COMMANDS" The command set is broken into four subcategories. .IP "unprivileged commands" 4 .IX Item "unprivileged commands" Commands that don't require any privilege and don't operate on profiles. .IP "unprivileged profile commands" 4 .IX Item "unprivileged profile commands" Commands that operate on a profile either specified on the command line or read from stdin if no profile was specified. .IP "privileged commands" 4 .IX Item "privileged commands" Commands that require the \s-1MAC_ADMIN\s0 capability within the affected AppArmor namespace to load policy into the kernel or filesystem write permissions to update the affected privileged files (cache etc). .IP "privileged profile commands" 4 .IX Item "privileged profile commands" Commands that require privilege and operate on profiles. .SH "Unprivileged commands" .IX Header "Unprivileged commands" .IP "\-V, \-\-version" 4 .IX Item "-V, --version" Print the version number and exit. .IP "\-h, \-\-help" 4 .IX Item "-h, --help" Give a quick reference guide. .SH "Unprivileged profile commands" .IX Header "Unprivileged profile commands" .IP "\-N, \-\-names" 4 .IX Item "-N, --names" Produce a list of policies from a given set of profiles (implies \-K). .IP "\-p, \-\-preprocess" 4 .IX Item "-p, --preprocess" Apply preprocessing to the input profile(s) by flattening includes into the output profile and dump to stdout. .IP "\-S, \-\-stdout" 4 .IX Item "-S, --stdout" Writes a binary (cached) profile to stdout (implies \-K and \-T). .IP "\-o file, \-\-ofile file" 4 .IX Item "-o file, --ofile file" Writes a binary (cached) profile to the specified file (implies \-K and \-T) .SH "Privileged commands" .IX Header "Privileged commands" .IP "\-\-purge\-cache" 4 .IX Item "--purge-cache" Unconditionally clear out cached profiles. .SH "Privileged profile commands" .IX Header "Privileged profile commands" .IP "\-a, \-\-add" 4 .IX Item "-a, --add" Insert the AppArmor definitions given into the kernel. This is the default action. This gives an error message if a AppArmor definition by the same name already exists in the kernel, or if the parser doesn't understand its input. It reports when an addition succeeded. .IP "\-r, \-\-replace" 4 .IX Item "-r, --replace" This flag is required if an AppArmor definition by the same name already exists in the kernel; used to replace the definition already in the kernel with the definition given on standard input. .IP "\-R, \-\-remove" 4 .IX Item "-R, --remove" This flag is used to remove an AppArmor definition already in the kernel. Note that it still requires a complete AppArmor definition as described in \fIapparmor.d\fR\|(5) even though the contents of the definition aren't used. .SH "OPTIONS" .IX Header "OPTIONS" .IP "\-B, \-\-binary" 4 .IX Item "-B, --binary" Treat the profile files specified on the command line (or stdin if none specified) as binary cache files, produced with the \-S or \-o options, and load to the kernel as specified by \-a, \-r, and \-R (implies \-K and \-T). .IP "\-C, \-\-Complain" 4 .IX Item "-C, --Complain" Force the profile to load in complain mode. .IP "\-b n, \-\-base n" 4 .IX Item "-b n, --base n" Set the base directory for resolving #include directives defined as relative paths. .IP "\-I n, \-\-Include n" 4 .IX Item "-I n, --Include n" Add element n to the search path when resolving #include directives defined as an absolute paths. .IP "\-f n, \-\-subdomainfs n" 4 .IX Item "-f n, --subdomainfs n" Set the location of the apparmor security filesystem (default is \&\*(L"/sys/kernel/security/apparmor\*(R"). .IP "\-M n, \-\-features\-file n" 4 .IX Item "-M n, --features-file n" Use the features file located at path \*(L"n\*(R" (default is /etc/apparmor.d/cache/.features). If the \-\-cache\-loc option is present, the \&\*(L".features\*(R" file in the specified cache directory is used. .IP "\-m n, \-\-match\-string n" 4 .IX Item "-m n, --match-string n" Only use match features \*(L"n\*(R". .IP "\-n n, \-\-namespace\-string n" 4 .IX Item "-n n, --namespace-string n" Force a profile to load in the namespace \*(L"n\*(R". .IP "\-X, \-\-readimpliesX" 4 .IX Item "-X, --readimpliesX" In the case of profiles that are loading on systems were \s-1READ_IMPLIES_EXEC\s0 is set in the kernel for a given process, load the profile so that any \*(L"r\*(R" flags are processed as \*(L"mr\*(R". .IP "\-k, \-\-show\-cache" 4 .IX Item "-k, --show-cache" Report the cache processing (hit/miss details) when loading or saving cached profiles. .IP "\-K, \-\-skip\-cache" 4 .IX Item "-K, --skip-cache" Perform no caching at all: disables \-W, implies \-T. .IP "\-T, \-\-skip\-read\-cache" 4 .IX Item "-T, --skip-read-cache" By default, if a profile's cache is found in the location specified by \&\-\-cache\-loc and the timestamp is newer than the profile, it will be loaded from the cache. This option disables this cache loading behavior. .IP "\-W, \-\-write\-cache" 4 .IX Item "-W, --write-cache" Write out cached profiles to the location specified in \-\-cache\-loc. Off by default. In cases where abstractions have been changed, and the parser is running with \*(L"\-\-replace\*(R", it may make sense to also use \&\*(L"\-\-skip\-read\-cache\*(R" with the \*(L"\-\-write\-cache\*(R" option. .IP "\-\-skip\-bad\-cache" 4 .IX Item "--skip-bad-cache" Skip updating the cache if it contains cached profiles in a bad or inconsistent state .IP "\-L, \-\-cache\-loc" 4 .IX Item "-L, --cache-loc" Set the location of the cache directory. If not specified the cache location defaults to /etc/apparmor.d/cache .IP "\-Q, \-\-skip\-kernel\-load" 4 .IX Item "-Q, --skip-kernel-load" Perform all actions except the actual loading of a profile into the kernel. This is useful for testing profile generation, caching, etc, without making changes to the running kernel profiles. .Sp This also removes the need for privilege to execute the commands that manage policy in the kernel .IP "\-q, \-\-quiet" 4 .IX Item "-q, --quiet" Do not report on the profiles as they are loaded, and not show warnings. .IP "\-v, \-\-verbose" 4 .IX Item "-v, --verbose" Report on the profiles as they are loaded, and show warnings. .IP "\-\-warn=n" 4 .IX Item "--warn=n" Enable various warnings during policy compilation. A single dump flag can be specified per \-\-warn option, but the \-\-warn flag can be passed multiple times. .Sp .Vb 1 \& apparmor_parser \-\-warn=rules\-not\-enforced ... .Ve .Sp Use \-\-help=warn to see a full list of which warn flags are supported. .IP "\-d, \-\-debug" 4 .IX Item "-d, --debug" Given once, only checks the profiles to ensure syntactic correctness. Given twice, dumps its interpretation of the profile for checking. .IP "\-D n, \-\-dump=n" 4 .IX Item "-D n, --dump=n" Debug flag for dumping various structures and passes of policy compilation. A single dump flag can be specified per \-\-dump option, but the dump flag can be passed multiple times. Note progress flags tend to also imply the matching stats flag. .Sp .Vb 1 \& apparmor_parser \-\-dump=dfa\-stats \-\-dump=trans\-stats .Ve .Sp Use \-\-help=dump to see a full list of which dump flags are supported .IP "\-j n, \-\-jobs=n" 4 .IX Item "-j n, --jobs=n" Set the number of jobs used to compile the specified policy. Where n can be .Sp .Vb 3 \& # \- a specific number of jobs \& auto \- the # of cpus in the in the system \& x# \- # * number of cpus .Ve .Sp Eg. \-j8 \s-1OR\s0 \-\-jobs=8 allows for 8 parallel jobs \-jauto \s-1OR\s0 \-\-jobs=auto sets the jobs to the # of cpus \-jx4 \s-1OR\s0 \-\-jobs=x4 sets the jobs to # of cpus * 4 \-jx1 is equivalent to \-jauto .Sp The default value is the number of cpus in the system. .IP "\-\-max\-jobs n" 4 .IX Item "--max-jobs n" Set a hard cap on the value that can be specified by the \-\-jobs flag. It takes the same set of options available to the \-\-jobs option, and defaults to 8*cpus .IP "\-O n, \-\-optimize=n" 4 .IX Item "-O n, --optimize=n" Set the optimization flags used by policy compilation. A single optimization flag can be toggled per \-O option, but the optimize flag can be passed multiple times. Turning off some phases of the optimization can make it so that policy can't complete compilation due to size constraints (it is entirely possible to create a dfa with millions of states that will take days or longer to compile). .Sp Note: The parser is set to use a balanced default set of flags, that will result in reasonable compression but not take excessive amounts of time to complete. .Sp Use \-\-help=optimize to see a full list of which optimization flags are supported. .IP "\-\-abort\-on\-error Abort processing of profiles on the first error encountered, otherwise the parser will continue to try to compile other profiles if specified." 4 .IX Item "--abort-on-error Abort processing of profiles on the first error encountered, otherwise the parser will continue to try to compile other profiles if specified." Note: If an error is encountered while processing profiles the last error encountered will be used to set the exit code. .IP "\-\-skip\-bad\-cache\-rebuild The default behavior of the parser is to check if a cached version of a profile exists and if it does it attempt to load it into the kernel. If that load is rejected, then the parser will attempt to rebuild the cache file, and load again." 4 .IX Item "--skip-bad-cache-rebuild The default behavior of the parser is to check if a cached version of a profile exists and if it does it attempt to load it into the kernel. If that load is rejected, then the parser will attempt to rebuild the cache file, and load again." This option tells the parser to not attempt to rebuild the cache on failure, instead the parser continues on with processing the remaining profiles. .SH "CONFIG FILE" .IX Header "CONFIG FILE" An optional config file /etc/apparmor/parser.conf can be used to specify the default options for the parser, which then can be overridden using the command line options. .PP The config file ignores leading whitespace and treats lines that begin with # as comments. Config options are specified one per line using the same format as the longform command line options (without the preceding \-\-). .PP Eg. #comment .PP .Vb 2 \& optimize=no\-expr\-tree \& optimize=compress\-fast .Ve .PP As with the command line some options accumulate and others override, ie. when there are conflicting versions of switch the last option is the one chosen. .PP Eg. Optimize=no\-minimize Optimize=minimize .PP would result in Optimize=minimize being set. .PP The Include, Dump, and Optimize options accululate except for the inversion option (no-X vs. X), and a couple options that work by setting/clearing multiple options (compress-small). In that case the option will override the flags it sets but will may accumulate with others. .PP All other options override previously set values. .SH "BUGS" .IX Header "BUGS" If you find any bugs, please report them at . .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fIapparmor\fR\|(7), \fIapparmor.d\fR\|(5), \fIsubdomain.conf\fR\|(5), \fIaa_change_hat\fR\|(2), and . apparmor-2.11.0/parser/mount.h0000644000175000017500000001060212600054163014007 0ustar jjjj/* * Copyright (c) 2010 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_MOUNT_H #define __AA_MOUNT_H #include #include "parser.h" #include "rule.h" #define MS_RDONLY (1 << 0) #define MS_RW 0 #define MS_NOSUID (1 << 1) #define MS_SUID 0 #define MS_NODEV (1 << 2) #define MS_DEV 0 #define MS_NOEXEC (1 << 3) #define MS_EXEC 0 #define MS_SYNC (1 << 4) #define MS_ASYNC 0 #define MS_REMOUNT (1 << 5) #define MS_MAND (1 << 6) #define MS_NOMAND 0 #define MS_DIRSYNC (1 << 7) #define MS_NODIRSYNC 0 #define MS_NOATIME (1 << 10) #define MS_ATIME 0 #define MS_NODIRATIME (1 << 11) #define MS_DIRATIME 0 #define MS_BIND (1 << 12) #define MS_MOVE (1 << 13) #define MS_REC (1 << 14) #define MS_VERBOSE (1 << 15) #define MS_SILENT (1 << 15) #define MS_LOAD 0 #define MS_ACL (1 << 16) #define MS_NOACL 0 #define MS_UNBINDABLE (1 << 17) #define MS_PRIVATE (1 << 18) #define MS_SLAVE (1 << 19) #define MS_SHARED (1 << 20) #define MS_RELATIME (1 << 21) #define MS_NORELATIME 0 #define MS_IVERSION (1 << 23) #define MS_NOIVERSION 0 #define MS_STRICTATIME (1 << 24) #define MS_NOUSER (1 << 31) #define MS_USER 0 /* Only use MS_REC when defining these macros. Please use the macros from here * on and don't make assumptions about the presence of MS_REC. */ #define MS_RBIND (MS_BIND | MS_REC) #define MS_RUNBINDABLE (MS_UNBINDABLE | MS_REC) #define MS_RPRIVATE (MS_PRIVATE | MS_REC) #define MS_RSLAVE (MS_SLAVE | MS_REC) #define MS_RSHARED (MS_SHARED | MS_REC) #define MS_ALL_FLAGS (MS_RDONLY | MS_NOSUID | MS_NODEV | MS_NOEXEC | \ MS_SYNC | MS_REMOUNT | MS_MAND | MS_DIRSYNC | \ MS_NOATIME | MS_NODIRATIME | MS_BIND | MS_RBIND | \ MS_MOVE | MS_VERBOSE | MS_ACL | \ MS_UNBINDABLE | MS_RUNBINDABLE | \ MS_PRIVATE | MS_RPRIVATE | \ MS_SLAVE | MS_RSLAVE | MS_SHARED | MS_RSHARED | \ MS_RELATIME | MS_IVERSION | MS_STRICTATIME | MS_USER) /* set of flags we don't use but define (but not with the kernel values) * for MNT_FLAGS */ #define MS_ACTIVE 0 #define MS_BORN 0 #define MS_KERNMOUNT 0 /* from kernel fs/namespace.c - set of flags masked off */ #define MNT_FLAGS (MS_NOSUID | MS_NOEXEC | MS_NODEV | MS_ACTIVE | \ MS_BORN | MS_NOATIME | MS_NODIRATIME | MS_RELATIME| \ MS_KERNMOUNT | MS_STRICTATIME) #define MS_BIND_FLAGS (MS_BIND | MS_RBIND) #define MS_MAKE_FLAGS ((MS_UNBINDABLE | MS_RUNBINDABLE | \ MS_PRIVATE | MS_RPRIVATE | \ MS_SLAVE | MS_RSLAVE | MS_SHARED | MS_RSHARED) | \ (MS_ALL_FLAGS & ~(MNT_FLAGS))) #define MS_MOVE_FLAGS (MS_MOVE) #define MS_CMDS (MS_MOVE | MS_REMOUNT | MS_BIND | MS_RBIND | \ MS_UNBINDABLE | MS_RUNBINDABLE | MS_PRIVATE | MS_RPRIVATE | \ MS_SLAVE | MS_RSLAVE | MS_SHARED | MS_RSHARED) #define MS_REMOUNT_FLAGS (MS_ALL_FLAGS & ~(MS_CMDS & ~MS_REMOUNT & ~MS_BIND & ~MS_RBIND)) #define MNT_SRC_OPT 1 #define MNT_DST_OPT 2 #define MNT_COND_FSTYPE 1 #define MNT_COND_OPTIONS 2 #define AA_MAY_PIVOTROOT 1 #define AA_MAY_MOUNT 2 #define AA_MAY_UMOUNT 4 #define AA_MATCH_CONT 0x40 #define AA_AUDIT_MNT_DATA AA_MATCH_CONT #define AA_DUMMY_REMOUNT 0x40000000 /* dummy perm for remount rule - is * remapped to a mount option*/ class mnt_rule: public rule_t { public: char *mnt_point; char *device; char *trans; struct value_list *dev_type; struct value_list *opts; unsigned int flags, inv_flags; int allow, audit; int deny; mnt_rule(struct cond_entry *src_conds, char *device_p, struct cond_entry *dst_conds unused, char *mnt_point_p, int allow_p); virtual ~mnt_rule() { free_value_list(opts); free_value_list(dev_type); free(device); free(mnt_point); free(trans); } virtual ostream &dump(ostream &os); virtual int expand_variables(void); virtual int gen_policy_re(Profile &prof); virtual void post_process(Profile &prof unused); }; int is_valid_mnt_cond(const char *name, int src); #endif /* __AA_MOUNT_H */ apparmor-2.11.0/parser/techdoc.aux0000644000175000017500000001212613034613171014631 0ustar jjjj\relax \providecommand\hyper@newdestlabel[2]{} \providecommand\HyperFirstAtBeginDocument{\AtBeginDocument} \HyperFirstAtBeginDocument{\ifx\hyper@anchor\@undefined \global\let\oldcontentsline\contentsline \gdef\contentsline#1#2#3#4{\oldcontentsline{#1}{#2}{#3}} \global\let\oldnewlabel\newlabel \gdef\newlabel#1#2{\newlabelxx{#1}#2} \gdef\newlabelxx#1#2#3#4#5#6{\oldnewlabel{#1}{{#2}{#3}}} \AtEndDocument{\ifx\hyper@anchor\@undefined \let\contentsline\oldcontentsline \let\newlabel\oldnewlabel \fi} \fi} \global\let\hyper@last\relax \gdef\HyperFirstAtBeginDocument#1{#1} \providecommand\HyField@AuxAddToFields[1]{} \providecommand\HyField@AuxAddToCoFields[2]{} \citation{apparmor} \@writefile{toc}{\contentsline {section}{\numberline {1}Introduction}{2}{section.1}} \@writefile{toc}{\contentsline {section}{\numberline {2}Overview}{2}{section.2}} \newlabel{sec:overview}{{2}{2}{Overview}{section.2}{}} \@writefile{toc}{\contentsline {section}{\numberline {3}The AppArmor Security Model}{3}{section.3}} \newlabel{sec:model}{{3}{3}{The AppArmor Security Model}{section.3}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.1}Symbolic Links}{3}{subsection.3.1}} \citation{ols06-pai} \@writefile{toc}{\contentsline {subsection}{\numberline {3.2}Namespaces}{4}{subsection.3.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.3}Disconnected Files and Pseudo File Systems}{4}{subsection.3.3}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.4}Mount}{5}{subsection.3.4}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.5}The Kernel NFS Daemon}{5}{subsection.3.5}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.6}Why are the computed pathnames meaningful?}{5}{subsection.3.6}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.7}Path Permission Checking}{6}{subsection.3.7}} \@writefile{lot}{\contentsline {table}{\numberline {1}{\ignorespaces File Access Permissions in Profiles}}{7}{table.1}} \newlabel{tab:permissions}{{1}{7}{File Access Permissions in Profiles}{table.1}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.8}Profile Permissions}{7}{subsection.3.8}} \newlabel{sec:permissions}{{3.8}{7}{Profile Permissions}{subsection.3.8}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.9}System Calls Taking File Handles, At System Calls}{8}{subsection.3.9}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.10}File Descriptor Passing and Revalidation}{8}{subsection.3.10}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.11}Deleted Files}{8}{subsection.3.11}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.12}The access System Call}{9}{subsection.3.12}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.13}The ptrace System Call}{9}{subsection.3.13}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.14}Secure Execution}{9}{subsection.3.14}} \newlabel{sec:secure-exec}{{3.14}{9}{Secure Execution}{subsection.3.14}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.15}Exec Mode Merging in Profiles, Exact Matches}{10}{subsection.3.15}} \newlabel{sec:merging}{{3.15}{10}{Exec Mode Merging in Profiles, Exact Matches}{subsection.3.15}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.16}Capabilities}{10}{subsection.3.16}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.17}The sysctl System Call and /proc/sys}{10}{subsection.3.17}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.18}Subprofiles aka. Hats}{10}{subsection.3.18}} \citation{dragon86} \@writefile{toc}{\contentsline {subsection}{\numberline {3.19}Association of Profiles with Processes}{11}{subsection.3.19}} \newlabel{sec:association}{{3.19}{11}{Association of Profiles with Processes}{subsection.3.19}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.20}Profile Loading, Replacement, and Removal}{11}{subsection.3.20}} \@writefile{toc}{\contentsline {section}{\numberline {4}AppArmor Walk-Through}{12}{section.4}} \newlabel{sec:walk-through}{{4}{12}{AppArmor Walk-Through}{section.4}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.1}Kernel Patches and Configuration}{12}{subsection.4.1}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.2}The securityfs file system}{13}{subsection.4.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.3}Profile Loading}{13}{subsection.4.3}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.4}Anatomy of a Profile}{13}{subsection.4.4}} \@writefile{lot}{\contentsline {table}{\numberline {2}{\ignorespaces Globbing in File Access Rules. Alternation counts as an exact match in file access rules; all others count as wildcards (see Section\nobreakspace {}\ref {sec:merging}).}}{14}{table.2}} \newlabel{tab:globbing}{{2}{14}{Globbing in File Access Rules. Alternation counts as an exact match in file access rules; all others count as wildcards (see Section~\ref {sec:merging})}{table.2}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.5}Logging}{15}{subsection.4.5}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.6}Generating Profiles By Hand}{15}{subsection.4.6}} \bibcite{apparmor}{1} \bibcite{ols06-pai}{2} \bibcite{dragon86}{3} apparmor-2.11.0/parser/network.h0000644000175000017500000000747212474114517014362 0ustar jjjj/* * Copyright (c) 2014 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_NETWORK_H #define __AA_NETWORK_H #include #include #include #include #include #include #include #include #include #include #include "parser.h" #include "rule.h" #define AA_NET_WRITE 0x0002 #define AA_NET_SEND AA_NET_WRITE #define AA_NET_READ 0x0004 #define AA_NET_RECEIVE AA_NET_READ #define AA_NET_CREATE 0x0010 #define AA_NET_SHUTDOWN 0x0020 /* alias delete */ #define AA_NET_CONNECT 0x0040 /* alias open */ #define AA_NET_SETATTR 0x0100 #define AA_NET_GETATTR 0x0200 //#define AA_NET_CHMOD 0x1000 /* pair */ //#define AA_NET_CHOWN 0x2000 /* pair */ //#define AA_NET_CHGRP 0x4000 /* pair */ //#define AA_NET_LOCK 0x8000 /* LINK_SUBSET overlaid */ #define AA_NET_ACCEPT 0x00100000 #define AA_NET_BIND 0x00200000 #define AA_NET_LISTEN 0x00400000 #define AA_NET_SETOPT 0x01000000 #define AA_NET_GETOPT 0x02000000 #define AA_CONT_MATCH 0x08000000 #define AA_VALID_NET_PERMS (AA_NET_SEND | AA_NET_RECEIVE | AA_NET_CREATE | \ AA_NET_SHUTDOWN | AA_NET_CONNECT | \ AA_NET_SETATTR | AA_NET_GETATTR | AA_NET_BIND | \ AA_NET_ACCEPT | AA_NET_LISTEN | AA_NET_SETOPT | \ AA_NET_GETOPT | AA_CONT_MATCH) #define AA_LOCAL_NET_PERMS (AA_NET_CREATE | AA_NET_SHUTDOWN | AA_NET_SETATTR |\ AA_NET_GETATTR | AA_NET_BIND | AA_NET_ACCEPT | \ AA_NET_LISTEN | AA_NET_SETOPT | AA_NET_GETOPT) #define AA_NET_OPT (AA_NET_SETOPT | AA_NET_GETOPT) #define AA_LOCAL_NET_CMD (AA_NET_LISTEN | AA_NET_OPT) #define AA_PEER_NET_PERMS (AA_VALID_NET_PERMS & (~AA_LOCAL_NET_PERMS | \ AA_NET_ACCEPT)) struct network_tuple { const char *family_name; unsigned int family; const char *type_name; unsigned int type; const char *protocol_name; unsigned int protocol; }; /* supported AF protocols */ struct aa_network_entry { unsigned int family; unsigned int type; unsigned int protocol; struct aa_network_entry *next; }; int parse_net_mode(const char *str_mode, int *mode, int fail); extern struct aa_network_entry *new_network_ent(unsigned int family, unsigned int type, unsigned int protocol); extern struct aa_network_entry *network_entry(const char *family, const char *type, const char *protocol); extern size_t get_af_max(void); void __debug_network(unsigned int *array, const char *name); struct network { unsigned int *allow; /* array of type masks * indexed by AF_FAMILY */ unsigned int *audit; unsigned int *deny; unsigned int *quiet; network(void) { allow = audit = deny = quiet = NULL; } void dump(void) { if (allow) __debug_network(allow, "Network"); if (audit) __debug_network(audit, "Audit Net"); if (deny) __debug_network(deny, "Deny Net"); if (quiet) __debug_network(quiet, "Quiet Net"); } }; int net_find_type_val(const char *type); const char *net_find_type_name(int type); const char *net_find_af_name(unsigned int af); const struct network_tuple *net_find_mapping(const struct network_tuple *map, const char *family, const char *type, const char *protocol); #endif /* __AA_NETWORK_H */ apparmor-2.11.0/parser/techdoc.out0000644000175000017500000000417413034613171014647 0ustar jjjj\BOOKMARK [1][-]{section.1}{Introduction}{}% 1 \BOOKMARK [1][-]{section.2}{Overview}{}% 2 \BOOKMARK [1][-]{section.3}{The AppArmor Security Model}{}% 3 \BOOKMARK [2][-]{subsection.3.1}{Symbolic Links}{section.3}% 4 \BOOKMARK [2][-]{subsection.3.2}{Namespaces}{section.3}% 5 \BOOKMARK [2][-]{subsection.3.3}{Disconnected Files and Pseudo File Systems}{section.3}% 6 \BOOKMARK [2][-]{subsection.3.4}{Mount}{section.3}% 7 \BOOKMARK [2][-]{subsection.3.5}{The Kernel NFS Daemon}{section.3}% 8 \BOOKMARK [2][-]{subsection.3.6}{Why are the computed pathnames meaningful?}{section.3}% 9 \BOOKMARK [2][-]{subsection.3.7}{Path Permission Checking}{section.3}% 10 \BOOKMARK [2][-]{subsection.3.8}{Profile Permissions}{section.3}% 11 \BOOKMARK [2][-]{subsection.3.9}{System Calls Taking File Handles, At System Calls}{section.3}% 12 \BOOKMARK [2][-]{subsection.3.10}{File Descriptor Passing and Revalidation}{section.3}% 13 \BOOKMARK [2][-]{subsection.3.11}{Deleted Files}{section.3}% 14 \BOOKMARK [2][-]{subsection.3.12}{The access System Call}{section.3}% 15 \BOOKMARK [2][-]{subsection.3.13}{The ptrace System Call}{section.3}% 16 \BOOKMARK [2][-]{subsection.3.14}{Secure Execution}{section.3}% 17 \BOOKMARK [2][-]{subsection.3.15}{Exec Mode Merging in Profiles, Exact Matches}{section.3}% 18 \BOOKMARK [2][-]{subsection.3.16}{Capabilities}{section.3}% 19 \BOOKMARK [2][-]{subsection.3.17}{The sysctl System Call and /proc/sys}{section.3}% 20 \BOOKMARK [2][-]{subsection.3.18}{Subprofiles aka. Hats}{section.3}% 21 \BOOKMARK [2][-]{subsection.3.19}{Association of Profiles with Processes}{section.3}% 22 \BOOKMARK [2][-]{subsection.3.20}{Profile Loading, Replacement, and Removal}{section.3}% 23 \BOOKMARK [1][-]{section.4}{AppArmor Walk-Through}{}% 24 \BOOKMARK [2][-]{subsection.4.1}{Kernel Patches and Configuration}{section.4}% 25 \BOOKMARK [2][-]{subsection.4.2}{The securityfs file system}{section.4}% 26 \BOOKMARK [2][-]{subsection.4.3}{Profile Loading}{section.4}% 27 \BOOKMARK [2][-]{subsection.4.4}{Anatomy of a Profile}{section.4}% 28 \BOOKMARK [2][-]{subsection.4.5}{Logging}{section.4}% 29 \BOOKMARK [2][-]{subsection.4.6}{Generating Profiles By Hand}{section.4}% 30 apparmor-2.11.0/parser/apparmor.d.5.html0000644000175000017500000021444713034613172015610 0ustar jjjj
 

NAME

apparmor.d - syntax of security profiles for AppArmor.

DESCRIPTION

AppArmor profiles describe mandatory access rights granted to given programs and are fed to the AppArmor policy enforcement module using apparmor_parser(8). This man page describes the format of the AppArmor configuration files; see apparmor(7) for an overview of AppArmor.

FORMAT

The following is a BNF-style description of AppArmor policy configuration files; see below for an example AppArmor policy file. AppArmor configuration files are line-oriented; # introduces a comment, similar to shell scripting languages. The exception to this rule is that #include will include the contents of a file inline to the policy; this behaviour is modelled after cpp(1).

    PROFILE FILE = ( [ PREAMBLE ] [ PROFILE ] )*

    PREAMBLE = ( COMMENT | VARIABLE ASSIGNMENT | ALIAS RULE | INCLUDE )* Variable assignment and alias rules must come before the profile.

    VARIABLE ASSIGNMENT = VARIABLE ('=' | '+=') (space separated values)

    VARIABLE = '@{' ALPHA [ ( ALPHANUMERIC | '_' ) ... ] '}'

    ALIAS RULE = 'alias' ABS PATH '->' REWRITTEN ABS PATH ','

    INCLUDE = '#include' ( ABS PATH | MAGIC PATH )

    ABS PATH = '"' path '"' (the path is passed to open(2))

    MAGIC PATH = '<' relative path '>' The path is relative to /etc/apparmor.d/.

    COMMENT = '#' TEXT [ '\r' ] '\n'

    TEXT = any characters

    PROFILE = ( PROFILE HEAD ) [ ATTACHMENT SPECIFICATION ] [ PROFILE FLAG CONDS ] '{' ( RULES )* '}'

    PROFILE HEAD = [ 'profile' ] FILEGLOB | 'profile' PROFILE NAME

    PROFILE NAME ( UNQUOTED PROFILE NAME | QUOTED PROFILE NAME )

    QUOTED PROFILE NAME = '"' UNQUOTED PROFILE NAME '"'

    UNQUOTED PROFILE NAME = (must start with alphanumeric character (after variable expansion), or '/' AARE have special meanings; see below. May include VARIABLE. Rules with embedded spaces or tabs must be quoted.)

    ATTACHMENT SPECIFICATION = FILEGLOB

    PROFILE FLAG CONDS = [ 'flags=' ] '(' comma or white space separated list of PROFILE FLAGS ')'

    PROFILE FLAGS = 'complain' | 'audit' | 'enforce' | 'mediate_deleted' | 'attach_disconnected' | 'chroot_relative'

    RULES = [ ( LINE RULES | COMMA RULES ',' | BLOCK RULES )

    LINE RULES = ( COMMENT | INCLUDE ) [ '\r' ] '\n'

    COMMA RULES = ( CAPABILITY RULE | NETWORK RULE | MOUNT RULE | PIVOT ROOT RULE | UNIX RULE | FILE RULE | LINK RULE | CHANGE_PROFILE RULE | RLIMIT RULE | DBUS RULE )

    BLOCK RULES = ( SUBPROFILE | HAT | QUALIFIER BLOCK )

    SUBPROFILE = 'profile' PROFILE NAME [ ATTACHMENT SPECIFICATION ] [ PROFILE FLAG CONDS ] '{' ( RULES )* '}'

    HAT = ('hat' | '^') HATNAME [ PROFILE FLAG CONDS ] '{' ( RULES )* '}'

    HATNAME = (must start with alphanumeric character. See aa_change_hat(2) for a description of how this "hat" is used. If '^' is used to start a hat then there is no space between the '^' and HATNAME)

    QUALIFIER BLOCK = QUALIFIERS BLOCK

    ACCESS TYPE = ( 'allow' | 'deny' )

    QUALIFIERS = [ 'audit' ] [ ACCESS TYPE ]

    CAPABILITY RULE = [ QUALIFIERS ] 'capability' [ CAPABILITY LIST ]

    CAPABILITY LIST = ( CAPABILITY )+

    CAPABILITY = (lowercase capability name without 'CAP_' prefix; see capabilities(7))

    NETWORK RULE = [ QUALIFIERS ] 'network' [ DOMAIN ] [ TYPE | PROTOCOL ]

    DOMAIN = ( 'inet' | 'ax25' | 'ipx' | 'appletalk' | 'netrom' | 'bridge' | 'atmpvc' | 'x25' | 'inet6' | 'rose' | 'netbeui' | 'security' | 'key' | 'packet' | 'ash' | 'econet' | 'atmsvc' | 'sna' | 'irda' | 'pppox' | 'wanpipe' | 'bluetooth' | 'netlink' | 'unix' | 'rds' | 'llc' | 'can' | 'tipc' | 'iucv' | 'rxrpc' | 'isdn' | 'phonet' | 'ieee802154' | 'caif' | 'alg' | 'nfc' | 'vsock' | 'mpls' | 'ib' | 'kcm' ) ','

    TYPE = ( 'stream' | 'dgram' | 'seqpacket' | 'rdm' | 'raw' | 'packet' )

    PROTOCOL = ( 'tcp' | 'udp' | 'icmp' )

    MOUNT RULE = ( MOUNT | REMOUNT | UMOUNT )

    MOUNT = [ QUALIFIERS ] 'mount' [ MOUNT CONDITIONS ] [ SOURCE FILEGLOB ] [ '->' [ MOUNTPOINT FILEGLOB ]

    REMOUNT = [ QUALIFIERS ] 'remount' [ MOUNT CONDITIONS ] MOUNTPOINT FILEGLOB

    UMOUNT = [ QUALIFIERS ] 'umount' [ MOUNT CONDITIONS ] MOUNTPOINT FILEGLOB

    MOUNT CONDITIONS = [ ( 'fstype' | 'vfstype' ) ( '=' | 'in' ) MOUNT FSTYPE EXPRESSION ] [ 'options' ( '=' | 'in' ) MOUNT FLAGS EXPRESSION ]

    MOUNT FSTYPE EXPRESSION = ( MOUNT FSTYPE LIST | MOUNT EXPRESSION )

    MOUNT FSTYPE LIST = Comma separated list of valid filesystem and virtual filesystem types (eg ext4, debugfs, devfs, etc)

    MOUNT FLAGS EXPRESSION = ( MOUNT FLAGS LIST | MOUNT EXPRESSION )

    MOUNT FLAGS LIST = Comma separated list of MOUNT FLAGS.

    MOUNT FLAGS = ( 'ro' | 'rw' | 'nosuid' | 'suid' | 'nodev' | 'dev' | 'noexec' | 'exec' | 'sync' | 'async' | 'remount' | 'mand' | 'nomand' | 'dirsync' | 'noatime' | 'atime' | 'nodiratime' | 'diratime' | 'bind' | 'rbind' | 'move' | 'verbose' | 'silent' | 'loud' | 'acl' | 'noacl' | 'unbindable' | 'runbindable' | 'private' | 'rprivate' | 'slave' | 'rslave' | 'shared' | 'rshared' | 'relatime' | 'norelatime' | 'iversion' | 'noiversion' | 'strictatime' | 'nouser' | 'user' )

    MOUNT EXPRESSION = ( ALPHANUMERIC | AARE ) ...

    PIVOT ROOT RULE = [ QUALIFIERS ] pivot_root [ oldroot=OLD PUT FILEGLOB ] [ NEW ROOT FILEGLOB ] [ '->' PROFILE NAME ]

    SOURCE FILEGLOB = FILEGLOB

    MOUNTPOINT FILEGLOB = FILEGLOB

    OLD PUT FILEGLOB = FILEGLOB

    PTRACE_RULE = [ QUALIFIERS ] 'ptrace' [ PTRACE ACCESS PERMISSIONS ] [ PTRACE PEER ]

    PTRACE ACCESS PERMISSIONS = PTRACE ACCESS | PTRACE ACCESS LIST

    PTRACE ACCESS LIST = '(' Comma or space separated list of PTRACE ACCESS ')'

    PTRACE ACCESS = ( 'r' | 'w' | 'rw' | 'read' | 'readby' | 'trace' | 'tracedby' )

    PTRACE PEER = 'peer' '=' AARE

    SIGNAL_RULE = [ QUALIFIERS ] 'signal' [ SIGNAL ACCESS PERMISSIONS ] [ SIGNAL SET ] [ SIGNAL PEER ]

    SIGNAL ACCESS PERMISSIONS = SIGNAL ACCESS | SIGNAL ACCESS LIST

    SIGNAL ACCESS LIST = '(' Comma or space separated list of SIGNAL ACCESS ')'

    SIGNAL ACCESS = ( 'r' | 'w' | 'rw' | 'read' | 'write' | 'send' | 'receive' )

    SIGNAL SET = 'set' '=' '(' SIGNAL LIST ')'

    SIGNAL LIST = Comma or space separated list of SIGNALS

    SIGNALS = ( 'hup' | 'int' | 'quit' | 'ill' | 'trap' | 'abrt' | 'bus' | 'fpe' | 'kill' | 'usr1' | 'segv' | 'usr2' | 'pipe' | 'alrm' | 'term' | 'stkflt' | 'chld' | 'cont' | 'stop' | 'stp' | 'ttin' | 'ttou' | 'urg' | 'xcpu' | 'xfsz' | 'vtalrm' | 'prof' | 'winch' | 'io' | 'pwr' | 'sys' | 'emt' | 'exists' | 'rtmin+0' ... 'rtmin+32' )

    SIGNAL PEER = 'peer' '=' AARE

    DBUS RULE = ( DBUS MESSAGE RULE | DBUS SERVICE RULE | DBUS EAVESDROP RULE | DBUS COMBINED RULE )

    DBUS MESSAGE RULE = [ QUALIFIERS ] 'dbus' [ DBUS ACCESS EXPRESSION ] [ DBUS BUS ] [ DBUS PATH ] [ DBUS INTERFACE ] [ DBUS MEMBER ] [ DBUS PEER ]

    DBUS SERVICE RULE = [ QUALIFIERS ] 'dbus' [ DBUS ACCESS EXPRESSION ] [ DBUS BUS ] [ DBUS NAME ]

    DBUS EAVESDROP RULE = [ QUALIFIERS ] 'dbus' [ DBUS ACCESS EXPRESSION ] [ DBUS BUS ]

    DBUS COMBINED RULE = [ QUALIFIERS ] 'dbus' [ DBUS ACCESS EXPRESSION ] [ DBUS BUS ]

    DBUS ACCESS EXPRESSION = ( DBUS ACCESS | '(' DBUS ACCESS LIST ')' )

    DBUS BUS = 'bus' '=' '(' 'system' | 'session' | '"' AARE '"' | AARE ')'

    DBUS PATH = 'path' '=' '(' '"' AARE '"' | AARE ')'

    DBUS INTERFACE = 'interface' '=' '(' '"' AARE '"' | AARE ')'

    DBUS MEMBER = 'member' '=' '(' '"' AARE '"' | AARE ')'

    DBUS PEER = 'peer' '=' '(' [ DBUS NAME ] [ DBUS LABEL ] ')'

    DBUS NAME = 'name' '=' '(' '"' AARE '"' | AARE ')'

    DBUS LABEL = 'label' '=' '(' '"' AARE '"' | AARE ')'

    DBUS ACCESS LIST = Comma separated list of DBUS ACCESS

    DBUS ACCESS = ( 'send' | 'receive' | 'bind' | 'eavesdrop' | 'r' | 'read' | 'w' | 'write' | 'rw' ) Some accesses are incompatible with some rules; see below.

    AARE = ?*[]{}^ See below for meanings.

    UNIX RULE = [ QUALIFIERS ] 'unix' [ UNIX ACCESS EXPR ] [ UNIX RULE CONDS ] [ UNIX LOCAL EXPR ] [ UNIX PEER EXPR ]

    UNIX ACCESS EXPR = ( UNIX ACCESS | UNIX ACCESS LIST )

    UNIX ACCESS = ( 'create' | 'bind' | 'listen' | 'accept' | 'connect' | 'shutdown' | 'getattr' | 'setattr' | 'getopt' | 'setopt' | 'send' | 'receive' | 'r' | 'w' | 'rw' ) Some access modes are incompatible with some rules or require additional parameters.

    UNIX ACCESS LIST = '(' UNIX ACCESS ( [','] UNIX ACCESS )* ')'

    UNIX RULE CONDS = ( TYPE COND | PROTO COND ) Each cond can appear at most once.

    TYPE COND = 'type' '=' ( AARE | '(' ( '"' AARE '"' | AARE )+ ')' )

    PROTO COND = 'protocol' '=' ( AARE | '(' ( '"' AARE '"' | AARE )+ ')' )

    UNIX LOCAL EXPR = ( UNIX ADDRESS COND | UNIX LABEL COND | UNIX ATTR COND | UNIX OPT COND )* Each cond can appear at most once.

    UNIX PEER EXPR = 'peer' '=' ( UNIX ADDRESS COND | UNIX LABEL COND )+ Each cond can appear at most once.

    UNIX ADDRESS COND 'addr' '=' ( AARE | '(' '"' AARE '"' | AARE ')' )

    UNIX LABEL COND 'label' '=' ( AARE | '(' '"' AARE '"' | AARE ')' )

    UNIX ATTR COND 'attr' '=' ( AARE | '(' '"' AARE '"' | AARE ')' )

    UNIX OPT COND 'opt' '=' ( AARE | '(' '"' AARE '"' | AARE ')' )

    RLIMIT RULE = 'set' 'rlimit' [RLIMIT '<=' RLIMIT VALUE ]

    RLIMIT = ( 'cpu' | 'fsize' | 'data' | 'stack' | 'core' | 'rss' | 'nofile' | 'ofile' | 'as' | 'nproc' | 'memlock' | 'locks' | 'sigpending' | 'msgqueue' | 'nice' | 'rtprio' | 'rttime' )

    RLIMIT VALUE = ( RLIMIT SIZE | RLIMIT NUMBER | RLIMIT TIME | RLIMIT NICE )

    RLIMIT SIZE = NUMBER ( 'K' | 'M' | 'G' ) Only applies to RLIMIT of 'fsize', 'data', 'stack', 'core', 'rss', 'as', 'memlock', 'msgqueue'.

    RLIMIT NUMBER = number from 0 to max rlimit value. Only applies to RLIMIT of 'ofile', 'nofile', 'locks', 'sigpending', 'nproc', 'rtprio'.

    RLIMIT TIME = NUMBER ( 'us' | 'microsecond' | 'microseconds' | 'ms' | 'millisecond' | 'milliseconds' | 's' | 'sec' | 'second' | 'seconds' | 'min' | 'minute' | 'minutes' | 'h' | 'hour' | 'hours' | 'd' | 'day' | 'days' | 'week' | 'weeks' ) Only applies to RLIMIT of 'cpu' and 'rttime'. RLIMIT 'cpu' only allows units >= 'seconds'.

    RLIMIT NICE = a number between -20 and 19. Only applies to RLIMIT of 'nice'.

    FILE RULE = [ QUALIFIERS ] [ 'owner' ] ( 'file' | [ 'file' ] ( FILEGLOB ACCESS | ACCESS FILEGLOB ) [ '->' EXEC TARGET ] )

    FILEGLOB = ( QUOTED FILEGLOB | UNQUOTED FILEGLOB )

    QUOTED FILEGLOB = '"' UNQUOTED FILEGLOB '"'

    UNQUOTED FILEGLOB = (must start with '/' (after variable expansion), AARE have special meanings; see below. May include VARIABLE. Rules with embedded spaces or tabs must be quoted. Rules must end with '/' to apply to directories.)

    ACCESS = ( 'r' | 'w' | 'a' | 'l' | 'k' | 'm' | EXEC TRANSITION )+ (not all combinations are allowed; see below.)

    EXEC TRANSITION = ( 'ix' | 'ux' | 'Ux' | 'px' | 'Px' | 'cx' | 'Cx' | 'pix' | 'Pix' | 'cix' | 'Cix' | 'pux' | 'PUx' | 'cux' | 'CUx' | 'x' ) A bare 'x' is only allowed in rules with the deny qualifier, everything else only without the deny qualifier.

    EXEC TARGET = name Requires EXEC TRANSITION specified.

    LINK RULE = QUALIFIERS [ 'owner' ] 'link' [ 'subset' ] FILEGLOB ( 'to' | '->' ) FILEGLOB

    ALPHA = ('a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z')

    ALPHANUMERIC = ('0', '1', '2', ... '9', 'a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z')

    CHANGE_PROFILE RULE = 'change_profile' [ [ EXEC MODE ] EXEC COND ] [ '->' PROFILE NAME ]

    EXEC_MODE = ( 'safe' | 'unsafe' )

    EXEC COND = FILEGLOB

All resources and programs need a full path. There may be any number of subprofiles (aka child profiles) in a profile, limited only by kernel memory. Subprofile names are limited to 974 characters. Child profiles can be used to confine an application in a special way, or when you want the child to be unconfined on the system, but confined when called from the parent. Hats are a special child profile that can be used with the aa_change_hat(2) API call. Applications written or modified to use aa_change_hat(2) can take advantage of subprofiles to run under different confinements, dependent on program logic. Several aa_change_hat(2)-aware applications exist, including an Apache module, mod_apparmor(5); a PAM module, pam_apparmor; and a Tomcat valve, tomcat_apparmor. Applications written or modified to use change_profile(2) transition permanently to the specified profile. libvirt is one such application.

Access Modes

File permission access modes consists of combinations of the following modes:

r

- read

w

- write -- conflicts with append

a

- append -- conflicts with write

ux

- unconfined execute

Ux

- unconfined execute -- scrub the environment

px

- discrete profile execute

Px

- discrete profile execute -- scrub the environment

cx

- transition to subprofile on execute

Cx

- transition to subprofile on execute -- scrub the environment

ix

- inherit execute

pix

- discrete profile execute with inherit fallback

Pix

- discrete profile execute with inherit fallback -- scrub the environment

cix

- transition to subprofile on execute with inherit fallback

Cix

- transition to subprofile on execute with inherit fallback -- scrub the environment

pux

- discrete profile execute with fallback to unconfined

PUx

- discrete profile execute with fallback to unconfined -- scrub the environment

cux

- transition to subprofile on execute with fallback to unconfined

CUx

- transition to subprofile on execute with fallback to unconfined -- scrub the environment

deny x

- disallow execute (in rules with the deny qualifier)

m

- allow PROT_EXEC with mmap(2) calls

l

- link

k

- lock

Access Modes Details

r - Read mode

Allows the program to have read access to the file or directory listing. Read access is required for shell scripts and other interpreted content.

w - Write mode

Allows the program to have write access to the file. Files and directories must have this permission if they are to be unlinked (removed.) Write mode is not required on a directory to rename or create files within the directory.

This mode conflicts with append mode.

a - Append mode

Allows the program to have a limited appending only write access to the file. Append mode will prevent an application from opening the file for write unless it passes the O_APPEND parameter flag on open.

The mode conflicts with Write mode.

ux - Unconfined execute mode

Allows the program to execute the program without any AppArmor profile being applied to the program.

This mode is useful when a confined program needs to be able to perform a privileged operation, such as rebooting the machine. By placing the privileged section in another executable and granting unconfined execution rights, it is possible to bypass the mandatory constraints imposed on all confined processes. For more information on what is constrained, see the apparmor(7) man page.

WARNING 'ux' should only be used in very special cases. It enables the designated child processes to be run without any AppArmor protection. 'ux' does not scrub the environment of variables such as LD_PRELOAD; as a result, the calling domain may have an undue amount of influence over the callee. Use this mode only if the child absolutely must be run unconfined and LD_PRELOAD must be used. Any profile using this mode provides negligible security. Use at your own risk.

Incompatible with other exec transition modes and the deny qualifier.

Ux - unconfined execute -- scrub the environment

'Ux' allows the named program to run in 'ux' mode, but AppArmor will invoke the Linux Kernel's unsafe_exec routines to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.)

WARNING 'Ux' should only be used in very special cases. It enables the designated child processes to be run without any AppArmor protection. Use this mode only if the child absolutely must be run unconfined. Use at your own risk.

Incompatible with other exec transition modes and the deny qualifier.

px - Discrete Profile execute mode

This mode requires that a discrete security profile is defined for a program executed and forces an AppArmor domain transition. If there is no profile defined then the access will be denied.

WARNING 'px' does not scrub the environment of variables such as LD_PRELOAD; as a result, the calling domain may have an undue amount of influence over the callee.

Incompatible with other exec transition modes and the deny qualifier.

Px - Discrete Profile execute mode -- scrub the environment

'Px' allows the named program to run in 'px' mode, but AppArmor will invoke the Linux Kernel's unsafe_exec routines to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.)

Incompatible with other exec transition modes and the deny qualifier.

cx - Transition to Subprofile execute mode

This mode requires that a local security profile is defined and forces an AppArmor domain transition to the named profile. If there is no profile defined then the access will be denied.

WARNING 'cx' does not scrub the environment of variables such as LD_PRELOAD; as a result, the calling domain may have an undue amount of influence over the callee.

Incompatible with other exec transition modes and the deny qualifier.

Cx - Transition to Subprofile execute mode -- scrub the environment

'Cx' allows the named program to run in 'cx' mode, but AppArmor will invoke the Linux Kernel's unsafe_exec routines to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.)

Incompatible with other exec transition modes and the deny qualifier.

ix - Inherit execute mode

Prevent the normal AppArmor domain transition on execve(2) when the profiled program executes the named program. Instead, the executed resource will inherit the current profile.

This mode is useful when a confined program needs to call another confined program without gaining the permissions of the target's profile, or losing the permissions of the current profile. There is no version to scrub the environment because 'ix' executions don't change privileges.

Incompatible with other exec transition modes and the deny qualifier.

Profile transition with inheritance fallback execute mode

These modes attempt to perform a domain transition as specified by the matching permission (shown below) and if that transition fails to find the matching profile the domain transition proceeds using the 'ix' transition mode.

  'Pix' == 'Px' with fallback to 'ix'
  'pix' == 'px' with fallback to 'ix'
  'Cix' == 'Cx' with fallback to 'ix'
  'cix' == 'cx' with fallback to 'ix'

Incompatible with other exec transition modes and the deny qualifier.

Profile transition with unconfined fallback execute mode

These modes attempt to perform a domain transition as specified by the matching permission (shown below) and if that transition fails to find the matching profile the domain transition proceeds using the 'ux' transition mode if 'pux', 'cux' or the 'Ux' transition mode if 'PUx', 'CUx' is used.

  'PUx' == 'Px' with fallback to 'Ux'
  'pux' == 'px' with fallback to 'ux'
  'CUx' == 'Cx' with fallback to 'Ux'
  'cux' == 'cx' with fallback to 'ux'

Incompatible with other exec transition modes and the deny qualifier.

deny x - Deny execute

For rules including the deny modifier, only 'x' is allowed to deny execute.

The 'ix', 'Px', 'px', 'Cx', 'cx' and the fallback modes conflict with the deny modifier.

Directed profile transitions

The directed ('px', 'Px', 'pix', 'Pix', 'pux', 'PUx') profile and subprofile ('cx', 'Cx', 'cix', 'Cix', 'cux', 'CUx') transitions normally determine the profile to transition to from the executable name. It is however possible to specify the name of the profile that the transition should use.

The name of the profile to transition to is specified using the '->' followed by the name of the profile to transition to. Eg.

  /bin/** px -> profile,

Incompatible with other exec transition modes.

m - Allow executable mapping

This mode allows a file to be mapped into memory using mmap(2)'s PROT_EXEC flag. This flag marks the pages executable; it is used on some architectures to provide non-executable data pages, which can complicate exploit attempts. AppArmor uses this mode to limit which files a well-behaved program (or all programs on architectures that enforce non-executable memory access controls) may use as libraries, to limit the effect of invalid -L flags given to ld(1) and LD_PRELOAD, LD_LIBRARY_PATH, given to ld.so(8).

l - Link mode

Allows the program to be able to create a link with this name. When a link is created, the new link MUST have a subset of permissions as the original file (with the exception that the destination does not have to have link access.) If there is an 'x' rule on the new link, it must match the original file exactly.

k - lock mode

Allows the program to be able lock a file with this name. This permission covers both advisory and mandatory locking.

leading OR trailing access permissions

File rules can be specified with the access permission either leading or trailing the file glob. Eg.

  rw /**,               # leading permissions

  /** rw,               # trailing permissions

When leading permissions are used further rule options and context may be allowed, Eg.

  l /foo -> /bar,       # lead 'l' link permission is equivalent to link rules

Link rules allow specifying permission to form a hard link as a link target pair. If the subset condition is specified then the permissions to access the link file must be a subset of the profiles permissions to access the target file. If there is an 'x' rule on the new link, it must match the original file exactly.

Eg.

  /file1  r,
  /file2  rwk,
  /link*  rw,
  link subset /link* -> /**,

The link rule allows linking of /link to both /file1 or /file2 by name however because the /link file has 'rw' permissions it is not allowed to link to /file1 because that would grant an access path to /file1 with more permissions than the 'r' permissions the profile specifies.

A link of /link to /file2 would be allowed because the 'rw' permissions of /link are a subset of the 'rwk' permissions for /file1.

The link rule is equivalent to specifying the 'l' link permission as a leading permission with no other file access permissions. When this is done the link rule options can be specified.

The following link rule is equivalent to the 'l' permission file rule

  link /foo -> bar,
  l /foo -> /bar,

File rules that specify the 'l' permission and don't specify the extend link permissions map to link rules as follows.

  /foo l,
  l /foo,
  link subset /foo -> /**,

Comments

Comments start with # and may begin at any place within a line. The comment ends when the line ends. This is the same comment style as shell scripts.

Capabilities

The only capabilities a confined process may use may be enumerated; for the complete list, please refer to capabilities(7). Note that granting some capabilities renders AppArmor confinement for that domain advisory; while open(2), read(2), write(2), etc., will still return error when access is not granted, some capabilities allow loading kernel modules, arbitrary access to IPC, ability to bypass discretionary access controls, and other operations that are typically reserved for the root user.

Network Rules

AppArmor supports simple coarse grained network mediation. The network rule restrict all socket(2) based operations. The mediation done is a course grained check on whether a socket of a given type and family can be created, read, or written. There is no mediation based of port number or protocol beyond tcp, udp, and raw. Network netlink(7) rules may only specify type 'dgram' and 'raw'.

AppArmor network rules are accumulated so that the granted network permissions are the union of all the listed network rule permissions.

AppArmor network rules are broad and general and become more restrictive as further information is specified.

eg.

 network,               #allow access to all networking
 network tcp,           #allow access to tcp
 network inet tcp,      #allow access to tcp only for inet4 addresses
 network inet6 tcp,     #allow access to tcp only for inet6 addresses
 network netlink raw,   #allow access to AF_NETLINK SOCK_RAW

Mount Rules

AppArmor supports mount mediation and allows specifying filesystem types and mount flags. The syntax of mount rules in AppArmor is based on the mount(8) command syntax. Mount rules must contain one of the mount, remount or umount keywords, but all mount conditions are optional. Unspecified optional conditionals are assumed to match all entries (eg, not specifying fstype means all fstypes are matched). Due to the complexity of the mount command and how options may be specified, AppArmor allows specifying conditionals three different ways:

  1. If a conditional is specified using '=', then the rule only grants permission for mounts matching the exactly specified options. For example, an AppArmor policy with the following rule:

        mount options=ro /dev/foo -E<gt> /mnt/,

    Would match:

        $ mount -o ro /dev/foo /mnt

    but not either of these:

        $ mount -o ro,atime /dev/foo /mnt

    $ mount -o rw /dev/foo /mnt

  2. If a conditional is specified using 'in', then the rule grants permission for mounts matching any combination of the specified options. For example, if an AppArmor policy has the following rule:

        mount options in (ro,atime) /dev/foo -> /mnt/,

    all of these mount commands will match:

        $ mount -o ro /dev/foo /mnt

    $ mount -o ro,atime /dev/foo /mnt

    $ mount -o atime /dev/foo /mnt

    but none of these will:

        $ mount -o ro,sync /dev/foo /mnt

    $ mount -o ro,atime,sync /dev/foo /mnt

    $ mount -o rw /dev/foo /mnt

    $ mount -o rw,noatime /dev/foo /mnt

    $ mount /dev/foo /mnt

  3. If multiple conditionals are specified in a single mount rule, then the rule grants permission for each set of options. This provides a shorthand when writing mount rules which might help to logically break up a conditional. For example, if an AppArmor policy has the following rule:

        mount options=ro options=atime

    both of these mount commands will match:

        $ mount -o ro /dev/foo /mnt

    $ mount -o atime /dev/foo /mnt

    but this one will not:

        $ mount -o ro,atime /dev/foo /mnt

Note that separate mount rules are distinct and the options do not accumulate. For example, these AppArmor mount rules:

    mount options=ro,

    mount options=atime,

are not equivalent to either of these mount rules:

    mount options=(ro,atime),

    mount options in (ro,atime),

To help clarify the flexibility and complexity of mount rules, here are some example rules with accompanying matching commands:

mount,

the 'mount' rule without any conditionals is the most generic and allows any mount. Equivalent to 'mount fstype=** options=** ** -> /**'.

mount /dev/foo,

allow mounting of /dev/foo anywhere with any options. Some matching mount commands:

    $ mount /dev/foo /mnt

    $ mount -t ext3 /dev/foo /mnt

    $ mount -t vfat /dev/foo /mnt

    $ mount -o ro,atime,noexec,nodiratime /dev/foo /srv/some/mountpoint
mount options=ro /dev/foo,

allow mounting of /dev/foo anywhere, as read only. Some matching mount commands:

    $ mount -o ro /dev/foo /mnt

    $ mount -o ro /dev/foo /some/where/else
mount options=(ro,atime) /dev/foo,

allow mount of /dev/foo anywhere, as read only and using inode access times. Some matching mount commands:

    $ mount -o ro,atime /dev/foo /mnt

    $ mount -o ro,atime /dev/foo /some/where/else
mount options in (ro,atime) /dev/foo,

allow mount of /dev/foo anywhere using some combination of 'ro' and 'atime' (see above). Some matching mount commands:

    $ mount -o ro /dev/foo /mnt

    $ mount -o atime /dev/foo /some/where/else

    $ mount -o ro,atime /dev/foo /some/other/place
mount options=ro /dev/foo, mount options=atime /dev/foo,

allow mount of /dev/foo anywhere as read only, and allow mount of /dev/foo anywhere using inode access times. Note this is expressed as two different rules. Matches:

    $ mount -o ro /dev/foo /mnt/1

    $ mount -o atime /dev/foo /mnt/2
mount -> /mnt/**,

allow mounting anything under a directory in /mnt/**. Some matching mount commands:

    $ mount /dev/foo1 /mnt/1

    $ mount -o ro,atime,noexec,nodiratime /dev/foo2 /mnt/deep/path/foo2
mount options=ro -> /mnt/**,

allow mounting anything under /mnt/**, as read only. Some matching mount commands:

    $ mount -o ro /dev/foo1 /mnt/1

    $ mount -o ro /dev/foo2 /mnt/deep/path/foo2
mount fstype=ext3 options=(rw,atime) /dev/sdb1 -> /mnt/stick/,

allow mounting an ext3 filesystem in /dev/sdb1 on /mnt/stick as read/write and using inode access times. Matches only:

    $ mount -o rw,atime /dev/sdb1 /mnt/stick
mount options=(ro, atime) options in (nodev, user) /dev/foo -> /mnt/,

allow mounting /dev/foo on /mmt/ read only and using inode access times or allow mounting /dev/foo on /mnt/ with some combination of 'nodev' and 'user'. Matches only:

    $ mount -o ro,atime /dev/foo /mnt

    $ mount -o nodev /dev/foo /mnt

    $ mount -o user /dev/foo /mnt

    $ mount -o nodev,user /dev/foo /mnt

Pivot Root Rules

AppArmor mediates changing of the root filesystem through the pivot_root(2) system call. The syntax of 'pivot_root' rules in AppArmor is based on the pivot_root(2) system call parameters with the notable exception that the ordering is reversed. The path corresponding to the put_old parameter of pivot_root(2) is optionally specified in the 'pivot_root' rule using the 'oldroot=' prefix.

AppArmor 'pivot_root' rules can specify a profile transition to occur during the pivot_root(2) system call. Note that AppArmor will only transition the process calling pivot_root(2) to the new profile.

The paths specified in 'pivot_root' rules must end with '/' since they are directories.

Here are some example 'pivot_root' rules:

    # Allow any pivot
    pivot_root,

    # Allow pivoting to any new root directory and putting the old root
    # directory at /mnt/root/old/
    pivot_root oldroot=/mnt/root/old/,

    # Allow pivoting the root directory to /mnt/root/
    pivot_root /mnt/root/,

    # Allow pivoting to /mnt/root/ and putting the old root directory at
    # /mnt/root/old/
    pivot_root oldroot=/mnt/root/old/ /mnt/root/,

    # Allow pivoting to /mnt/root/, putting the old root directory at
    # /mnt/root/old/ and transition to the /mnt/root/sbin/init profile
    pivot_root oldroot=/mnt/root/old/ /mnt/root/ -> /mnt/root/sbin/init,

PTrace rules

AppArmor supports mediation of ptrace(2). AppArmor PTrace rules are accumulated so that the granted PTrace permissions are the union of all the listed PTrace rule permissions.

AppArmor PTrace permissions are implied when a rule does not explicitly state an access list. By default, all PTrace permissions are implied.

The trace and tracedby permissions govern ptrace(2) while read and readby govern certain proc(5) filesystem accesses, kcmp(2), futexes (get_robust_list(2)) and perf trace events.

For a ptrace operation to be allowed the profile of the tracing process and the profile of the target task must both have the correct permissions. For example, the profile of the process attaching to another task must have the trace permission for the target task's profile, and the task being traced must have the tracedby permission for the tracing process' profile.

Example AppArmor PTrace rules:

    # Allow all PTrace access
    ptrace,

    # Explicitly allow all PTrace access,
    ptrace (read, readby, trace, tracedby),

    # Explicitly deny use of ptrace(2)
    deny ptrace (trace),

    # Allow unconfined processes (eg, a debugger) to ptrace us
    ptrace (readby, tracedby) peer=unconfined,

    # Allow ptrace of a process running under the /usr/bin/foo profile
    ptrace (trace) peer=/usr/bin/foo,

Signal rules

AppArmor supports mediation of signal(7). AppArmor signal rules are accumulated so that the granted signal permissions are the union of all the listed signal rule permissions.

AppArmor signal permissions are implied when a rule does not explicitly state an access list. By default, all signal permissions are implied.

For the sending of a signal to be allowed, the profile of the sending process and the profile of the target task must both have the correct permissions. For example, the profile of a process sending a signal to another task must have the send permission for the target task's profile, and the task receiving the signal must have a receive permission for the sending process' profile.

Example AppArmor signal rules:

    # Allow all signal access
    signal,

    # Explicitly deny sending the HUP and INT signals
    deny signal (send) set=(hup, int),

    # Allow unconfined processes to send us signals
    signal (receive) peer=unconfined,

    # Allow sending of signals to a process running under the /usr/bin/foo
    # profile
    signal (send) peer=/usr/bin/foo,

    # Allow checking for PID existence
    signal (receive, send) set=("exists"),

    # Allow us to signal ourselves using the built-in @{profile_name} variable
    signal peer=@{profile_name},

    # Allow two real-time signals
    signal set=(rtmin+0 rtmin+32),

DBus rules

AppArmor supports DBus mediation. The mediation is performed in conjunction with the DBus daemon. The DBus daemon verifies that communications over the bus are permitted by AppArmor policy.

AppArmor DBus rules are accumulated so that the granted DBus permissions are the union of all the listed DBus rule permissions.

AppArmor DBus rules are broad and general and become more restrictive as further information is specified. Policy may be specified down to the interface member level (method or signal name), however the contents of messages are not examined.

Some AppArmor DBus permissions are not compatible with all AppArmor DBus rules. The 'bind' permission cannot be used in message rules. The 'send' and 'receive' permissions cannot be used in service rules. The 'eavesdrop' permission cannot be used in rules containing any conditionals outside of the 'bus' conditional.

'r' and 'read' are synonyms for 'receive'. 'w' and 'write' are synonyms for 'send'. 'rw' is a synonym for both 'send' and 'receive'.

AppArmor DBus permissions are implied when a rule does not explicitly state an access list. By default, all DBus permissions are implied. Only message permissions are implied for message rules and only service permissions are implied for service rules.

Example AppArmor DBus rules:

    # Allow all DBus access
    dbus,

    # Explicitly allow all DBus access,
    dbus (send, receive, bind),

    # Deny send/receive/bind access to the session bus
    deny dbus bus=session,

    # Allow bind access for a particular name on any bus
    dbus bind name=com.example.ExampleName,

    # Allow receive access for a particular path and interface
    dbus receive path=/com/example/path interface=com.example.Interface,

    # Deny send/receive access to the system bus for a particular interface
    deny dbus bus=system interface=com.example.ExampleInterface,

    # Allow send access for a particular path, interface, member, and pair of
    # peer names:
    dbus send
         bus=session
         path=/com/example/path
         interface=com.example.Interface
         member=ExampleMethod
         peer=(name=(com.example.ExampleName1|com.example.ExampleName2)),

    # Allow receive access for all unconfined peers
    dbus receive peer=(label=unconfined)),

    # Allow eavesdropping on the system bus
    dbus eavesdrop bus=system,

    # Allow and audit all eavesdropping
    audit dbus eavesdrop,

Unix socket rules

AppArmor supports fine grained mediation of unix domain abstract and anonymous sockets. Unix domain sockets with file system paths are mediated via file access rules.

Abstract unix domain sockets is a nonportable Linux extension of unix domain sockets, see unix(7) for more information.

Unix socket address paths

The sun_path component (aka the socket address) of a unix domain socket is specified by the

  addr=

conditional. If an address conditional is not specified as part of a rule then the rule matches both abstract and anonymous sockets.

In apparmor the address of an abstract unix domain socket begins with the @ character, similar to how they are reported (as paths) by netstat -x. The address then follows and may contain pattern matching and any characters including the null character. In apparmor null characters must be specified by using an escape sequence \000 or \x00. The pattern matching is the same as is used by file path matching so * will not match / even though it has no special meaning with in an abstract socket name. Eg.

  unix addr=@*,

Anonymous unix domain sockets have no sun_path associated with the socket address, however it can be specified with the special none keyword to indicate the rule only applies to anonymous unix domain sockets. Eg.

  unix addr=none,

If the address component of a rule is not specified then the rule applies to both abstract and anonymous sockets.

Unix socket permissions

Unix domain socket rules are accumulated so that the granted unix socket permissions are the union of all the listed unix rule permissions.

Unix domain socket rules are broad and general and become more restrictive as further information is specified. Policy may be specified down to the socket address (aka sun_path) and label level. The content of the communication is not examined.

Unix socket rule permissions are implied when a rule does not explicitly state an access list. By default if a rule does not have an access list all permissions that are compatible with the specified set of local and peer conditionals are implied.

The create, bind, listen, shutdown, getattr, setattr, getopt, and setopt permissions are local socket permissions. They are only applied to the local socket and can't be specified in rules that have a peer component. The accept permission applies to the combination of a local and peer socket. The connect, send, and receive permissions are peer socket permissions.

Only the peer socket permissions will be applied to rules that don't specify permissions and contain a peer component.

Example Unix domain socket rules:

  # Allow all permissions to unix sockets
  unix,

  # Explicitly allow all unix permissions
  unix (create, listen, accept, connect, send, receive, getattr, setattr, setopt, getopt),

  # Explicitly deny unix socket access
  deny unix,

  # Allow create and use of abstract and anonymous sockets for profile_name
  unix peer=(label=@{profile_name}),

  # Allow receiving via unix sockets from unconfined
  unix (receive) peer=(label=unconfined),

  # Allow getattr and shutdown on anonymous sockets
  unix (getattr, shutdown) addr=none,

  # Allow SOCK_STREAM connect, receive and send on an abstract socket @bar
  # with peer running under profile '/foo'
  unix (connect, receive, send) type=stream peer=(label=/foo,addr="@bar"),

  # Allow accepting connections from and receiving from peer running under
  # profile '/bar' on abstract socket '@foo'
  unix (accept, receive) addr=@foo peer=(label=/bar),

Abstract unix domain sockets autobind

Abstract unix domain sockets can autobind to an address. The autobind address is a unique 5 digit string of decimal numbers, eg. @00001. There is nothing that prevents a task from manually binding to addresses with a similar pattern so it is impossible to reliably identify autobind addresses from a regular address.

Interaction of network rules and fine grained unix domain socket rules

The coarse grained networking rules can be used to control unix domain sockets as well. When fine grained unix domain socket mediation is available the coarse grained network rule is mapped into the equivalent unix socket rule.

E.G.

    network unix,  =>  unix,

    network unix stream,   =>  unix stream,

Fine grained mediation rules however can not be lossly converted back to the coarse grained network rule; e.g.

   unix bind addr=@example,

Has no exact match under coarse grained network rules, the closest match is the much wider permission rule of

   network unix,

change_profile rules

AppArmor supports self directed profile transitions via the change_profile api. Change_profile rules control which permissions for which profiles a confined task can transition to. The profile name can contain apparmor pattern matching to specify different profiles.

  change_profile -> **,

The change_profile api allows the transition to be delayed until when a task executes another application. If an exec rule transition is specified for the application and the change_profile api is used to make a transition at exec time, the transition specified by the change_profile api takes precedence.

The Change_profile permission can restrict which profiles can be transitioned to based off of the executable name by specifying the exec condition.

  change_profile /bin/bash -> new_profile,

The restricting of the transition profile to a given executable at exec time is only useful when then current task is allowed to make dynamic decisions about what confinement should be, but the decision set needs to be controlled. A list of profiles or multiple rules can be used to specify the profiles in the set. Eg.

  change_profile /bin/bash -> {new_profile1,new_profile2,new_profile3},

An exec rule can be used to specify a transition for the executable, if the transition should be allowed even if the change_profile api has not been used to select a transition for those available in the change_profile rule set. Eg.

  /bin/bash Px -> new_profile1,
  change_profile /bin/bash -> {new_profile1,new_profile2,new_profile3},

The exec mode dictates whether or not the Linux Kernel's unsafe_exec routines should be used to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.) The safe mode sets up environment scrubbing to occur when the new application is executed and unsafe mode disables AppArmor's requirement for environment scrubbing (the kernel and/or libc may still require environment scrubbing). An exec mode can only be specified when an exec condition is present.

  change_profile safe /bin/bash -> new_profile,

Not all kernels support safe mode and the parser will downgrade rules to unsafe mode in that situation. If no exec mode is specified, the default is safe mode in kernels that support it.

rlimit rules

AppArmor can set and control the resource limits associated with a profile as described in the setrlimit(2) man page.

The AppArmor rlimit controls allow setting of limits and restricting changes of them and these actions can be audited. Enforcement of the set limits is handled by the standard kernel enforcement mechanism for rlimits and will not result in an audited apparmor message if the limit is enforced.

If a profile does not have an rlimit rule associated with a given rlimit then the rlimit is left alone and regular access, including changing the limit, is allowed. However if the profile sets an rlimit then the current limit is checked and if greater than the limit specified in the rule it will be changed to the specified limit.

AppArmor rlimit rules control the hard limit of an application and ensure that if the hard limit is lowered that the soft limit does not exceed the hard limit value.

Eg.

  set rlimit data <= 100M,
  set rlimit nproc <= 10,
  set rlimit nice <= 5,

Variables

AppArmor's policy language allows embedding variables into file rules to enable easier configuration for some common (and pervasive) setups. Variables may have multiple values assigned, but any variable assignments must be made before the start of the profile.

The parser will automatically expand variables to include all values that they have been assigned; it is an error to reference a variable without setting at least one value. You can use empty quotes ("") to explicitly add an empty value.

At the time of this writing, the following variables are defined in the provided AppArmor policy:

  @{HOME}
  @{HOMEDIRS}
  @{multiarch}
  @{pid}
  @{pids}
  @{PROC}
  @{securityfs}
  @{apparmorfs}
  @{sys}
  @{tid}
  @{XDG_DESKTOP_DIR}
  @{XDG_DOWNLOAD_DIR}
  @{XDG_TEMPLATES_DIR}
  @{XDG_PUBLICSHARE_DIR}
  @{XDG_DOCUMENTS_DIR}
  @{XDG_MUSIC_DIR}
  @{XDG_PICTURES_DIR}
  @{XDG_VIDEOS_DIR}

These are defined in files in /etc/apparmor.d/tunables and are used in many of the abstractions described later.

You may also add files in /etc/apparmor.d/tunables/home.d for site-specific customization of @{HOMEDIRS}, /etc/apparmor.d/tunables/multiarch.d for @{multiarch} and /etc/apparmor.d/tunables/xdg-user-dirs.d for @{XDG_*}.

The special @{profile_name} variable is set to the profile name and may be used in all policy.

Alias rules

AppArmor also provides alias rules for remapping paths for site-specific layouts. They are an alternative form of path rewriting to using variables, and are done after variable resolution. Alias rules must occur within the preamble of the profile. System-wide aliases are found in /etc/apparmor.d/tunables/alias, which is included by /etc/apparmor.d/tunables/global. /etc/apparmor.d/tunables/global is typically included at the beginning of an AppArmor profile.

Globbing

File resources may be specified with a globbing syntax similar to that used by popular shells, such as csh(1), bash(1), zsh(1).

*

can substitute for any number of characters, excepting '/'

**

can substitute for any number of characters, including '/'

?

can substitute for any single character excepting '/'

[abc]

will substitute for the single character a, b, or c

[a-c]

will substitute for the single character a, b, or c

[^a-c]

will substitute for any single character not matching a, b or c

{ab,cd}

will expand to one rule to match ab, one rule to match cd

When AppArmor looks up a directory the pathname being looked up will end with a slash (e.g., /var/tmp/); otherwise it will not end with a slash. Only rules that match a trailing slash will match directories. Some examples, none matching the /tmp/ directory itself, are:

/tmp/*

Files directly in /tmp.

/tmp/*/

Directories directly in /tmp.

/tmp/**

Files and directories anywhere underneath /tmp.

/tmp/**/

Directories anywhere underneath /tmp.

Rule Qualifiers

There are several rule qualifiers that can be applied to permission rules. Rule qualifiers can modify the rule and/or permissions within the rule.

allow

Specifies that permissions requests that match the rule are allowed. This is the default value for rules and does not need to be specified. Conflicts with the deny qualifier.

audit

Specifies that permissions requests that match the rule should be recorded to the audit log.

deny

Specifies that permissions requests that match the rule should be denied without logging. Can be combined with 'audit' to enable logging. Conflicts with the allow qualifier.

owner

Specifies that the task must have the same euid/fsuid as the object being referenced by the permission check.

Qualifier Blocks

Rule Qualifiers can be applied to multiple rules at a time by grouping the rules into a rule block.

  audit {
     /foo r,
     network,
  }

#include mechanism

AppArmor provides an easy abstraction mechanism to group common file access requirements; this abstraction is an extremely flexible way to grant site-specific rights and makes writing new AppArmor profiles very simple by assembling the needed building blocks for any given program.

The use of '#include' is modelled directly after cpp(1); its use will replace the '#include' statement with the specified file's contents. #include "/absolute/path" specifies that /absolute/path should be used. #include "relative/path" specifies that relative/path should be used, where the path is relative to the current working directory. #include <magic/path> is the most common usage; it will load magic/path relative to a directory specified to apparmor_parser(8). /etc/apparmor.d/ is the AppArmor default.

The supplied AppArmor profiles follow several conventions; the abstractions stored in /etc/apparmor.d/abstractions/ are some large clusters that are used in most profiles. What follows are short descriptions of how some of the abstractions are used.

abstractions/audio

Includes accesses to device files used for audio applications.

abstractions/authentication

Includes access to files and services typically necessary for services that perform user authentication.

abstractions/base

Includes files that should be readable and writable in all profiles.

abstractions/bash

Includes many files used by bash; useful for interactive shells and programs that call system(3).

abstractions/consoles

Includes read and write access to the device files controlling the virtual console, sshd(8), xterm(1), etc. This abstraction is needed for many programs that interact with users.

abstractions/fonts

Includes access to fonts and the font libraries.

abstractions/gnome

Includes read and write access to GNOME configuration files, as well as read access to GNOME libraries.

abstractions/kde

Includes read and write access to KDE configuration files, as well as read access to KDE libraries.

abstractions/kerberosclient

Includes file access rules needed for common kerberos clients.

abstractions/nameservice

Includes file rules to allow DNS, LDAP, NIS, SMB, user and group password databases, services, and protocols lookups.

abstractions/perl

Includes read access to perl modules.

abstractions/user-download
abstractions/user-mail
abstractions/user-manpages
abstractions/user-tmp
abstractions/user-write

Some profiles for typical "user" programs will use these include files to describe rights that users have in the system.

abstractions/wutmp

Includes write access to files used to maintain wtmp(5) and utmp(5) databases, used with the w(1) and associated commands.

abstractions/X

Includes read access to libraries, configuration files, X authentication files, and the X socket.

Some of the abstractions rely on variables that are set in files in the /etc/apparmor.d/tunables/ directory. These variables are currently @{HOME} and @{HOMEDIRS}. Variables cannot be set in profile scope; they can only be set before the profile. Therefore, any profiles that use abstractions should either #include <tunables/global> or otherwise ensure that @{HOME} and @{HOMEDIRS} are set before starting the profile definition. The aa-autodep(8) and aa-genprof(8) utilities will automatically emit #include <tunables/global> in generated profiles.

EXAMPLE

An example AppArmor profile:

        # a variable definition in the preamble
        @{HOME} = /home/*/ /root/

        # a comment about foo.
        /usr/bin/foo {
          /bin/mount          ux,
          /dev/{,u}random     r,
          /etc/ld.so.cache    r,
          /etc/foo.conf       r,
          /etc/foo/*          r,
          /lib/ld-*.so*       rmix,
          /lib/lib*.so*       r,
          /proc/[0-9]**       r,
          /usr/lib/**         r,
          /tmp/foo.pid        wr,
          /tmp/foo.*          lrw,
          /@{HOME}/.foo_file  rw,
          /usr/bin/baz        Cx -> baz,

          # a comment about foo's hat (subprofile), bar.
          ^bar {
            /lib/ld-*.so*       rmix,
            /usr/bin/bar        rmix,
            /var/spool/*        rwl,
          }

          # a comment about foo's subprofile, baz.
          profile baz {
            #include <abstractions/bash>
            owner /proc/[0-9]*/stat r,
            /bin/bash ixr,
            /var/lib/baz/ r,
            owner /var/lib/baz/* rw,
          }
        }

FILES

/etc/init.d/boot.apparmor
/etc/apparmor.d/

KNOWN BUGS

  • Mount options support the use of pattern matching but mount flags are not correctly intersected against specified patterns. Eg, 'mount options=**,' should be equivalent to 'mount,', but it is not. (LP: #965690)

  • The fstype may not be matched against when certain mount command flags are used. Specifically fstype matching currently only works when creating a new mount and not remount, bind, etc.

  • Mount rules with multiple 'options' conditionals are not applied as documented but instead merged such that 'options in (ro,nodev) options in (atime)' is equivalent to 'options in (ro,nodev,atime)'.

  • When specifying mount options with the 'in' conditional, both the positive and negative values match when specifying one or the other. Eg, 'rw' matches when 'ro' is specified and 'dev' matches when 'nodev' is specified such that 'options in (ro,nodev)' is equivalent to 'options in (rw,dev)'.

SEE ALSO

apparmor(7), apparmor_parser(8), aa-complain(1), aa-enforce(1), aa_change_hat(2), mod_apparmor(5), and http://wiki.apparmor.net.

 
apparmor-2.11.0/parser/af_unix.cc0000644000175000017500000002655012467167244014465 0ustar jjjj/* * Copyright (c) 2014 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #include #include #include #include #include #include #include #include "network.h" #include "parser.h" #include "profile.h" #include "af_unix.h" int parse_unix_mode(const char *str_mode, int *mode, int fail) { return parse_X_mode("unix", AA_VALID_NET_PERMS, str_mode, mode, fail); } static struct supported_cond supported_conds[] = { { "addr", true, false, false, either_cond }, { NULL, false, false, false, local_cond }, /* sentinal */ }; void unix_rule::move_conditionals(struct cond_entry *conds) { struct cond_entry *ent; list_for_each(conds, ent) { if (!cond_check(supported_conds, ent, false, "unix") && !move_base_cond(ent, false)) { yyerror("unix rule: invalid conditional '%s'\n", ent->name); continue; } if (strcmp(ent->name, "addr") == 0) { move_conditional_value("unix socket", &addr, ent); if (addr[0] != '@' && strcmp(addr, "none") != 0) yyerror("unix rule: invalid value for addr='%s'\n", addr); } /* TODO: add conditionals for * listen queue length * attrs that can be read/set * ops that can be read/set * allow in on * type, protocol * local label match, and set */ } } void unix_rule::move_peer_conditionals(struct cond_entry *conds) { struct cond_entry *ent; list_for_each(conds, ent) { if (!cond_check(supported_conds, ent, true, "unix") && !move_base_cond(ent, true)) { yyerror("unix rule: invalid peer conditional '%s'\n", ent->name); continue; } if (strcmp(ent->name, "addr") == 0) { move_conditional_value("unix", &peer_addr, ent); if (peer_addr[0] != '@' && strcmp(peer_addr, "none") != 0) yyerror("unix rule: invalid value for addr='%s'\n", peer_addr); } } } unix_rule::unix_rule(unsigned int type_p, bool audit_p, bool denied): af_rule("unix"), addr(NULL), peer_addr(NULL) { if (type_p != 0xffffffff) { sock_type_n = type_p; sock_type = strdup(net_find_type_name(type_p)); if (!sock_type) yyerror("socket rule: invalid socket type '%d'", type_p); } mode = AA_VALID_NET_PERMS; audit = audit_p ? AA_VALID_NET_PERMS : 0; deny = denied; } unix_rule::unix_rule(int mode_p, struct cond_entry *conds, struct cond_entry *peer_conds): af_rule("unix"), addr(NULL), peer_addr(NULL), audit(0), deny(0) { move_conditionals(conds); move_peer_conditionals(peer_conds); if (mode_p) { mode = mode_p; if (mode & ~AA_VALID_NET_PERMS) yyerror("mode contains invalid permissions for unix socket rules\n"); else if ((mode & ~AA_PEER_NET_PERMS) && has_peer_conds()) yyerror("unix socket 'create', 'shutdown', 'setattr', 'getattr', 'bind', 'listen', 'setopt', and/or 'getopt' accesses cannot be used with peer socket conditionals\n"); } else { mode = AA_VALID_NET_PERMS; } free_cond_list(conds); free_cond_list(peer_conds); } ostream &unix_rule::dump_local(ostream &os) { af_rule::dump_local(os); if (addr) os << "addr='" << addr << "'"; return os; } ostream &unix_rule::dump_peer(ostream &os) { af_rule::dump_peer(os); if (peer_addr) os << "addr='" << peer_addr << "'"; return os; } int unix_rule::expand_variables(void) { int error = af_rule::expand_variables(); if (error) return error; error = expand_entry_variables(&addr); if (error) return error; error = expand_entry_variables(&peer_addr); if (error) return error; return 0; } /* do we want to warn once/profile or just once per compile?? */ static void warn_once(const char *name, const char *msg) { static const char *warned_name = NULL; if (warned_name != name) { cerr << "Warning from profile " << name << " ("; if (current_filename) cerr << current_filename; else cerr << "stdin"; cerr << "): " << msg << "\n"; warned_name = name; } } static void warn_once(const char *name) { if (warnflags & WARN_RULE_NOT_ENFORCED) warn_once(name, "extended network unix socket rules not enforced"); } static void writeu16(std::ostringstream &o, int v) { u16 tmp = htobe16((u16) v); u8 *byte1 = (u8 *)&tmp; u8 *byte2 = byte1 + 1; o << "\\x" << std::setfill('0') << std::setw(2) << std::hex << static_cast(*byte1); o << "\\x" << std::setfill('0') << std::setw(2) << std::hex << static_cast(*byte2); } #define CMD_ADDR 1 #define CMD_LISTEN 2 #define CMD_ACCEPT 3 #define CMD_OPT 4 void unix_rule::downgrade_rule(Profile &prof) { if (!prof.net.allow && !prof.alloc_net_table()) yyerror(_("Memory allocation error.")); if (deny) { prof.net.deny[AF_UNIX] |= 1 << sock_type_n; if (!audit) prof.net.quiet[AF_UNIX] |= 1 << sock_type_n; } else { prof.net.allow[AF_UNIX] |= 1 << sock_type_n; if (audit) prof.net.audit[AF_UNIX] |= 1 << sock_type_n; } } static uint32_t map_perms(uint32_t mask) { return (mask & 0x7f) | ((mask & (AA_NET_GETATTR | AA_NET_SETATTR)) << (AA_OTHER_SHIFT - 8)) | ((mask & (AA_NET_ACCEPT | AA_NET_BIND | AA_NET_LISTEN)) >> 4) | /* 2 + (AA_OTHER_SHIFT - 20) */ ((mask & (AA_NET_SETOPT | AA_NET_GETOPT)) >> 5); /* 5 + (AA_OTHER_SHIFT - 24) */ } void unix_rule::write_to_prot(std::ostringstream &buffer) { buffer << "\\x" << std::setfill('0') << std::setw(2) << std::hex << AA_CLASS_NET; writeu16(buffer, AF_UNIX); if (sock_type) writeu16(buffer, sock_type_n); else buffer << ".."; if (proto) writeu16(buffer, proto_n); else buffer << ".."; } bool unix_rule::write_addr(std::ostringstream &buffer, const char *addr) { std::string buf; pattern_t ptype; if (addr) { int pos; if (strcmp(addr, "none") == 0) { /* anonymous */ buffer << "\\x01"; } else { /* skip leading @ */ ptype = convert_aaregex_to_pcre(addr + 1, 0, glob_null, buf, &pos); if (ptype == ePatternInvalid) return false; /* kernel starts abstract with \0 */ buffer << "\\x00"; buffer << buf; } } else /* match any addr or anonymous */ buffer << ".*"; /* todo: change to out of band separator */ buffer << "\\x00"; return true; } bool unix_rule::write_label(std::ostringstream &buffer, const char *label) { std::string buf; pattern_t ptype; if (label) { int pos; ptype = convert_aaregex_to_pcre(label, 0, glob_default, buf, &pos); if (ptype == ePatternInvalid) return false; /* kernel starts abstract with \0 */ buffer << buf; } else buffer << default_match_pattern; return true; } /* General Layout * * Local socket end point perms * CLASS_NET AF TYPE PROTO local (addr\0label) \0 cmd cmd_option * ^ ^ ^ ^ ^ * | | | | | * stub perm | | | | * | | | | * sub stub perm | | | * | | | * create perm | | * | | * | | * bind, accept, get/set attr | * | * listen, set/get opt perm * * * peer socket end point perms * CLASS_NET AF TYPE PROTO local(addr\0label\0) cmd_addr peer(addr\0label ) * ^ * | * send/receive connect/accept perm * * NOTE: accept is encoded twice, locally to check if a socket is allowed * to accept, and then as a pair to test that it can accept the pair. */ int unix_rule::gen_policy_re(Profile &prof) { std::ostringstream buffer; std::string buf; int mask = mode; /* always generate a downgraded rule. This doesn't change generated * policy size and allows the binary policy to be loaded against * older kernels and be enforced to the best of the old network * rules ability */ downgrade_rule(prof); if (!kernel_supports_unix) { if (kernel_supports_network) { /* only warn if we are building against a kernel * that requires downgrading */ if (warnflags & WARN_RULE_DOWNGRADED) warn_once(prof.name, "downgrading extended network unix socket rule to generic network rule\n"); /* TODO: add ability to abort instead of downgrade */ return RULE_OK; } warn_once(prof.name); return RULE_NOT_SUPPORTED; } write_to_prot(buffer); if ((mask & AA_NET_CREATE) && !has_peer_conds()) { buf = buffer.str(); if (!prof.policy.rules->add_rule(buf.c_str(), deny, map_perms(AA_NET_CREATE), map_perms(audit & AA_NET_CREATE), dfaflags)) goto fail; mask &= ~AA_NET_CREATE; } if (mask) { /* local addr */ if (!write_addr(buffer, addr)) goto fail; /* local label option */ if (!write_label(buffer, label)) goto fail; /* seperator */ buffer << "\\x00"; /* create already masked off */ int local_mask = has_peer_conds() ? AA_NET_ACCEPT : AA_LOCAL_NET_PERMS & ~AA_LOCAL_NET_CMD; if (mask & local_mask) { buf = buffer.str(); if (!prof.policy.rules->add_rule(buf.c_str(), deny, map_perms(mask & local_mask), map_perms(audit & local_mask), dfaflags)) goto fail; } if ((mask & AA_NET_LISTEN) && !has_peer_conds()) { std::ostringstream tmp(buffer.str()); tmp.seekp(0, ios_base::end); tmp << "\\x" << std::setfill('0') << std::setw(2) << std::hex << CMD_LISTEN; /* TODO: backlog conditional: for now match anything*/ tmp << ".."; buf = tmp.str(); if (!prof.policy.rules->add_rule(buf.c_str(), deny, map_perms(AA_NET_LISTEN), map_perms(audit & AA_NET_LISTEN), dfaflags)) goto fail; } if ((mask & AA_NET_OPT) && !has_peer_conds()) { std::ostringstream tmp(buffer.str()); tmp.seekp(0, ios_base::end); tmp << "\\x" << std::setfill('0') << std::setw(2) << std::hex << CMD_OPT; /* TODO: sockopt conditional: for now match anything */ tmp << ".."; buf = tmp.str(); if (!prof.policy.rules->add_rule(buf.c_str(), deny, map_perms(mask & AA_NET_OPT), map_perms(audit & AA_NET_OPT), dfaflags)) goto fail; } mask &= ~AA_LOCAL_NET_PERMS | AA_NET_ACCEPT; } /* if (mask) */ if (mask & AA_PEER_NET_PERMS) { /* cmd selector */ buffer << "\\x" << std::setfill('0') << std::setw(2) << std::hex << CMD_ADDR; /* local addr */ if (!write_addr(buffer, peer_addr)) goto fail; /* local label option */ if (!write_label(buffer, peer_label)) goto fail; buf = buffer.str(); if (!prof.policy.rules->add_rule(buf.c_str(), deny, map_perms(mode & AA_PEER_NET_PERMS), map_perms(audit), dfaflags)) goto fail; } return RULE_OK; fail: return RULE_ERROR; } apparmor-2.11.0/parser/apparmor.d.pod0000644000175000017500000015470613013132716015261 0ustar jjjj# ---------------------------------------------------------------------- # Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, # 2008, 2009 # NOVELL (All rights reserved) # # Copyright (c) 2010 - 2014 # Canonical Ltd. (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Novell, Inc or Canonical # Ltd. # ---------------------------------------------------------------------- =pod =head1 NAME apparmor.d - syntax of security profiles for AppArmor. =head1 DESCRIPTION AppArmor profiles describe mandatory access rights granted to given programs and are fed to the AppArmor policy enforcement module using apparmor_parser(8). This man page describes the format of the AppArmor configuration files; see apparmor(7) for an overview of AppArmor. =head1 FORMAT The following is a BNF-style description of AppArmor policy configuration files; see below for an example AppArmor policy file. AppArmor configuration files are line-oriented; B<#> introduces a comment, similar to shell scripting languages. The exception to this rule is that B<#include> will I the contents of a file inline to the policy; this behaviour is modelled after cpp(1). =over 4 B = ( [ I ] [ I ] )* B = ( I | I | I | I )* Variable assignment and alias rules must come before the profile. B = I ('=' | '+=') (space separated values) B = '@{' I [ ( I | '_' ) ... ] '}' B = 'alias' I '-E' I ',' B = '#include' ( I | I ) B = '"' path '"' (the path is passed to open(2)) B = 'E' relative path 'E' The path is relative to F. B = '#' I [ '\r' ] '\n' B = any characters B = ( I ) [ I ] [ I ] '{' ( I )* '}' B = [ 'profile' ] I | 'profile' I B ( I | I ) B = '"' I '"' B = (must start with alphanumeric character (after variable expansion), or '/' B have special meanings; see below. May include I. Rules with embedded spaces or tabs must be quoted.) B = I B = [ 'flags=' ] '(' comma or white space separated list of I ')' B = 'complain' | 'audit' | 'enforce' | 'mediate_deleted' | 'attach_disconnected' | 'chroot_relative' B = [ ( I | I ',' | I ) B = ( I | I ) [ '\r' ] '\n' B = ( I | I | I | I | I | I | I | I | I | I ) B = ( I | I | I ) B = 'profile' I [ I ] [ I ] '{' ( I )* '}' B = ('hat' | '^') I [ I ] '{' ( I )* '}' B = (must start with alphanumeric character. See aa_change_hat(2) for a description of how this "hat" is used. If '^' is used to start a hat then there is no space between the '^' and I) B = I I B = ( 'allow' | 'deny' ) B = [ 'audit' ] [ I ] B = [ I ] 'capability' [ I ] B = ( I )+ B = (lowercase capability name without 'CAP_' prefix; see capabilities(7)) B = [ I ] 'network' [ I ] [ I | I ] B = ( 'inet' | 'ax25' | 'ipx' | 'appletalk' | 'netrom' | 'bridge' | 'atmpvc' | 'x25' | 'inet6' | 'rose' | 'netbeui' | 'security' | 'key' | 'packet' | 'ash' | 'econet' | 'atmsvc' | 'sna' | 'irda' | 'pppox' | 'wanpipe' | 'bluetooth' | 'netlink' | 'unix' | 'rds' | 'llc' | 'can' | 'tipc' | 'iucv' | 'rxrpc' | 'isdn' | 'phonet' | 'ieee802154' | 'caif' | 'alg' | 'nfc' | 'vsock' | 'mpls' | 'ib' | 'kcm' ) ',' B = ( 'stream' | 'dgram' | 'seqpacket' | 'rdm' | 'raw' | 'packet' ) B = ( 'tcp' | 'udp' | 'icmp' ) B = ( I | I | I ) B = [ I ] 'mount' [ I ] [ I ] [ '-E' [ I ] B = [ I ] 'remount' [ I ] I B = [ I ] 'umount' [ I ] I B = [ ( 'fstype' | 'vfstype' ) ( '=' | 'in' ) I ] [ 'options' ( '=' | 'in' ) I ] B = ( I | I ) B = Comma separated list of valid filesystem and virtual filesystem types (eg ext4, debugfs, devfs, etc) B = ( I | I ) B = Comma separated list of I. B = ( 'ro' | 'rw' | 'nosuid' | 'suid' | 'nodev' | 'dev' | 'noexec' | 'exec' | 'sync' | 'async' | 'remount' | 'mand' | 'nomand' | 'dirsync' | 'noatime' | 'atime' | 'nodiratime' | 'diratime' | 'bind' | 'rbind' | 'move' | 'verbose' | 'silent' | 'loud' | 'acl' | 'noacl' | 'unbindable' | 'runbindable' | 'private' | 'rprivate' | 'slave' | 'rslave' | 'shared' | 'rshared' | 'relatime' | 'norelatime' | 'iversion' | 'noiversion' | 'strictatime' | 'nouser' | 'user' ) B = ( I | I ) ... B = [ I ] pivot_root [ oldroot=I ] [ I ] [ '-E' I ] B = I B = I B = I B = [ I ] 'ptrace' [ I ] [ I ] B = I | I B = '(' Comma or space separated list of I ')' B = ( 'r' | 'w' | 'rw' | 'read' | 'readby' | 'trace' | 'tracedby' ) B = 'peer' '=' I B = [ I ] 'signal' [ I ] [ I ] [ I ] B = I | I B = '(' Comma or space separated list of I ')' B = ( 'r' | 'w' | 'rw' | 'read' | 'write' | 'send' | 'receive' ) B = 'set' '=' '(' I ')' B = Comma or space separated list of I B = ( 'hup' | 'int' | 'quit' | 'ill' | 'trap' | 'abrt' | 'bus' | 'fpe' | 'kill' | 'usr1' | 'segv' | 'usr2' | 'pipe' | 'alrm' | 'term' | 'stkflt' | 'chld' | 'cont' | 'stop' | 'stp' | 'ttin' | 'ttou' | 'urg' | 'xcpu' | 'xfsz' | 'vtalrm' | 'prof' | 'winch' | 'io' | 'pwr' | 'sys' | 'emt' | 'exists' | 'rtmin+0' ... 'rtmin+32' ) B = 'peer' '=' I B = ( I | I | I | I ) B = [ I ] 'dbus' [ I ] [ I ] [ I ] [ I ] [ I ] [ I ] B = [ I ] 'dbus' [ I ] [ I ] [ I ] B = [ I ] 'dbus' [ I ] [ I ] B = [ I ] 'dbus' [ I ] [ I ] B = ( I | '(' I ')' ) B = 'bus' '=' '(' 'system' | 'session' | '"' I '"' | I ')' B = 'path' '=' '(' '"' I '"' | I ')' B = 'interface' '=' '(' '"' I '"' | I ')' B = 'member' '=' '(' '"' I '"' | I ')' B = 'peer' '=' '(' [ I ] [ I ] ')' B = 'name' '=' '(' '"' I '"' | I ')' B = 'label' '=' '(' '"' I '"' | I ')' B = Comma separated list of I B = ( 'send' | 'receive' | 'bind' | 'eavesdrop' | 'r' | 'read' | 'w' | 'write' | 'rw' ) Some accesses are incompatible with some rules; see below. B = B See below for meanings. B = [ I ] 'unix' [ I ] [ I ] [ I ] [ I ] B = ( I | I ) B = ( 'create' | 'bind' | 'listen' | 'accept' | 'connect' | 'shutdown' | 'getattr' | 'setattr' | 'getopt' | 'setopt' | 'send' | 'receive' | 'r' | 'w' | 'rw' ) Some access modes are incompatible with some rules or require additional parameters. B = '(' I ( [','] I )* ')' B = ( I | I ) Each cond can appear at most once. B = 'type' '=' ( I | '(' ( '"' I '"' | I )+ ')' ) B = 'protocol' '=' ( I | '(' ( '"' I '"' | I )+ ')' ) B = ( I | I | I | I )* Each cond can appear at most once. B = 'peer' '=' ( I | I )+ Each cond can appear at most once. B 'addr' '=' ( I | '(' '"' I '"' | I ')' ) B 'label' '=' ( I | '(' '"' I '"' | I ')' ) B 'attr' '=' ( I | '(' '"' I '"' | I ')' ) B 'opt' '=' ( I | '(' '"' I '"' | I ')' ) B = 'set' 'rlimit' [I 'E=' I ] B = ( 'cpu' | 'fsize' | 'data' | 'stack' | 'core' | 'rss' | 'nofile' | 'ofile' | 'as' | 'nproc' | 'memlock' | 'locks' | 'sigpending' | 'msgqueue' | 'nice' | 'rtprio' | 'rttime' ) B = ( I | I | I | I ) B = I ( 'K' | 'M' | 'G' ) Only applies to RLIMIT of 'fsize', 'data', 'stack', 'core', 'rss', 'as', 'memlock', 'msgqueue'. B = number from 0 to max rlimit value. Only applies to RLIMIT of 'ofile', 'nofile', 'locks', 'sigpending', 'nproc', 'rtprio'. B = I ( 'us' | 'microsecond' | 'microseconds' | 'ms' | 'millisecond' | 'milliseconds' | 's' | 'sec' | 'second' | 'seconds' | 'min' | 'minute' | 'minutes' | 'h' | 'hour' | 'hours' | 'd' | 'day' | 'days' | 'week' | 'weeks' ) Only applies to RLIMIT of 'cpu' and 'rttime'. RLIMIT 'cpu' only allows units E= 'seconds'. B = a number between -20 and 19. Only applies to RLIMIT of 'nice'. B = [ I ] [ 'owner' ] ( 'file' | [ 'file' ] ( I I | I I ) [ '-E' I ] ) B = ( I | I ) B = '"' I '"' B = (must start with '/' (after variable expansion), B have special meanings; see below. May include I. Rules with embedded spaces or tabs must be quoted. Rules must end with '/' to apply to directories.) B = ( 'r' | 'w' | 'a' | 'l' | 'k' | 'm' | I )+ (not all combinations are allowed; see below.) B = ( 'ix' | 'ux' | 'Ux' | 'px' | 'Px' | 'cx' | 'Cx' | 'pix' | 'Pix' | 'cix' | 'Cix' | 'pux' | 'PUx' | 'cux' | 'CUx' | 'x' ) A bare 'x' is only allowed in rules with the deny qualifier, everything else only without the deny qualifier. B = name Requires I specified. B = I [ 'owner' ] 'link' [ 'subset' ] I ( 'to' | '-E' ) I B = ('a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z') B = ('0', '1', '2', ... '9', 'a', 'b', 'c', ... 'z', 'A', 'B', ... 'Z') B = 'change_profile' [ [ I ] I ] [ '-E' I ] B = ( 'safe' | 'unsafe' ) B = I =back All resources and programs need a full path. There may be any number of subprofiles (aka child profiles) in a profile, limited only by kernel memory. Subprofile names are limited to 974 characters. Child profiles can be used to confine an application in a special way, or when you want the child to be unconfined on the system, but confined when called from the parent. Hats are a special child profile that can be used with the aa_change_hat(2) API call. Applications written or modified to use aa_change_hat(2) can take advantage of subprofiles to run under different confinements, dependent on program logic. Several aa_change_hat(2)-aware applications exist, including an Apache module, mod_apparmor(5); a PAM module, pam_apparmor; and a Tomcat valve, tomcat_apparmor. Applications written or modified to use change_profile(2) transition permanently to the specified profile. libvirt is one such application. =head2 Access Modes File permission access modes consists of combinations of the following modes: =over 8 =item B - read =item B - write -- conflicts with append =item B - append -- conflicts with write =item B - unconfined execute =item B - unconfined execute -- scrub the environment =item B - discrete profile execute =item B - discrete profile execute -- scrub the environment =item B - transition to subprofile on execute =item B - transition to subprofile on execute -- scrub the environment =item B - inherit execute =item B - discrete profile execute with inherit fallback =item B - discrete profile execute with inherit fallback -- scrub the environment =item B - transition to subprofile on execute with inherit fallback =item B - transition to subprofile on execute with inherit fallback -- scrub the environment =item B - discrete profile execute with fallback to unconfined =item B - discrete profile execute with fallback to unconfined -- scrub the environment =item B - transition to subprofile on execute with fallback to unconfined =item B - transition to subprofile on execute with fallback to unconfined -- scrub the environment =item B - disallow execute (in rules with the deny qualifier) =item B - allow PROT_EXEC with mmap(2) calls =item B - link =item B - lock =back =head2 Access Modes Details =over 4 =item B Allows the program to have read access to the file or directory listing. Read access is required for shell scripts and other interpreted content. =item B Allows the program to have write access to the file. Files and directories must have this permission if they are to be unlinked (removed.) Write mode is not required on a directory to rename or create files within the directory. This mode conflicts with append mode. =item B Allows the program to have a limited appending only write access to the file. Append mode will prevent an application from opening the file for write unless it passes the O_APPEND parameter flag on open. The mode conflicts with Write mode. =item B Allows the program to execute the program without any AppArmor profile being applied to the program. This mode is useful when a confined program needs to be able to perform a privileged operation, such as rebooting the machine. By placing the privileged section in another executable and granting unconfined execution rights, it is possible to bypass the mandatory constraints imposed on all confined processes. For more information on what is constrained, see the apparmor(7) man page. B 'ux' should only be used in very special cases. It enables the designated child processes to be run without any AppArmor protection. 'ux' does not scrub the environment of variables such as LD_PRELOAD; as a result, the calling domain may have an undue amount of influence over the callee. Use this mode only if the child absolutely must be run unconfined and LD_PRELOAD must be used. Any profile using this mode provides negligible security. Use at your own risk. Incompatible with other exec transition modes and the deny qualifier. =item B 'Ux' allows the named program to run in 'ux' mode, but AppArmor will invoke the Linux Kernel's B routines to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.) B 'Ux' should only be used in very special cases. It enables the designated child processes to be run without any AppArmor protection. Use this mode only if the child absolutely must be run unconfined. Use at your own risk. Incompatible with other exec transition modes and the deny qualifier. =item B This mode requires that a discrete security profile is defined for a program executed and forces an AppArmor domain transition. If there is no profile defined then the access will be denied. B 'px' does not scrub the environment of variables such as LD_PRELOAD; as a result, the calling domain may have an undue amount of influence over the callee. Incompatible with other exec transition modes and the deny qualifier. =item B 'Px' allows the named program to run in 'px' mode, but AppArmor will invoke the Linux Kernel's B routines to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.) Incompatible with other exec transition modes and the deny qualifier. =item B This mode requires that a local security profile is defined and forces an AppArmor domain transition to the named profile. If there is no profile defined then the access will be denied. B 'cx' does not scrub the environment of variables such as LD_PRELOAD; as a result, the calling domain may have an undue amount of influence over the callee. Incompatible with other exec transition modes and the deny qualifier. =item B 'Cx' allows the named program to run in 'cx' mode, but AppArmor will invoke the Linux Kernel's B routines to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.) Incompatible with other exec transition modes and the deny qualifier. =item B Prevent the normal AppArmor domain transition on execve(2) when the profiled program executes the named program. Instead, the executed resource will inherit the current profile. This mode is useful when a confined program needs to call another confined program without gaining the permissions of the target's profile, or losing the permissions of the current profile. There is no version to scrub the environment because 'ix' executions don't change privileges. Incompatible with other exec transition modes and the deny qualifier. =item B These modes attempt to perform a domain transition as specified by the matching permission (shown below) and if that transition fails to find the matching profile the domain transition proceeds using the 'ix' transition mode. 'Pix' == 'Px' with fallback to 'ix' 'pix' == 'px' with fallback to 'ix' 'Cix' == 'Cx' with fallback to 'ix' 'cix' == 'cx' with fallback to 'ix' Incompatible with other exec transition modes and the deny qualifier. =item B These modes attempt to perform a domain transition as specified by the matching permission (shown below) and if that transition fails to find the matching profile the domain transition proceeds using the 'ux' transition mode if 'pux', 'cux' or the 'Ux' transition mode if 'PUx', 'CUx' is used. 'PUx' == 'Px' with fallback to 'Ux' 'pux' == 'px' with fallback to 'ux' 'CUx' == 'Cx' with fallback to 'Ux' 'cux' == 'cx' with fallback to 'ux' Incompatible with other exec transition modes and the deny qualifier. =item B For rules including the deny modifier, only 'x' is allowed to deny execute. The 'ix', 'Px', 'px', 'Cx', 'cx' and the fallback modes conflict with the deny modifier. =item B The directed ('px', 'Px', 'pix', 'Pix', 'pux', 'PUx') profile and subprofile ('cx', 'Cx', 'cix', 'Cix', 'cux', 'CUx') transitions normally determine the profile to transition to from the executable name. It is however possible to specify the name of the profile that the transition should use. The name of the profile to transition to is specified using the '-E' followed by the name of the profile to transition to. Eg. /bin/** px -> profile, Incompatible with other exec transition modes. =item B This mode allows a file to be mapped into memory using mmap(2)'s PROT_EXEC flag. This flag marks the pages executable; it is used on some architectures to provide non-executable data pages, which can complicate exploit attempts. AppArmor uses this mode to limit which files a well-behaved program (or all programs on architectures that enforce non-executable memory access controls) may use as libraries, to limit the effect of invalid B<-L> flags given to ld(1) and B, B, given to ld.so(8). =item B Allows the program to be able to create a link with this name. When a link is created, the new link B have a subset of permissions as the original file (with the exception that the destination does not have to have link access.) If there is an 'x' rule on the new link, it must match the original file exactly. =item B Allows the program to be able lock a file with this name. This permission covers both advisory and mandatory locking. =item B File rules can be specified with the access permission either leading or trailing the file glob. Eg. rw /**, # leading permissions /** rw, # trailing permissions When leading permissions are used further rule options and context may be allowed, Eg. l /foo -> /bar, # lead 'l' link permission is equivalent to link rules =back =head2 Link rules Link rules allow specifying permission to form a hard link as a link target pair. If the subset condition is specified then the permissions to access the link file must be a subset of the profiles permissions to access the target file. If there is an 'x' rule on the new link, it must match the original file exactly. Eg. /file1 r, /file2 rwk, /link* rw, link subset /link* -> /**, The link rule allows linking of /link to both /file1 or /file2 by name however because the /link file has 'rw' permissions it is not allowed to link to /file1 because that would grant an access path to /file1 with more permissions than the 'r' permissions the profile specifies. A link of /link to /file2 would be allowed because the 'rw' permissions of /link are a subset of the 'rwk' permissions for /file1. The link rule is equivalent to specifying the 'l' link permission as a leading permission with no other file access permissions. When this is done the link rule options can be specified. The following link rule is equivalent to the 'l' permission file rule link /foo -> bar, l /foo -> /bar, File rules that specify the 'l' permission and don't specify the extend link permissions map to link rules as follows. /foo l, l /foo, link subset /foo -> /**, =head2 Comments Comments start with # and may begin at any place within a line. The comment ends when the line ends. This is the same comment style as shell scripts. =head2 Capabilities The only capabilities a confined process may use may be enumerated; for the complete list, please refer to capabilities(7). Note that granting some capabilities renders AppArmor confinement for that domain advisory; while open(2), read(2), write(2), etc., will still return error when access is not granted, some capabilities allow loading kernel modules, arbitrary access to IPC, ability to bypass discretionary access controls, and other operations that are typically reserved for the root user. =head2 Network Rules AppArmor supports simple coarse grained network mediation. The network rule restrict all socket(2) based operations. The mediation done is a course grained check on whether a socket of a given type and family can be created, read, or written. There is no mediation based of port number or protocol beyond tcp, udp, and raw. Network netlink(7) rules may only specify type 'dgram' and 'raw'. AppArmor network rules are accumulated so that the granted network permissions are the union of all the listed network rule permissions. AppArmor network rules are broad and general and become more restrictive as further information is specified. eg. network, #allow access to all networking network tcp, #allow access to tcp network inet tcp, #allow access to tcp only for inet4 addresses network inet6 tcp, #allow access to tcp only for inet6 addresses network netlink raw, #allow access to AF_NETLINK SOCK_RAW =head2 Mount Rules AppArmor supports mount mediation and allows specifying filesystem types and mount flags. The syntax of mount rules in AppArmor is based on the mount(8) command syntax. Mount rules must contain one of the mount, remount or umount keywords, but all mount conditions are optional. Unspecified optional conditionals are assumed to match all entries (eg, not specifying fstype means all fstypes are matched). Due to the complexity of the mount command and how options may be specified, AppArmor allows specifying conditionals three different ways: =over 4 =item 1. If a conditional is specified using '=', then the rule only grants permission for mounts matching the exactly specified options. For example, an AppArmor policy with the following rule: mount options=ro /dev/foo -E /mnt/, Would match: $ mount -o ro /dev/foo /mnt but not either of these: $ mount -o ro,atime /dev/foo /mnt $ mount -o rw /dev/foo /mnt =item 2. If a conditional is specified using 'in', then the rule grants permission for mounts matching any combination of the specified options. For example, if an AppArmor policy has the following rule: mount options in (ro,atime) /dev/foo -> /mnt/, all of these mount commands will match: $ mount -o ro /dev/foo /mnt $ mount -o ro,atime /dev/foo /mnt $ mount -o atime /dev/foo /mnt but none of these will: $ mount -o ro,sync /dev/foo /mnt $ mount -o ro,atime,sync /dev/foo /mnt $ mount -o rw /dev/foo /mnt $ mount -o rw,noatime /dev/foo /mnt $ mount /dev/foo /mnt =item 3. If multiple conditionals are specified in a single mount rule, then the rule grants permission for each set of options. This provides a shorthand when writing mount rules which might help to logically break up a conditional. For example, if an AppArmor policy has the following rule: mount options=ro options=atime both of these mount commands will match: $ mount -o ro /dev/foo /mnt $ mount -o atime /dev/foo /mnt but this one will not: $ mount -o ro,atime /dev/foo /mnt =back Note that separate mount rules are distinct and the options do not accumulate. For example, these AppArmor mount rules: mount options=ro, mount options=atime, are not equivalent to either of these mount rules: mount options=(ro,atime), mount options in (ro,atime), To help clarify the flexibility and complexity of mount rules, here are some example rules with accompanying matching commands: =over 4 =item B the 'mount' rule without any conditionals is the most generic and allows any mount. Equivalent to 'mount fstype=** options=** ** -E /**'. =item B allow mounting of /dev/foo anywhere with any options. Some matching mount commands: $ mount /dev/foo /mnt $ mount -t ext3 /dev/foo /mnt $ mount -t vfat /dev/foo /mnt $ mount -o ro,atime,noexec,nodiratime /dev/foo /srv/some/mountpoint =item B allow mounting of /dev/foo anywhere, as read only. Some matching mount commands: $ mount -o ro /dev/foo /mnt $ mount -o ro /dev/foo /some/where/else =item B allow mount of /dev/foo anywhere, as read only and using inode access times. Some matching mount commands: $ mount -o ro,atime /dev/foo /mnt $ mount -o ro,atime /dev/foo /some/where/else =item B allow mount of /dev/foo anywhere using some combination of 'ro' and 'atime' (see above). Some matching mount commands: $ mount -o ro /dev/foo /mnt $ mount -o atime /dev/foo /some/where/else $ mount -o ro,atime /dev/foo /some/other/place =item B allow mount of /dev/foo anywhere as read only, and allow mount of /dev/foo anywhere using inode access times. Note this is expressed as two different rules. Matches: $ mount -o ro /dev/foo /mnt/1 $ mount -o atime /dev/foo /mnt/2 =item B<< mount -E /mnt/**, >> allow mounting anything under a directory in /mnt/**. Some matching mount commands: $ mount /dev/foo1 /mnt/1 $ mount -o ro,atime,noexec,nodiratime /dev/foo2 /mnt/deep/path/foo2 =item B<< mount options=ro -E /mnt/**, >> allow mounting anything under /mnt/**, as read only. Some matching mount commands: $ mount -o ro /dev/foo1 /mnt/1 $ mount -o ro /dev/foo2 /mnt/deep/path/foo2 =item B<< mount fstype=ext3 options=(rw,atime) /dev/sdb1 -E /mnt/stick/, >> allow mounting an ext3 filesystem in /dev/sdb1 on /mnt/stick as read/write and using inode access times. Matches only: $ mount -o rw,atime /dev/sdb1 /mnt/stick =item B<< mount options=(ro, atime) options in (nodev, user) /dev/foo -E /mnt/, >> allow mounting /dev/foo on /mmt/ read only and using inode access times or allow mounting /dev/foo on /mnt/ with some combination of 'nodev' and 'user'. Matches only: $ mount -o ro,atime /dev/foo /mnt $ mount -o nodev /dev/foo /mnt $ mount -o user /dev/foo /mnt $ mount -o nodev,user /dev/foo /mnt =back =head2 Pivot Root Rules AppArmor mediates changing of the root filesystem through the pivot_root(2) system call. The syntax of 'pivot_root' rules in AppArmor is based on the pivot_root(2) system call parameters with the notable exception that the ordering is reversed. The path corresponding to the put_old parameter of pivot_root(2) is optionally specified in the 'pivot_root' rule using the 'oldroot=' prefix. AppArmor 'pivot_root' rules can specify a profile transition to occur during the pivot_root(2) system call. Note that AppArmor will only transition the process calling pivot_root(2) to the new profile. The paths specified in 'pivot_root' rules must end with '/' since they are directories. Here are some example 'pivot_root' rules: # Allow any pivot pivot_root, # Allow pivoting to any new root directory and putting the old root # directory at /mnt/root/old/ pivot_root oldroot=/mnt/root/old/, # Allow pivoting the root directory to /mnt/root/ pivot_root /mnt/root/, # Allow pivoting to /mnt/root/ and putting the old root directory at # /mnt/root/old/ pivot_root oldroot=/mnt/root/old/ /mnt/root/, # Allow pivoting to /mnt/root/, putting the old root directory at # /mnt/root/old/ and transition to the /mnt/root/sbin/init profile pivot_root oldroot=/mnt/root/old/ /mnt/root/ -> /mnt/root/sbin/init, =head2 PTrace rules AppArmor supports mediation of ptrace(2). AppArmor PTrace rules are accumulated so that the granted PTrace permissions are the union of all the listed PTrace rule permissions. AppArmor PTrace permissions are implied when a rule does not explicitly state an access list. By default, all PTrace permissions are implied. The trace and tracedby permissions govern ptrace(2) while read and readby govern certain proc(5) filesystem accesses, kcmp(2), futexes (get_robust_list(2)) and perf trace events. For a ptrace operation to be allowed the profile of the tracing process and the profile of the target task must both have the correct permissions. For example, the profile of the process attaching to another task must have the trace permission for the target task's profile, and the task being traced must have the tracedby permission for the tracing process' profile. Example AppArmor PTrace rules: # Allow all PTrace access ptrace, # Explicitly allow all PTrace access, ptrace (read, readby, trace, tracedby), # Explicitly deny use of ptrace(2) deny ptrace (trace), # Allow unconfined processes (eg, a debugger) to ptrace us ptrace (readby, tracedby) peer=unconfined, # Allow ptrace of a process running under the /usr/bin/foo profile ptrace (trace) peer=/usr/bin/foo, =head2 Signal rules AppArmor supports mediation of signal(7). AppArmor signal rules are accumulated so that the granted signal permissions are the union of all the listed signal rule permissions. AppArmor signal permissions are implied when a rule does not explicitly state an access list. By default, all signal permissions are implied. For the sending of a signal to be allowed, the profile of the sending process and the profile of the target task must both have the correct permissions. For example, the profile of a process sending a signal to another task must have the send permission for the target task's profile, and the task receiving the signal must have a receive permission for the sending process' profile. Example AppArmor signal rules: # Allow all signal access signal, # Explicitly deny sending the HUP and INT signals deny signal (send) set=(hup, int), # Allow unconfined processes to send us signals signal (receive) peer=unconfined, # Allow sending of signals to a process running under the /usr/bin/foo # profile signal (send) peer=/usr/bin/foo, # Allow checking for PID existence signal (receive, send) set=("exists"), # Allow us to signal ourselves using the built-in @{profile_name} variable signal peer=@{profile_name}, # Allow two real-time signals signal set=(rtmin+0 rtmin+32), =head2 DBus rules AppArmor supports DBus mediation. The mediation is performed in conjunction with the DBus daemon. The DBus daemon verifies that communications over the bus are permitted by AppArmor policy. AppArmor DBus rules are accumulated so that the granted DBus permissions are the union of all the listed DBus rule permissions. AppArmor DBus rules are broad and general and become more restrictive as further information is specified. Policy may be specified down to the interface member level (method or signal name), however the contents of messages are not examined. Some AppArmor DBus permissions are not compatible with all AppArmor DBus rules. The 'bind' permission cannot be used in message rules. The 'send' and 'receive' permissions cannot be used in service rules. The 'eavesdrop' permission cannot be used in rules containing any conditionals outside of the 'bus' conditional. 'r' and 'read' are synonyms for 'receive'. 'w' and 'write' are synonyms for 'send'. 'rw' is a synonym for both 'send' and 'receive'. AppArmor DBus permissions are implied when a rule does not explicitly state an access list. By default, all DBus permissions are implied. Only message permissions are implied for message rules and only service permissions are implied for service rules. Example AppArmor DBus rules: # Allow all DBus access dbus, # Explicitly allow all DBus access, dbus (send, receive, bind), # Deny send/receive/bind access to the session bus deny dbus bus=session, # Allow bind access for a particular name on any bus dbus bind name=com.example.ExampleName, # Allow receive access for a particular path and interface dbus receive path=/com/example/path interface=com.example.Interface, # Deny send/receive access to the system bus for a particular interface deny dbus bus=system interface=com.example.ExampleInterface, # Allow send access for a particular path, interface, member, and pair of # peer names: dbus send bus=session path=/com/example/path interface=com.example.Interface member=ExampleMethod peer=(name=(com.example.ExampleName1|com.example.ExampleName2)), # Allow receive access for all unconfined peers dbus receive peer=(label=unconfined)), # Allow eavesdropping on the system bus dbus eavesdrop bus=system, # Allow and audit all eavesdropping audit dbus eavesdrop, =head2 Unix socket rules AppArmor supports fine grained mediation of unix domain abstract and anonymous sockets. Unix domain sockets with file system paths are mediated via file access rules. Abstract unix domain sockets is a nonportable Linux extension of unix domain sockets, see unix(7) for more information. =head3 Unix socket address paths The sun_path component (aka the socket address) of a unix domain socket is specified by the addr= conditional. If an address conditional is not specified as part of a rule then the rule matches both abstract and anonymous sockets. In apparmor the address of an abstract unix domain socket begins with the I<@> character, similar to how they are reported (as paths) by netstat -x. The address then follows and may contain pattern matching and any characters including the null character. In apparmor null characters must be specified by using an escape sequence I<\000> or I<\x00>. The pattern matching is the same as is used by file path matching so * will not match I even though it has no special meaning with in an abstract socket name. Eg. unix addr=@*, Anonymous unix domain sockets have no sun_path associated with the socket address, however it can be specified with the special I keyword to indicate the rule only applies to anonymous unix domain sockets. Eg. unix addr=none, If the address component of a rule is not specified then the rule applies to both abstract and anonymous sockets. =head3 Unix socket permissions Unix domain socket rules are accumulated so that the granted unix socket permissions are the union of all the listed unix rule permissions. Unix domain socket rules are broad and general and become more restrictive as further information is specified. Policy may be specified down to the socket address (aka sun_path) and label level. The content of the communication is not examined. Unix socket rule permissions are implied when a rule does not explicitly state an access list. By default if a rule does not have an access list all permissions that are compatible with the specified set of local and peer conditionals are implied. The create, bind, listen, shutdown, getattr, setattr, getopt, and setopt permissions are local socket permissions. They are only applied to the local socket and can't be specified in rules that have a peer component. The accept permission applies to the combination of a local and peer socket. The connect, send, and receive permissions are peer socket permissions. Only the peer socket permissions will be applied to rules that don't specify permissions and contain a peer component. =head3 Example Unix domain socket rules: # Allow all permissions to unix sockets unix, # Explicitly allow all unix permissions unix (create, listen, accept, connect, send, receive, getattr, setattr, setopt, getopt), # Explicitly deny unix socket access deny unix, # Allow create and use of abstract and anonymous sockets for profile_name unix peer=(label=@{profile_name}), # Allow receiving via unix sockets from unconfined unix (receive) peer=(label=unconfined), # Allow getattr and shutdown on anonymous sockets unix (getattr, shutdown) addr=none, # Allow SOCK_STREAM connect, receive and send on an abstract socket @bar # with peer running under profile '/foo' unix (connect, receive, send) type=stream peer=(label=/foo,addr="@bar"), # Allow accepting connections from and receiving from peer running under # profile '/bar' on abstract socket '@foo' unix (accept, receive) addr=@foo peer=(label=/bar), =head3 Abstract unix domain sockets autobind Abstract unix domain sockets can autobind to an address. The autobind address is a unique 5 digit string of decimal numbers, eg. @00001. There is nothing that prevents a task from manually binding to addresses with a similar pattern so it is impossible to reliably identify autobind addresses from a regular address. =head3 Interaction of network rules and fine grained unix domain socket rules The coarse grained networking rules can be used to control unix domain sockets as well. When fine grained unix domain socket mediation is available the coarse grained network rule is mapped into the equivalent unix socket rule. E.G. network unix, => unix, network unix stream, => unix stream, Fine grained mediation rules however can not be lossly converted back to the coarse grained network rule; e.g. unix bind addr=@example, Has no exact match under coarse grained network rules, the closest match is the much wider permission rule of network unix, =head2 change_profile rules AppArmor supports self directed profile transitions via the change_profile api. Change_profile rules control which permissions for which profiles a confined task can transition to. The profile name can contain apparmor pattern matching to specify different profiles. change_profile -> **, The change_profile api allows the transition to be delayed until when a task executes another application. If an exec rule transition is specified for the application and the change_profile api is used to make a transition at exec time, the transition specified by the change_profile api takes precedence. The Change_profile permission can restrict which profiles can be transitioned to based off of the executable name by specifying the exec condition. change_profile /bin/bash -> new_profile, The restricting of the transition profile to a given executable at exec time is only useful when then current task is allowed to make dynamic decisions about what confinement should be, but the decision set needs to be controlled. A list of profiles or multiple rules can be used to specify the profiles in the set. Eg. change_profile /bin/bash -> {new_profile1,new_profile2,new_profile3}, An exec rule can be used to specify a transition for the executable, if the transition should be allowed even if the change_profile api has not been used to select a transition for those available in the change_profile rule set. Eg. /bin/bash Px -> new_profile1, change_profile /bin/bash -> {new_profile1,new_profile2,new_profile3}, The exec mode dictates whether or not the Linux Kernel's B routines should be used to scrub the environment, similar to setuid programs. (See ld.so(8) for some information on setuid/setgid environment scrubbing.) The B mode sets up environment scrubbing to occur when the new application is executed and B mode disables AppArmor's requirement for environment scrubbing (the kernel and/or libc may still require environment scrubbing). An exec mode can only be specified when an exec condition is present. change_profile safe /bin/bash -> new_profile, Not all kernels support B mode and the parser will downgrade rules to B mode in that situation. If no exec mode is specified, the default is B mode in kernels that support it. =head2 rlimit rules AppArmor can set and control the resource limits associated with a profile as described in the setrlimit(2) man page. The AppArmor rlimit controls allow setting of limits and restricting changes of them and these actions can be audited. Enforcement of the set limits is handled by the standard kernel enforcement mechanism for rlimits and will not result in an audited apparmor message if the limit is enforced. If a profile does not have an rlimit rule associated with a given rlimit then the rlimit is left alone and regular access, including changing the limit, is allowed. However if the profile sets an rlimit then the current limit is checked and if greater than the limit specified in the rule it will be changed to the specified limit. AppArmor rlimit rules control the hard limit of an application and ensure that if the hard limit is lowered that the soft limit does not exceed the hard limit value. Eg. set rlimit data <= 100M, set rlimit nproc <= 10, set rlimit nice <= 5, =head2 Variables AppArmor's policy language allows embedding variables into file rules to enable easier configuration for some common (and pervasive) setups. Variables may have multiple values assigned, but any variable assignments must be made before the start of the profile. The parser will automatically expand variables to include all values that they have been assigned; it is an error to reference a variable without setting at least one value. You can use empty quotes ("") to explicitly add an empty value. At the time of this writing, the following variables are defined in the provided AppArmor policy: @{HOME} @{HOMEDIRS} @{multiarch} @{pid} @{pids} @{PROC} @{securityfs} @{apparmorfs} @{sys} @{tid} @{XDG_DESKTOP_DIR} @{XDG_DOWNLOAD_DIR} @{XDG_TEMPLATES_DIR} @{XDG_PUBLICSHARE_DIR} @{XDG_DOCUMENTS_DIR} @{XDG_MUSIC_DIR} @{XDG_PICTURES_DIR} @{XDG_VIDEOS_DIR} These are defined in files in F and are used in many of the abstractions described later. You may also add files in F for site-specific customization of B<@{HOMEDIRS}>, F for B<@{multiarch}> and F for B<@{XDG_*}>. The special B<@{profile_name}> variable is set to the profile name and may be used in all policy. =head2 Alias rules AppArmor also provides alias rules for remapping paths for site-specific layouts. They are an alternative form of path rewriting to using variables, and are done after variable resolution. Alias rules must occur within the preamble of the profile. System-wide aliases are found in F, which is included by F. F is typically included at the beginning of an AppArmor profile. =head2 Globbing File resources may be specified with a globbing syntax similar to that used by popular shells, such as csh(1), bash(1), zsh(1). =over 4 =item B<*> can substitute for any number of characters, excepting '/' =item B<**> can substitute for any number of characters, including '/' =item B can substitute for any single character excepting '/' =item B<[abc]> will substitute for the single character a, b, or c =item B<[a-c]> will substitute for the single character a, b, or c =item B<[^a-c]> will substitute for any single character not matching a, b or c =item B<{ab,cd}> will expand to one rule to match ab, one rule to match cd =back When AppArmor looks up a directory the pathname being looked up will end with a slash (e.g., F); otherwise it will not end with a slash. Only rules that match a trailing slash will match directories. Some examples, none matching the F directory itself, are: =over 4 =item B Files directly in F. =item B Directories directly in F. =item B Files and directories anywhere underneath F. =item B Directories anywhere underneath F. =back =head2 Rule Qualifiers There are several rule qualifiers that can be applied to permission rules. Rule qualifiers can modify the rule and/or permissions within the rule. =over 4 =item B Specifies that permissions requests that match the rule are allowed. This is the default value for rules and does not need to be specified. Conflicts with the I qualifier. =item B Specifies that permissions requests that match the rule should be recorded to the audit log. =item B Specifies that permissions requests that match the rule should be denied without logging. Can be combined with 'audit' to enable logging. Conflicts with the I qualifier. =item B Specifies that the task must have the same euid/fsuid as the object being referenced by the permission check. =back =head3 Qualifier Blocks Rule Qualifiers can be applied to multiple rules at a time by grouping the rules into a rule block. audit { /foo r, network, } =head2 #include mechanism AppArmor provides an easy abstraction mechanism to group common file access requirements; this abstraction is an extremely flexible way to grant site-specific rights and makes writing new AppArmor profiles very simple by assembling the needed building blocks for any given program. The use of '#include' is modelled directly after cpp(1); its use will replace the '#include' statement with the specified file's contents. B<#include "/absolute/path"> specifies that F should be used. B<#include "relative/path"> specifies that F should be used, where the path is relative to the current working directory. B<#include Emagic/pathE> is the most common usage; it will load F relative to a directory specified to apparmor_parser(8). F is the AppArmor default. The supplied AppArmor profiles follow several conventions; the abstractions stored in F are some large clusters that are used in most profiles. What follows are short descriptions of how some of the abstractions are used. =over 4 =item F Includes accesses to device files used for audio applications. =item F Includes access to files and services typically necessary for services that perform user authentication. =item F Includes files that should be readable and writable in all profiles. =item F Includes many files used by bash; useful for interactive shells and programs that call system(3). =item F Includes read and write access to the device files controlling the virtual console, sshd(8), xterm(1), etc. This abstraction is needed for many programs that interact with users. =item F Includes access to fonts and the font libraries. =item F Includes read and write access to GNOME configuration files, as well as read access to GNOME libraries. =item F Includes read and write access to KDE configuration files, as well as read access to KDE libraries. =item F Includes file access rules needed for common kerberos clients. =item F Includes file rules to allow DNS, LDAP, NIS, SMB, user and group password databases, services, and protocols lookups. =item F Includes read access to perl modules. =item F =item F =item F =item F =item F Some profiles for typical "user" programs will use these include files to describe rights that users have in the system. =item F Includes write access to files used to maintain wtmp(5) and utmp(5) databases, used with the w(1) and associated commands. =item F Includes read access to libraries, configuration files, X authentication files, and the X socket. =back Some of the abstractions rely on variables that are set in files in the F directory. These variables are currently B<@{HOME}> and B<@{HOMEDIRS}>. Variables cannot be set in profile scope; they can only be set before the profile. Therefore, any profiles that use abstractions should either B<#include Etunables/globalE> or otherwise ensure that B<@{HOME}> and B<@{HOMEDIRS}> are set before starting the profile definition. The aa-autodep(8) and aa-genprof(8) utilities will automatically emit B<#include Etunables/globalE> in generated profiles. =head1 EXAMPLE An example AppArmor profile: # a variable definition in the preamble @{HOME} = /home/*/ /root/ # a comment about foo. /usr/bin/foo { /bin/mount ux, /dev/{,u}random r, /etc/ld.so.cache r, /etc/foo.conf r, /etc/foo/* r, /lib/ld-*.so* rmix, /lib/lib*.so* r, /proc/[0-9]** r, /usr/lib/** r, /tmp/foo.pid wr, /tmp/foo.* lrw, /@{HOME}/.foo_file rw, /usr/bin/baz Cx -> baz, # a comment about foo's hat (subprofile), bar. ^bar { /lib/ld-*.so* rmix, /usr/bin/bar rmix, /var/spool/* rwl, } # a comment about foo's subprofile, baz. profile baz { #include owner /proc/[0-9]*/stat r, /bin/bash ixr, /var/lib/baz/ r, owner /var/lib/baz/* rw, } } =head1 FILES =over 4 =item F =item F =back =head1 KNOWN BUGS =over 4 =item * Mount options support the use of pattern matching but mount flags are not correctly intersected against specified patterns. Eg, 'mount options=**,' should be equivalent to 'mount,', but it is not. (LP: #965690) =item * The fstype may not be matched against when certain mount command flags are used. Specifically fstype matching currently only works when creating a new mount and not remount, bind, etc. =item * Mount rules with multiple 'options' conditionals are not applied as documented but instead merged such that 'options in (ro,nodev) options in (atime)' is equivalent to 'options in (ro,nodev,atime)'. =item * When specifying mount options with the 'in' conditional, both the positive and negative values match when specifying one or the other. Eg, 'rw' matches when 'ro' is specified and 'dev' matches when 'nodev' is specified such that 'options in (ro,nodev)' is equivalent to 'options in (rw,dev)'. =back =head1 SEE ALSO apparmor(7), apparmor_parser(8), aa-complain(1), aa-enforce(1), aa_change_hat(2), mod_apparmor(5), and L. =cut apparmor-2.11.0/parser/profile.cc0000644000175000017500000000501112401674202014442 0ustar jjjj/* * Copyright (c) 2012, 2013 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. */ #include "profile.h" #include "rule.h" #include #include bool deref_profileptr_lt::operator()(Profile * const &lhs, Profile * const &rhs) const { return *lhs < *rhs; }; pair ProfileList::insert(Profile *p) { return list.insert(p); } void ProfileList::erase(ProfileList::iterator pos) { list.erase(pos); } void ProfileList::clear(void) { for(ProfileList::iterator i = list.begin(); i != list.end(); ) { ProfileList::iterator k = i++; delete *k; list.erase(k); } } void ProfileList::dump(void) { for(ProfileList::iterator i = list.begin(); i != list.end(); i++) { (*i)->dump(); } } void ProfileList::dump_profile_names(bool children) { for (ProfileList::iterator i = list.begin(); i != list.end();i++) { (*i)->dump_name(true); printf("\n"); if (children && !(*i)->hat_table.empty()) (*i)->hat_table.dump_profile_names(children); } } bool Profile::alloc_net_table() { if (net.allow) return true; net.allow = (unsigned int *) calloc(get_af_max(), sizeof(unsigned int)); net.audit = (unsigned int *) calloc(get_af_max(), sizeof(unsigned int)); net.deny = (unsigned int *) calloc(get_af_max(), sizeof(unsigned int)); net.quiet = (unsigned int *) calloc(get_af_max(), sizeof(unsigned int)); if (!net.allow || !net.audit || !net.deny || !net.quiet) return false; return true; } Profile::~Profile() { hat_table.clear(); free_cod_entries(entries); for (RuleList::iterator i = rule_ents.begin(); i != rule_ents.end(); i++) delete *i; if (dfa.rules) delete dfa.rules; if (dfa.dfa) free(dfa.dfa); if (policy.rules) delete policy.rules; if (policy.dfa) free(policy.dfa); if (xmatch) free(xmatch); if (name) free(name); if (attachment) free(attachment); if (ns) free(ns); for (int i = (AA_EXEC_LOCAL >> 10) + 1; i < AA_EXEC_COUNT; i++) if (exec_table[i]) free(exec_table[i]); if (net.allow) free(net.allow); if (net.audit) free(net.audit); if (net.deny) free(net.deny); if (net.quiet) free(net.quiet); } apparmor-2.11.0/parser/parser_interface.c0000644000175000017500000003266712504631027016176 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * Copyright (c) 2013 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. */ #include #include #include #include #include #include #include #include #include #include "lib.h" #include "parser.h" #include "profile.h" #include "libapparmor_re/apparmor_re.h" #include #include #define SD_CODE_SIZE (sizeof(u8)) #define SD_STR_LEN (sizeof(u16)) int __sd_serialize_profile(int option, aa_kernel_interface *kernel_interface, Profile *prof, int cache_fd); static void print_error(int error) { switch (error) { case -ESPIPE: PERROR(_("Bad write position\n")); break; case -EPERM: PERROR(_("Permission denied\n")); break; case -ENOMEM: PERROR(_("Out of memory\n")); break; case -EFAULT: PERROR(_("Couldn't copy profile: Bad memory address\n")); break; case -EPROTO: PERROR(_("Profile doesn't conform to protocol\n")); break; case -EBADMSG: PERROR(_("Profile does not match signature\n")); break; case -EPROTONOSUPPORT: PERROR(_("Profile version not supported by Apparmor module\n")); break; case -EEXIST: PERROR(_("Profile already exists\n")); break; case -ENOENT: PERROR(_("Profile doesn't exist\n")); break; case -EACCES: PERROR(_("Permission denied; attempted to load a profile while confined?\n")); break; default: PERROR(_("Unknown error (%d): %s\n"), -error, strerror(-error)); break; } } int load_profile(int option, aa_kernel_interface *kernel_interface, Profile *prof, int cache_fd) { int retval = 0; int error = 0; PDEBUG("Serializing policy for %s.\n", prof->name); retval = __sd_serialize_profile(option, kernel_interface, prof, cache_fd); if (retval < 0) { error = retval; /* yeah, we'll just report the last error */ switch (option) { case OPTION_ADD: PERROR(_("%s: Unable to add \"%s\". "), progname, prof->name); print_error(error); break; case OPTION_REPLACE: PERROR(_("%s: Unable to replace \"%s\". "), progname, prof->name); print_error(error); break; case OPTION_REMOVE: PERROR(_("%s: Unable to remove \"%s\". "), progname, prof->name); print_error(error); break; case OPTION_STDOUT: PERROR(_("%s: Unable to write to stdout\n"), progname); break; case OPTION_OFILE: PERROR(_("%s: Unable to write to output file\n"), progname); default: PERROR(_("%s: ASSERT: Invalid option: %d\n"), progname, option); exit(1); break; } } else if (conf_verbose) { switch (option) { case OPTION_ADD: printf(_("Addition succeeded for \"%s\".\n"), prof->name); break; case OPTION_REPLACE: printf(_("Replacement succeeded for \"%s\".\n"), prof->name); break; case OPTION_REMOVE: printf(_("Removal succeeded for \"%s\".\n"), prof->name); break; case OPTION_STDOUT: case OPTION_OFILE: break; default: PERROR(_("%s: ASSERT: Invalid option: %d\n"), progname, option); exit(1); break; } } return error; } enum sd_code { SD_U8, SD_U16, SD_U32, SD_U64, SD_NAME, /* same as string except it is items name */ SD_STRING, SD_BLOB, SD_STRUCT, SD_STRUCTEND, SD_LIST, SD_LISTEND, SD_ARRAY, SD_ARRAYEND, SD_OFFSET }; const char *sd_code_names[] = { "SD_U8", "SD_U16", "SD_U32", "SD_U64", "SD_NAME", "SD_STRING", "SD_BLOB", "SD_STRUCT", "SD_STRUCTEND", "SD_LIST", "SD_LISTEND", "SD_ARRAY", "SD_ARRAYEND", "SD_OFFSET" }; static inline void sd_write8(std::ostringstream &buf, u8 b) { buf.write((const char *) &b, 1); } static inline void sd_write16(std::ostringstream &buf, u16 b) { u16 tmp; tmp = cpu_to_le16(b); buf.write((const char *) &tmp, 2); } static inline void sd_write32(std::ostringstream &buf, u32 b) { u32 tmp; tmp = cpu_to_le32(b); buf.write((const char *) &tmp, 4); } static inline void sd_write64(std::ostringstream &buf, u64 b) { u64 tmp; tmp = cpu_to_le64(b); buf.write((const char *) &tmp, 8); } static inline void sd_write_uint8(std::ostringstream &buf, u8 b) { sd_write8(buf, SD_U8); sd_write8(buf, b); } static inline void sd_write_uint16(std::ostringstream &buf, u16 b) { sd_write8(buf, SD_U16); sd_write16(buf, b); } static inline void sd_write_uint32(std::ostringstream &buf, u32 b) { sd_write8(buf, SD_U32); sd_write32(buf, b); } static inline void sd_write_uint64(std::ostringstream &buf, u64 b) { sd_write8(buf, SD_U64); sd_write64(buf, b); } static inline void sd_write_name(std::ostringstream &buf, const char *name) { PDEBUG("Writing name '%s'\n", name); if (name) { sd_write8(buf, SD_NAME); sd_write16(buf, strlen(name) + 1); buf.write(name, strlen(name) + 1); } } static inline void sd_write_blob(std::ostringstream &buf, void *b, int buf_size, char *name) { sd_write_name(buf, name); sd_write8(buf, SD_BLOB); sd_write32(buf, buf_size); buf.write((const char *) b, buf_size); } static char zeros[64]; #define align64(X) (((X) + (typeof(X)) 7) & ~((typeof(X)) 7)) static inline void sd_write_aligned_blob(std::ostringstream &buf, void *b, int b_size, const char *name) { sd_write_name(buf, name); /* pad calculation MUST come after name is written */ size_t pad = align64(buf.tellp() + ((std::streamoff) 5l)) - (buf.tellp() + ((std::streamoff) 5l)); sd_write8(buf, SD_BLOB); sd_write32(buf, b_size + pad); buf.write(zeros, pad); buf.write((const char *) b, b_size); } static void sd_write_strn(std::ostringstream &buf, char *b, int size, const char *name) { sd_write_name(buf, name); sd_write8(buf, SD_STRING); sd_write16(buf, size); buf.write(b, size); } static inline void sd_write_string(std::ostringstream &buf, char *b, const char *name) { sd_write_strn(buf, b, strlen(b) + 1, name); } static inline void sd_write_struct(std::ostringstream &buf, const char *name) { sd_write_name(buf, name); sd_write8(buf, SD_STRUCT); } static inline void sd_write_structend(std::ostringstream &buf) { sd_write8(buf, SD_STRUCTEND); } static inline void sd_write_array(std::ostringstream &buf, const char *name, int size) { sd_write_name(buf, name); sd_write8(buf, SD_ARRAY); sd_write16(buf, size); } static inline void sd_write_arrayend(std::ostringstream &buf) { sd_write8(buf, SD_ARRAYEND); } static inline void sd_write_list(std::ostringstream &buf, const char *name) { sd_write_name(buf, name); sd_write8(buf, SD_LIST); } static inline void sd_write_listend(std::ostringstream &buf) { sd_write8(buf, SD_LISTEND); } void sd_serialize_dfa(std::ostringstream &buf, void *dfa, size_t size) { if (dfa) sd_write_aligned_blob(buf, dfa, size, "aadfa"); } void sd_serialize_rlimits(std::ostringstream &buf, struct aa_rlimits *limits) { if (!limits->specified) return; sd_write_struct(buf, "rlimits"); sd_write_uint32(buf, limits->specified); sd_write_array(buf, NULL, RLIM_NLIMITS); for (int i = 0; i < RLIM_NLIMITS; i++) { sd_write_uint64(buf, limits->limits[i]); } sd_write_arrayend(buf); sd_write_structend(buf); } void sd_serialize_xtable(std::ostringstream &buf, char **table) { int count; if (!table[4]) return; sd_write_struct(buf, "xtable"); count = 0; for (int i = 4; i < AA_EXEC_COUNT; i++) { if (table[i]) count++; } sd_write_array(buf, NULL, count); for (int i = 4; i < count + 4; i++) { int len = strlen(table[i]) + 1; /* if its a namespace make sure the second : is overwritten * with 0, so that the namespace and name are \0 seperated */ if (*table[i] == ':') { char *tmp = table[i] + 1; strsep(&tmp, ":"); } sd_write_strn(buf, table[i], len, NULL); } sd_write_arrayend(buf); sd_write_structend(buf); } void sd_serialize_profile(std::ostringstream &buf, Profile *profile, int flattened) { uint64_t allowed_caps; sd_write_struct(buf, "profile"); if (flattened) { assert(profile->parent); autofree char *name = (char *) malloc(3 + strlen(profile->name) + strlen(profile->parent->name)); if (!name) return; sprintf(name, "%s//%s", profile->parent->name, profile->name); sd_write_string(buf, name, NULL); } else { sd_write_string(buf, profile->name, NULL); } /* only emit this if current kernel at least supports "create" */ if (perms_create) { if (profile->xmatch) { sd_serialize_dfa(buf, profile->xmatch, profile->xmatch_size); sd_write_uint32(buf, profile->xmatch_len); } } sd_write_struct(buf, "flags"); /* used to be flags.debug, but that's no longer supported */ sd_write_uint32(buf, profile->flags.hat); sd_write_uint32(buf, profile->flags.complain); sd_write_uint32(buf, profile->flags.audit); sd_write_structend(buf); if (profile->flags.path) { int flags = 0; if (profile->flags.path & PATH_CHROOT_REL) flags |= 0x8; if (profile->flags.path & PATH_MEDIATE_DELETED) flags |= 0x10000; if (profile->flags.path & PATH_ATTACH) flags |= 0x4; if (profile->flags.path & PATH_CHROOT_NSATTACH) flags |= 0x10; sd_write_name(buf, "path_flags"); sd_write_uint32(buf, flags); } #define low_caps(X) ((u32) ((X) & 0xffffffff)) #define high_caps(X) ((u32) (((X) >> 32) & 0xffffffff)) allowed_caps = (profile->caps.allow) & ~profile->caps.deny; sd_write_uint32(buf, low_caps(allowed_caps)); sd_write_uint32(buf, low_caps(allowed_caps & profile->caps.audit)); sd_write_uint32(buf, low_caps(profile->caps.deny & profile->caps.quiet)); sd_write_uint32(buf, 0); sd_write_struct(buf, "caps64"); sd_write_uint32(buf, high_caps(allowed_caps)); sd_write_uint32(buf, high_caps(allowed_caps & profile->caps.audit)); sd_write_uint32(buf, high_caps(profile->caps.deny & profile->caps.quiet)); sd_write_uint32(buf, 0); sd_write_structend(buf); sd_serialize_rlimits(buf, &profile->rlimits); if (profile->net.allow && kernel_supports_network) { size_t i; sd_write_array(buf, "net_allowed_af", get_af_max()); for (i = 0; i < get_af_max(); i++) { u16 allowed = profile->net.allow[i] & ~profile->net.deny[i]; sd_write_uint16(buf, allowed); sd_write_uint16(buf, allowed & profile->net.audit[i]); sd_write_uint16(buf, profile->net.deny[i] & profile->net.quiet[i]); } sd_write_arrayend(buf); } else if (profile->net.allow && (warnflags & WARN_RULE_NOT_ENFORCED)) pwarn(_("profile %s network rules not enforced\n"), profile->name); if (profile->policy.dfa) { sd_write_struct(buf, "policydb"); sd_serialize_dfa(buf, profile->policy.dfa, profile->policy.size); sd_write_structend(buf); } /* either have a single dfa or lists of different entry types */ sd_serialize_dfa(buf, profile->dfa.dfa, profile->dfa.size); sd_serialize_xtable(buf, profile->exec_table); sd_write_structend(buf); } void sd_serialize_top_profile(std::ostringstream &buf, Profile *profile) { uint32_t version; version = ENCODE_VERSION(force_complain, policy_version, parser_abi_version, kernel_abi_version); sd_write_name(buf, "version"); sd_write_uint32(buf, version); if (profile->ns) { sd_write_string(buf, profile->ns, "namespace"); } sd_serialize_profile(buf, profile, profile->parent ? 1 : 0); } int __sd_serialize_profile(int option, aa_kernel_interface *kernel_interface, Profile *prof, int cache_fd) { autoclose int fd = -1; int error, size, wsize; std::ostringstream work_area; switch (option) { case OPTION_ADD: case OPTION_REPLACE: case OPTION_REMOVE: break; case OPTION_STDOUT: fd = dup(1); if (fd < 0) { error = -errno; PERROR(_("Unable to open stdout - %s\n"), strerror(errno)); goto exit; } break; case OPTION_OFILE: fd = dup(fileno(ofile)); if (fd < 0) { error = -errno; PERROR(_("Unable to open output file - %s\n"), strerror(errno)); goto exit; } break; default: error = -EINVAL; goto exit; break; } error = 0; if (option == OPTION_REMOVE) { if (kernel_load) { if (aa_kernel_interface_remove_policy(kernel_interface, prof->fqname().c_str()) == -1) error = -errno; } } else { std::string tmp; sd_serialize_top_profile(work_area, prof); tmp = work_area.str(); size = (long) work_area.tellp(); if (kernel_load) { if (option == OPTION_ADD && aa_kernel_interface_load_policy(kernel_interface, tmp.c_str(), size) == -1) { error = -errno; } else if (option == OPTION_REPLACE && aa_kernel_interface_replace_policy(kernel_interface, tmp.c_str(), size) == -1) { error = -errno; } } else if ((option == OPTION_STDOUT || option == OPTION_OFILE) && aa_kernel_interface_write_policy(fd, tmp.c_str(), size) == -1) { error = -errno; } if (cache_fd != -1) { wsize = write(cache_fd, tmp.c_str(), size); if (wsize < 0) { error = -errno; } else if (wsize < size) { PERROR(_("%s: Unable to write entire profile entry to cache\n"), progname); error = -EIO; } } } if (!prof->hat_table.empty() && option != OPTION_REMOVE) { if (load_flattened_hats(prof, option, kernel_interface, cache_fd) == 0) return 0; } exit: return error; } apparmor-2.11.0/parser/parser_main.c0000644000175000017500000007353512703030644015160 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * Copyright (c) 2010 - 2013 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical, * Ltd. */ #include #include #include #include #include #include #include #include #include /* enable the following line to get voluminous debug info */ /* #define DEBUG */ #include #include #include #include #include #include #include "lib.h" #include "features.h" #include "parser.h" #include "parser_version.h" #include "parser_include.h" #include "common_optarg.h" #include "policy_cache.h" #include "libapparmor_re/apparmor_re.h" #define OLD_MODULE_NAME "subdomain" #define PROC_MODULES "/proc/modules" #define MATCH_FILE "/sys/kernel/security/" MODULE_NAME "/matching" #define MOUNTED_FS "/proc/mounts" #define AADFA "pattern=aadfa" #define PRIVILEGED_OPS (kernel_load) #define UNPRIVILEGED_OPS (!(PRIVILEGED_OPS)) const char *parser_title = "AppArmor parser"; const char *parser_copyright = "Copyright (C) 1999-2008 Novell Inc.\nCopyright 2009-2012 Canonical Ltd."; int opt_force_complain = 0; int binary_input = 0; int dump_vars = 0; int dump_expanded_vars = 0; int show_cache = 0; int skip_cache = 0; int skip_read_cache = 0; int write_cache = 0; int cond_clear_cache = 1; /* only applies if write is set */ int force_clear_cache = 0; /* force clearing regargless of state */ int create_cache_dir = 0; /* DEPRECATED in favor of write_cache */ int preprocess_only = 0; int skip_mode_force = 0; int abort_on_error = 0; /* stop processing profiles if error */ int skip_bad_cache_rebuild = 0; int mru_skip_cache = 1; int debug_cache = 0; /* for jobs_max and jobs * LONG_MAX : no limit * 0 : auto = detect system processing cores * n : use that number of processes/threads to compile policy */ #define JOBS_AUTO 0 long jobs_max = -8; /* 8 * cpus */ long jobs = JOBS_AUTO; /* default: number of processor cores */ long njobs = 0; long jobs_scale = 0; /* number of chance to resample online * cpus. This allows jobs spawning to * scale when scheduling policy is * taking cpus off line, and brings * them back with load */ bool debug_jobs = false; struct timespec cache_tstamp, mru_policy_tstamp; static char *apparmorfs = NULL; static char *cacheloc = NULL; static aa_features *features = NULL; /* Make sure to update BOTH the short and long_options */ static const char *short_options = "ad::f:h::rRVvI:b:BCD:NSm:M:qQn:XKTWkL:O:po:j:"; struct option long_options[] = { {"add", 0, 0, 'a'}, {"binary", 0, 0, 'B'}, {"base", 1, 0, 'b'}, {"subdomainfs", 1, 0, 'f'}, {"help", 2, 0, 'h'}, {"replace", 0, 0, 'r'}, {"reload", 0, 0, 'r'}, /* undocumented reload option == replace */ {"version", 0, 0, 'V'}, {"complain", 0, 0, 'C'}, {"Complain", 0, 0, 'C'}, /* Erk, apparently documented as --Complain */ {"Include", 1, 0, 'I'}, {"remove", 0, 0, 'R'}, {"names", 0, 0, 'N'}, {"stdout", 0, 0, 'S'}, {"ofile", 1, 0, 'o'}, {"match-string", 1, 0, 'm'}, {"features-file", 1, 0, 'M'}, {"quiet", 0, 0, 'q'}, {"skip-kernel-load", 0, 0, 'Q'}, {"verbose", 0, 0, 'v'}, {"namespace", 1, 0, 'n'}, {"readimpliesX", 0, 0, 'X'}, {"skip-cache", 0, 0, 'K'}, {"skip-read-cache", 0, 0, 'T'}, {"write-cache", 0, 0, 'W'}, {"show-cache", 0, 0, 'k'}, {"skip-bad-cache", 0, 0, 129}, /* no short option */ {"purge-cache", 0, 0, 130}, /* no short option */ {"create-cache-dir", 0, 0, 131}, /* no short option */ {"cache-loc", 1, 0, 'L'}, {"debug", 2, 0, 'd'}, {"dump", 1, 0, 'D'}, {"Dump", 1, 0, 'D'}, {"optimize", 1, 0, 'O'}, {"Optimize", 1, 0, 'O'}, {"preprocess", 0, 0, 'p'}, {"abort-on-error", 0, 0, 132}, /* no short option */ {"skip-bad-cache-rebuild", 0, 0, 133}, /* no short option */ {"warn", 1, 0, 134}, /* no short option */ {"debug-cache", 0, 0, 135}, /* no short option */ {"jobs", 1, 0, 'j'}, {"max-jobs", 1, 0, 136}, /* no short option */ {NULL, 0, 0, 0}, }; static int debug = 0; void display_version(void) { printf("%s version " PARSER_VERSION "\n%s\n", parser_title, parser_copyright); } static void display_usage(const char *command) { display_version(); printf("\nUsage: %s [options] [profile]\n\n" "Options:\n" "--------\n" "-a, --add Add apparmor definitions [default]\n" "-r, --replace Replace apparmor definitions\n" "-R, --remove Remove apparmor definitions\n" "-C, --Complain Force the profile into complain mode\n" "-B, --binary Input is precompiled profile\n" "-N, --names Dump names of profiles in input.\n" "-S, --stdout Dump compiled profile to stdout\n" "-o n, --ofile n Write output to file n\n" "-b n, --base n Set base dir and cwd\n" "-I n, --Include n Add n to the search path\n" "-f n, --subdomainfs n Set location of apparmor filesystem\n" "-m n, --match-string n Use only features n\n" "-M n, --features-file n Use only features in file n\n" "-n n, --namespace n Set Namespace for the profile\n" "-X, --readimpliesX Map profile read permissions to mr\n" "-k, --show-cache Report cache hit/miss details\n" "-K, --skip-cache Do not attempt to load or save cached profiles\n" "-T, --skip-read-cache Do not attempt to load cached profiles\n" "-W, --write-cache Save cached profile (force with -T)\n" " --skip-bad-cache Don't clear cache if out of sync\n" " --purge-cache Clear cache regardless of its state\n" " --debug-cache Debug cache file checks\n" "-L, --cache-loc n Set the location of the profile cache\n" "-q, --quiet Don't emit warnings\n" "-v, --verbose Show profile names as they load\n" "-Q, --skip-kernel-load Do everything except loading into kernel\n" "-V, --version Display version info and exit\n" "-d [n], --debug Debug apparmor definitions OR [n]\n" "-p, --preprocess Dump preprocessed profile\n" "-D [n], --dump Dump internal info for debugging\n" "-O [n], --Optimize Control dfa optimizations\n" "-h [cmd], --help[=cmd] Display this text or info about cmd\n" "-j n, --jobs n Set the number of compile threads\n" "--max-jobs n Hard cap on --jobs. Default 8*cpus\n" "--abort-on-error Abort processing of profiles on first error\n" "--skip-bad-cache-rebuild Do not try rebuilding the cache if it is rejected by the kernel\n" "--warn n Enable warnings (see --help=warn)\n" ,command); } optflag_table_t warnflag_table[] = { { 0, "rule-not-enforced", "warn if a rule is not enforced", WARN_RULE_NOT_ENFORCED }, { 0, "rule-downgraded", "warn if a rule is downgraded to a lesser but still enforcing rule", WARN_RULE_DOWNGRADED }, { 0, NULL, NULL, 0 }, }; void display_warn(const char *command) { display_version(); printf("\n%s: --warn [Option]\n\n" "Options:\n" "--------\n" ,command); print_flag_table(warnflag_table); } /* Treat conf file like options passed on command line */ static int getopt_long_file(FILE *f, const struct option *longopts, char **optarg, int *longindex) { static char line[256]; char *pos, *opt, *save; int i; for (;;) { if (!fgets(line, 256, f)) return -1; pos = line; while (isblank(*pos)) pos++; if (*pos == '#') continue; opt = strtok_r(pos, " \t\r\n=", &save); /* blank line */ if (!opt) continue; for (i = 0; longopts[i].name && strcmp(longopts[i].name, opt) != 0; i++) ; if (!longopts[i].name) { PERROR("%s: unknown option (%s) in config file.\n", progname, opt); /* skip it */ continue; } break; } if (longindex) *longindex = i; if (*save) { int len; while(isblank(*save)) save++; len = strlen(save) - 1; if (save[len] == '\n') save[len] = 0; } switch (longopts[i].has_arg) { case 0: *optarg = NULL; break; case 1: if (!strlen(save)) { *optarg = NULL; return '?'; } *optarg = save; break; case 2: *optarg = save; break; default: PERROR("%s: internal error bad longopt value\n", progname); exit(1); } if (longopts[i].flag == NULL) return longopts[i].val; else *longopts[i].flag = longopts[i].val; return 0; } static long process_jobs_arg(const char *arg, const char *val) { char *end; long n; if (!val || strcmp(val, "auto") == 0) n = JOBS_AUTO; else if (strcmp(val, "max") == 0) n = LONG_MAX; else { bool multiple = false; if (*val == 'x') { multiple = true; val++; } n = strtol(val, &end, 0); if (!(*val && val != end && *end == '\0')) { PERROR("%s: Invalid option %s=%s%s\n", progname, arg, multiple ? "x" : "", val); exit(1); } if (multiple) n = -n; } return n; } /* process a single argment from getopt_long * Returns: 1 if an action arg, else 0 */ static int process_arg(int c, char *optarg) { int count = 0; switch (c) { case 0: PERROR("Assert, in getopt_long handling\n"); display_usage(progname); exit(0); break; case 'a': count++; option = OPTION_ADD; break; case 'd': if (!optarg) { debug++; skip_read_cache = 1; } else if (strcmp(optarg, "jobs") == 0 || strcmp(optarg, "j") == 0) { debug_jobs = true; } else { PERROR("%s: Invalid --debug option '%s'\n", progname, optarg); exit(1); } break; case 'h': if (!optarg) { display_usage(progname); } else if (strcmp(optarg, "Dump") == 0 || strcmp(optarg, "dump") == 0 || strcmp(optarg, "D") == 0) { display_dump(progname); } else if (strcmp(optarg, "Optimize") == 0 || strcmp(optarg, "optimize") == 0 || strcmp(optarg, "O") == 0) { display_optimize(progname); } else if (strcmp(optarg, "warn") == 0) { display_warn(progname); } else { PERROR("%s: Invalid --help option %s\n", progname, optarg); exit(1); } exit(0); break; case 'r': count++; option = OPTION_REPLACE; break; case 'R': count++; option = OPTION_REMOVE; skip_cache = 1; break; case 'V': display_version(); exit(0); break; case 'I': add_search_dir(optarg); break; case 'b': set_base_dir(optarg); break; case 'B': binary_input = 1; skip_cache = 1; break; case 'C': opt_force_complain = 1; skip_cache = 1; break; case 'N': count++; names_only = 1; skip_cache = 1; kernel_load = 0; break; case 'S': count++; option = OPTION_STDOUT; skip_read_cache = 1; kernel_load = 0; break; case 'o': count++; option = OPTION_OFILE; skip_read_cache = 1; kernel_load = 0; ofile = fopen(optarg, "w"); if (!ofile) { PERROR("%s: Could not open file %s\n", progname, optarg); exit(1); } break; case 'f': apparmorfs = strndup(optarg, PATH_MAX); break; case 'D': skip_read_cache = 1; if (!optarg) { dump_vars = 1; } else if (strcmp(optarg, "variables") == 0) { dump_vars = 1; } else if (strcmp(optarg, "expanded-variables") == 0) { dump_expanded_vars = 1; } else if (!handle_flag_table(dumpflag_table, optarg, &dfaflags)) { PERROR("%s: Invalid --Dump option %s\n", progname, optarg); exit(1); } break; case 'O': skip_read_cache = 1; if (!handle_flag_table(optflag_table, optarg, &dfaflags)) { PERROR("%s: Invalid --Optimize option %s\n", progname, optarg); exit(1); } break; case 'm': if (aa_features_new_from_string(&features, optarg, strlen(optarg))) { fprintf(stderr, "Failed to parse features string: %m\n"); exit(1); } break; case 'M': if (aa_features_new(&features, AT_FDCWD, optarg)) { fprintf(stderr, "Failed to load features from '%s': %m\n", optarg); exit(1); } break; case 'q': conf_verbose = 0; conf_quiet = 1; warnflags = 0; break; case 'v': conf_verbose = 1; conf_quiet = 0; break; case 'n': profile_ns = strdup(optarg); break; case 'X': read_implies_exec = 1; break; case 'K': skip_cache = 1; break; case 'k': show_cache = 1; break; case 'W': write_cache = 1; break; case 'T': skip_read_cache = 1; break; case 129: cond_clear_cache = 0; break; case 130: force_clear_cache = 1; break; case 131: create_cache_dir = 1; break; case 132: abort_on_error = 1; break; case 133: skip_bad_cache_rebuild = 1; break; case 'L': cacheloc = strdup(optarg); break; case 'Q': kernel_load = 0; break; case 'p': count++; kernel_load = 0; skip_cache = 1; preprocess_only = 1; skip_mode_force = 1; break; case 134: if (!handle_flag_table(warnflag_table, optarg, &warnflags)) { PERROR("%s: Invalid --warn option %s\n", progname, optarg); exit(1); } break; case 135: debug_cache = 1; break; case 'j': jobs = process_jobs_arg("-j", optarg); break; case 136: jobs_max = process_jobs_arg("max-jobs", optarg); break; default: display_usage(progname); exit(1); break; } return count; } static int process_args(int argc, char *argv[]) { int c, o; int count = 0; option = OPTION_ADD; while ((c = getopt_long(argc, argv, short_options, long_options, &o)) != -1) { count += process_arg(c, optarg); } if (count > 1) { PERROR("%s: Too many actions given on the command line.\n", progname); display_usage(progname); exit(1); } PDEBUG("optind = %d argc = %d\n", optind, argc); return optind; } static int process_config_file(const char *name) { char *optarg; autofclose FILE *f = NULL; int c, o; f = fopen(name, "r"); if (!f) return 0; while ((c = getopt_long_file(f, long_options, &optarg, &o)) != -1) process_arg(c, optarg); return 1; } int have_enough_privilege(void) { uid_t uid, euid; uid = getuid(); euid = geteuid(); if (uid != 0 && euid != 0) { PERROR(_("%s: Sorry. You need root privileges to run this program.\n\n"), progname); display_usage(progname); return EPERM; } if (uid != 0 && euid == 0) { PERROR(_("%s: Warning! You've set this program setuid root.\n" "Anybody who can run this program can update " "your AppArmor profiles.\n\n"), progname); } return 0; } static void set_features_by_match_file(void) { autofclose FILE *ms = fopen(MATCH_FILE, "r"); if (ms) { autofree char *match_string = (char *) malloc(1000); if (!match_string) goto no_match; if (!fgets(match_string, 1000, ms)) goto no_match; if (strstr(match_string, " perms=c")) perms_create = 1; kernel_supports_network = 1; return; } no_match: perms_create = 1; } static void set_supported_features(void) { /* has process_args() already assigned a match string? */ if (!features && aa_features_new_from_kernel(&features) == -1) { set_features_by_match_file(); return; } perms_create = 1; kernel_supports_policydb = aa_features_supports(features, "file"); kernel_supports_network = aa_features_supports(features, "network"); kernel_supports_unix = aa_features_supports(features, "network/af_unix"); kernel_supports_mount = aa_features_supports(features, "mount"); kernel_supports_dbus = aa_features_supports(features, "dbus"); kernel_supports_signal = aa_features_supports(features, "signal"); kernel_supports_ptrace = aa_features_supports(features, "ptrace"); kernel_supports_setload = aa_features_supports(features, "policy/set_load"); kernel_supports_diff_encode = aa_features_supports(features, "policy/diff_encode"); kernel_supports_stacking = aa_features_supports(features, "domain/stack"); if (aa_features_supports(features, "policy/versions/v7")) kernel_abi_version = 7; else if (aa_features_supports(features, "policy/versions/v6")) kernel_abi_version = 6; if (!kernel_supports_diff_encode) /* clear diff_encode because it is not supported */ dfaflags &= ~DFA_CONTROL_DIFF_ENCODE; } int process_binary(int option, aa_kernel_interface *kernel_interface, const char *profilename) { const char *printed_name; int retval; printed_name = profilename ? profilename : "stdin"; if (kernel_load) { if (option == OPTION_ADD) { retval = profilename ? aa_kernel_interface_load_policy_from_file(kernel_interface, AT_FDCWD, profilename) : aa_kernel_interface_load_policy_from_fd(kernel_interface, 0); if (retval == -1) { retval = errno; PERROR(_("Error: Could not load profile %s: %s\n"), printed_name, strerror(retval)); return retval; } } else if (option == OPTION_REPLACE) { retval = profilename ? aa_kernel_interface_replace_policy_from_file(kernel_interface, AT_FDCWD, profilename) : aa_kernel_interface_replace_policy_from_fd(kernel_interface, 0); if (retval == -1) { retval = errno; PERROR(_("Error: Could not replace profile %s: %s\n"), printed_name, strerror(retval)); return retval; } } else { PERROR(_("Error: Invalid load option specified: %d\n"), option); return EINVAL; } } if (conf_verbose) { switch (option) { case OPTION_ADD: printf(_("Cached load succeeded for \"%s\".\n"), printed_name); break; case OPTION_REPLACE: printf(_("Cached reload succeeded for \"%s\".\n"), printed_name); break; default: break; } } return 0; } void reset_parser(const char *filename) { memset(&mru_policy_tstamp, 0, sizeof(mru_policy_tstamp)); memset(&cache_tstamp, 0, sizeof(cache_tstamp)); mru_skip_cache = 1; free_aliases(); free_symtabs(); free_policies(); reset_include_stack(filename); } int test_for_dir_mode(const char *basename, const char *linkdir) { int rc = 0; if (!skip_mode_force) { autofree char *target = NULL; if (asprintf(&target, "%s/%s/%s", basedir, linkdir, basename) < 0) { perror("asprintf"); exit(1); } if (access(target, R_OK) == 0) rc = 1; } return rc; } int process_profile(int option, aa_kernel_interface *kernel_interface, const char *profilename, const char *cachedir) { int retval = 0; autofree const char *cachename = NULL; autofree const char *cachetmpname = NULL; autoclose int cachetmp = -1; const char *basename = NULL; /* per-profile states */ force_complain = opt_force_complain; if (profilename) { if ( !(yyin = fopen(profilename, "r")) ) { PERROR(_("Error: Could not read profile %s: %s.\n"), profilename, strerror(errno)); return errno; } } else { pwarn("%s: cannot use or update cache, disable, or force-complain via stdin\n", progname); } reset_parser(profilename); if (profilename && option != OPTION_REMOVE) { /* make decisions about disabled or complain-mode profiles */ basename = strrchr(profilename, '/'); if (basename) basename++; else basename = profilename; if (test_for_dir_mode(basename, "disable")) { if (!conf_quiet) PERROR("Skipping profile in %s/disable: %s\n", basedir, basename); goto out; } if (test_for_dir_mode(basename, "force-complain")) { PERROR("Warning: found %s in %s/force-complain, forcing complain mode\n", basename, basedir); force_complain = 1; } /* setup cachename and tstamp */ if (!force_complain && !skip_cache) { cachename = cache_filename(cachedir, basename); valid_read_cache(cachename); } } if (yyin) { yyrestart(yyin); update_mru_tstamp(yyin, profilename ? profilename : "stdin"); } retval = yyparse(); if (retval != 0) goto out; /* Test to see if profile is for another namespace, if so disable * caching for now * TODO: Add support for caching profiles in an alternate namespace * TODO: Add support for embedded namespace defines if they aren't * removed from the language. * TODO: test profile->ns NOT profile_ns (must be after parse) */ if (profile_ns) skip_cache = 1; if (cachename) { /* Load a binary cache if it exists and is newest */ if (cache_hit(cachename)) { retval = process_binary(option, kernel_interface, cachename); if (!retval || skip_bad_cache_rebuild) return retval; } cachetmp = setup_cache_tmp(&cachetmpname, cachename); } if (show_cache) PERROR("Cache miss: %s\n", profilename ? profilename : "stdin"); if (preprocess_only) goto out; if (names_only) { dump_policy_names(); goto out; } if (dump_vars) { dump_symtab(); goto out; } retval = post_process_policy(debug); if (retval != 0) { PERROR(_("%s: Errors found in file. Aborting.\n"), progname); goto out; } if (dump_expanded_vars) { dump_expanded_symtab(); goto out; } if (debug > 0) { printf("----- Debugging built structures -----\n"); dump_policy(); goto out; } /* cache file generated by load_policy */ retval = load_policy(option, kernel_interface, cachetmp); if (retval == 0 && write_cache) { if (cachetmp == -1) { unlink(cachetmpname); PERROR("Warning failed to create cache: %s\n", basename); } else { install_cache(cachetmpname, cachename); } } out: return retval; } /* Do not call directly, this is a helper for work_sync, which can handle * single worker cases and cases were the work queue is optimized away * * call only if there are work children to wait on */ #define work_sync_one(RESULT) \ do { \ int status; \ wait(&status); \ if (WIFEXITED(status)) \ RESULT(WEXITSTATUS(status)); \ else \ RESULT(ECHILD); \ /* TODO: do we need to handle traced */ \ njobs--; \ if (debug_jobs) \ fprintf(stderr, " JOBS SYNC ONE: result %d, jobs left %ld\n", status, njobs); \ } while (0) #define work_sync(RESULT) \ do { \ if (debug_jobs) \ fprintf(stderr, "JOBS SYNC: jobs left %ld\n", njobs); \ while (njobs) \ work_sync_one(RESULT); \ } while (0) #define work_spawn(WORK, RESULT) \ do { \ /* what to do to avoid fork() overhead when single threaded \ if (jobs == 1) { \ // no parallel work so avoid fork() overhead \ RESULT(WORK); \ break; \ }*/ \ if (jobs_scale) { \ long n = sysconf(_SC_NPROCESSORS_ONLN); \ if (n > jobs_max) \ n = jobs_max; \ if (n > jobs) { \ /* reset sample chances - potentially reduce to 0 */ \ jobs_scale = jobs_max - n; \ jobs = n; \ } else \ /* reduce scaling chance by 1 */ \ jobs_scale--; \ } \ if (njobs == jobs) { \ /* wait for a child */ \ if (debug_jobs) \ fprintf(stderr, " JOBS SPAWN: waiting (jobs %ld == max %ld) ...\n", njobs, jobs); \ work_sync_one(RESULT); \ } \ \ pid_t child = fork(); \ if (child == 0) { \ /* child - exit work unit with returned value */ \ exit(WORK); \ } else if (child > 0) { \ /* parent */ \ njobs++; \ if (debug_jobs) \ fprintf(stderr, " JOBS SPAWN: created %ld ...\n", njobs); \ } else { \ /* error */ \ if (debug_jobs) \ fprintf(stderr, " JOBS SPAWN: failed error: %d) ...\n", errno); \ RESULT(errno); \ } \ } while (0) /* sadly C forces us to do this with exit, long_jump or returning error * from work_spawn and work_sync. We could throw a C++ exception, is it * worth doing it to avoid the exit here. * * atm not all resources maybe cleanedup at exit */ int last_error = 0; void handle_work_result(int retval) { if (retval) { last_error = retval; if (abort_on_error) { /* already in abort mode we don't need subsequent * syncs to do this too */ abort_on_error = 0; work_sync(handle_work_result); exit(last_error); } } } static long compute_jobs(long n, long j) { if (j == JOBS_AUTO) j = n; else if (j < 0) j = n * j * -1; return j; } static void setup_parallel_compile(void) { /* jobs and paralell_max set by default, config or args */ long n = sysconf(_SC_NPROCESSORS_ONLN); long maxn = sysconf(_SC_NPROCESSORS_CONF); if (n == -1) /* unable to determine number of processors, default to 1 */ n = 1; if (maxn == -1) /* unable to determine number of processors, default to 1 */ maxn = 1; jobs = compute_jobs(n, jobs); jobs_max = compute_jobs(maxn, jobs_max); if (jobs > jobs_max) { pwarn("%s: Warning capping number of jobs to %ld * # of cpus == '%ld'", progname, jobs_max, jobs); jobs = jobs_max; } else if (jobs < jobs_max) /* the bigger the difference the more sample chances given */ jobs_scale = jobs_max + 1 - n; njobs = 0; if (debug_jobs) fprintf(stderr, "jobs: %ld\n", jobs); } struct dir_cb_data { aa_kernel_interface *kernel_interface; const char *dirname; /* name of the parent dir */ const char *cachedir; /* path to the cache sub directory */ }; /* data - pointer to a dir_cb_data */ static int profile_dir_cb(int dirfd unused, const char *name, struct stat *st, void *data) { int rc = 0; if (!S_ISDIR(st->st_mode) && !is_blacklisted(name, NULL)) { struct dir_cb_data *cb_data = (struct dir_cb_data *)data; autofree char *path = NULL; if (asprintf(&path, "%s/%s", cb_data->dirname, name) < 0) PERROR(_("Out of memory")); work_spawn(process_profile(option, cb_data->kernel_interface, path, cb_data->cachedir), handle_work_result); } return rc; } /* data - pointer to a dir_cb_data */ static int binary_dir_cb(int dirfd unused, const char *name, struct stat *st, void *data) { int rc = 0; if (!S_ISDIR(st->st_mode) && !is_blacklisted(name, NULL)) { struct dir_cb_data *cb_data = (struct dir_cb_data *)data; autofree char *path = NULL; if (asprintf(&path, "%s/%s", cb_data->dirname, name) < 0) PERROR(_("Out of memory")); work_spawn(process_binary(option, cb_data->kernel_interface, path), handle_work_result); } return rc; } static void setup_flags(void) { /* Get the match string to determine type of regex support needed */ set_supported_features(); /* Gracefully handle AppArmor kernel without compatibility patch */ if (!features) { PERROR("Cache read/write disabled: interface file missing. " "(Kernel needs AppArmor 2.4 compatibility patch.)\n"); write_cache = 0; skip_read_cache = 1; return; } } int main(int argc, char *argv[]) { aa_kernel_interface *kernel_interface = NULL; aa_policy_cache *policy_cache = NULL; int retval; int i; int optind; /* name of executable, for error reporting and usage display */ progname = argv[0]; init_base_dir(); process_config_file("/etc/apparmor/parser.conf"); optind = process_args(argc, argv); setup_parallel_compile(); setlocale(LC_MESSAGES, ""); bindtextdomain(PACKAGE, LOCALEDIR); textdomain(PACKAGE); /* Check to see if we have superuser rights, if we're not * debugging */ if (!(UNPRIVILEGED_OPS) && ((retval = have_enough_privilege()))) { return retval; } if (!binary_input) parse_default_paths(); setup_flags(); if (!(UNPRIVILEGED_OPS) && aa_kernel_interface_new(&kernel_interface, features, apparmorfs) == -1) { PERROR(_("Warning: unable to find a suitable fs in %s, is it " "mounted?\nUse --subdomainfs to override.\n"), MOUNTED_FS); return 1; } if ((!skip_cache && (write_cache || !skip_read_cache)) || force_clear_cache) { uint16_t max_caches = write_cache && cond_clear_cache ? 1 : 0; if (!cacheloc && asprintf(&cacheloc, "%s/cache", basedir) == -1) { PERROR(_("Memory allocation error.")); return 1; } if (force_clear_cache) { if (aa_policy_cache_remove(AT_FDCWD, cacheloc)) { PERROR(_("Failed to clear cache files (%s): %s\n"), cacheloc, strerror(errno)); return 1; } return 0; } if (create_cache_dir) pwarn(_("The --create-cache-dir option is deprecated. Please use --write-cache.\n")); retval = aa_policy_cache_new(&policy_cache, features, AT_FDCWD, cacheloc, max_caches); if (retval) { if (errno != ENOENT && errno != EEXIST) { PERROR(_("Failed setting up policy cache (%s): %s\n"), cacheloc, strerror(errno)); return 1; } if (show_cache) { if (max_caches > 0) PERROR("Cache write disabled: Cannot create cache '%s': %m\n", cacheloc); else PERROR("Cache read/write disabled: Policy cache is invalid\n"); } write_cache = 0; skip_read_cache = 1; } } retval = last_error = 0; for (i = optind; i <= argc; i++) { struct stat stat_file; if (i < argc && !(profilename = strdup(argv[i]))) { perror("strdup"); last_error = ENOMEM; if (abort_on_error) break; continue; } /* skip stdin if we've seen other command line arguments */ if (i == argc && optind != argc) continue; if (profilename && stat(profilename, &stat_file) == -1) { PERROR("File %s not found, skipping...\n", profilename); continue; } if (profilename && S_ISDIR(stat_file.st_mode)) { int (*cb)(int dirfd, const char *name, struct stat *st, void *data); struct dir_cb_data cb_data; memset(&cb_data, 0, sizeof(struct dir_cb_data)); cb_data.dirname = profilename; cb_data.cachedir = cacheloc; cb_data.kernel_interface = kernel_interface; cb = binary_input ? binary_dir_cb : profile_dir_cb; if ((retval = dirat_for_each(AT_FDCWD, profilename, &cb_data, cb))) { PDEBUG("Failed loading profiles from %s\n", profilename); } } else if (binary_input) { work_spawn(process_binary(option, kernel_interface, profilename), handle_work_result); } else { work_spawn(process_profile(option, kernel_interface, profilename, cacheloc), handle_work_result); } if (profilename) free(profilename); profilename = NULL; } work_sync(handle_work_result); if (ofile) fclose(ofile); aa_policy_cache_unref(policy_cache); return last_error; } apparmor-2.11.0/parser/parser.h0000644000175000017500000003112512673100443014147 0ustar jjjj/* * Copyright (c) 1999, 2000, 2001, 2002, 2004, 2005, 2006, 2007 * NOVELL (All rights reserved) * * Copyright (c) 2010 - 2012 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_PARSER_H #define __AA_PARSER_H #include #include #include #include #define _(s) gettext(s) #include #include "immunix.h" #include "libapparmor_re/apparmor_re.h" #include "libapparmor_re/aare_rules.h" #include using namespace std; #include class Profile; class rule_t; #define MODULE_NAME "apparmor" /* Global variable to pass token to lexer. Will be replaced by parameter * when lexer and parser are made reentrant */ extern int parser_token; #define WARN_RULE_NOT_ENFORCED 1 #define WARN_RULE_DOWNGRADED 2 extern dfaflags_t warnflags; typedef enum pattern_t pattern_t; struct prefixes { int audit; int deny; int owner; }; struct cod_pattern { char *regex; // posix regex }; struct value_list { char *value; struct value_list *next; }; struct cond_entry { char *name; int eq; /* where equals was used in specifying list */ struct value_list *vals; struct cond_entry *next; }; struct cond_entry_list { char *name; struct cond_entry *list; }; struct cod_entry { char *name; union { char *link_name; char *onexec; }; char *nt_name; Profile *prof; /* Special profile defined * just for this executable */ int mode; /* mode is 'or' of AA_* bits */ int audit; /* audit flags for mode */ int deny; /* TRUE or FALSE */ int alias_ignore; /* ignore for alias processing */ int subset; pattern_t pattern_type; struct cod_pattern pat; struct cod_entry *next; }; struct aa_rlimits { unsigned int specified; /* limits that are set */ rlim_t limits[RLIMIT_NLIMITS]; }; struct alt_name { char *name; struct alt_name *next; }; struct sd_hat { char *hat_name; unsigned int hat_magic; }; struct var_string { char *prefix; char *var; char *suffix; }; #define COD_READ_CHAR 'r' #define COD_WRITE_CHAR 'w' #define COD_APPEND_CHAR 'a' #define COD_EXEC_CHAR 'x' #define COD_LINK_CHAR 'l' #define COD_LOCK_CHAR 'k' #define COD_MMAP_CHAR 'm' #define COD_INHERIT_CHAR 'i' #define COD_UNCONFINED_CHAR 'U' #define COD_UNSAFE_UNCONFINED_CHAR 'u' #define COD_PROFILE_CHAR 'P' #define COD_UNSAFE_PROFILE_CHAR 'p' #define COD_LOCAL_CHAR 'C' #define COD_UNSAFE_LOCAL_CHAR 'c' #define OPTION_ADD 1 #define OPTION_REMOVE 2 #define OPTION_REPLACE 3 #define OPTION_STDOUT 4 #define OPTION_OFILE 5 #define BOOL int extern int preprocess_only; #define PATH_CHROOT_REL 0x1 #define PATH_NS_REL 0x2 #define PATH_CHROOT_NSATTACH 0x4 #define PATH_CHROOT_NO_ATTACH 0x8 #define PATH_MEDIATE_DELETED 0x10 #define PATH_DELEGATE_DELETED 0x20 #define PATH_ATTACH 0x40 #define PATH_NO_ATTACH 0x80 #ifdef DEBUG #define PDEBUG(fmt, args...) fprintf(stderr, "parser: " fmt, ## args) #else #define PDEBUG(fmt, args...) /* Do nothing */ #endif #define NPDEBUG(fmt, args...) /* Do nothing */ #define PERROR(fmt, args...) fprintf(stderr, fmt, ## args) #ifndef TRUE #define TRUE (1) #endif #ifndef FALSE #define FALSE (0) #endif #define MIN_PORT 0 #define MAX_PORT 65535 #ifndef unused #define unused __attribute__ ((unused)) #endif #define list_for_each(LIST, ENTRY) \ for ((ENTRY) = (LIST); (ENTRY); (ENTRY) = (ENTRY)->next) #define list_for_each_safe(LIST, ENTRY, TMP) \ for ((ENTRY) = (LIST), (TMP) = (LIST) ? (LIST)->next : NULL; (ENTRY); (ENTRY) = (TMP), (TMP) = (TMP) ? (TMP)->next : NULL) #define list_last_entry(LIST, ENTRY) \ for ((ENTRY) = (LIST); (ENTRY) && (ENTRY)->next; (ENTRY) = (ENTRY)->next) #define list_append(LISTA, LISTB) \ do { \ typeof(LISTA) ___tmp; \ list_last_entry((LISTA), ___tmp);\ ___tmp->next = (LISTB); \ } while (0) #define list_len(LIST) \ ({ \ int len = 0; \ typeof(LIST) tmp; \ list_for_each((LIST), tmp) \ len++; \ len; \ }) #define list_find_prev(LIST, ENTRY) \ ({ \ typeof(ENTRY) tmp, prev = NULL; \ list_for_each((LIST), tmp) { \ if (tmp == (ENTRY)) \ break; \ prev = tmp; \ } \ prev; \ }) #define list_remove_at(LIST, PREV, ENTRY) \ if (PREV) \ (PREV)->next = (ENTRY)->next; \ if ((ENTRY) == (LIST)) \ (LIST) = (ENTRY)->next; \ (ENTRY)->next = NULL; \ #define list_remove(LIST, ENTRY) \ do { \ typeof(ENTRY) prev = list_find_prev((LIST), (ENTRY)); \ list_remove_at((LIST), prev, (ENTRY)); \ } while (0) #define DUP_STRING(orig, new, field, fail_target) \ do { \ (new)->field = ((orig)->field) ? strdup((orig)->field) : NULL; \ if (((orig)->field) && !((new)->field)) \ goto fail_target; \ } while (0) #define u8 unsigned char #define u16 uint16_t #define u32 uint32_t #define u64 uint64_t #define cpu_to_le16(x) ((u16)(htole16 ((u16) x))) #define cpu_to_le32(x) ((u32)(htole32 ((u32) x))) #define cpu_to_le64(x) ((u64)(htole64 ((u64) x))) /* The encoding for kernal abi > 5 is * 28-31: reserved * 20-27: policy version * 12-19: policy abi version * 11: force complain flag * 10: reserved * 0-9: kernel abi version */ #define ENCODE_VERSION(C, P, PABI, KABI) \ ({ \ u32 version = (KABI) & 0x3ff; \ if ((KABI) > 5) { \ version |= (C) ? 1 << 11 : 0; \ version |= ((PABI) & 0xff) << 12; \ version |= ((P) & 0xff) << 20; \ } \ version; \ }) /* The parser fills this variable in automatically */ #define PROFILE_NAME_VARIABLE "profile_name" /* from parser_common.c */ extern uint32_t policy_version; extern uint32_t parser_abi_version; extern uint32_t kernel_abi_version; extern int force_complain; extern int perms_create; extern int net_af_max_override; extern int kernel_load; extern int kernel_supports_setload; extern int kernel_supports_network; extern int kernel_supports_policydb; extern int kernel_supports_diff_encode; extern int kernel_supports_mount; extern int kernel_supports_dbus; extern int kernel_supports_signal; extern int kernel_supports_ptrace; extern int kernel_supports_unix; extern int kernel_supports_stacking; extern int conf_verbose; extern int conf_quiet; extern int names_only; extern int option; extern int current_lineno; extern dfaflags_t dfaflags; extern const char *progname; extern char *profilename; extern char *profile_ns; extern char *current_filename; extern FILE *ofile; extern int read_implies_exec; extern void pwarn(const char *fmt, ...) __attribute__((__format__(__printf__, 1, 2))); /* from parser_main (cannot be used in tst builds) */ extern int force_complain; extern void display_version(void); extern int show_cache; extern int skip_cache; extern int skip_read_cache; extern int write_cache; extern int cond_clear_cache; extern int force_clear_cache; extern int create_cache_dir; extern int preprocess_only; extern int skip_mode_force; extern int abort_on_error; extern int skip_bad_cache_rebuild; extern int mru_skip_cache; extern int debug_cache; /* provided by parser_lex.l (cannot be used in tst builds) */ extern FILE *yyin; extern void yyrestart(FILE *fp); extern int yyparse(void); extern void yyerror(const char *msg, ...); extern int yylex(void); /* parser_include.c */ extern const char *basedir; /* parser_regex.c */ #define default_match_pattern "[^\\000]*" #define anyone_match_pattern "[^\\000]+" #define glob_default 0 #define glob_null 1 extern pattern_t convert_aaregex_to_pcre(const char *aare, int anchor, int glob, std::string& pcre, int *first_re_pos); extern int build_list_val_expr(std::string& buffer, struct value_list *list); extern int convert_entry(std::string& buffer, char *entry); extern int clear_and_convert_entry(std::string& buffer, char *entry); extern int process_regex(Profile *prof); extern int post_process_entry(struct cod_entry *entry); extern int process_policydb(Profile *prof); extern int process_policy_ents(Profile *prof); /* parser_variable.c */ int expand_entry_variables(char **name); extern int process_variables(Profile *prof); extern struct var_string *split_out_var(const char *string); extern void free_var_string(struct var_string *var); /* parser_misc.c */ extern void warn_uppercase(void); extern int is_blacklisted(const char *name, const char *path); extern struct value_list *new_value_list(char *value); extern struct value_list *dup_value_list(struct value_list *list); extern void free_value_list(struct value_list *list); extern void print_value_list(struct value_list *list); extern struct cond_entry *new_cond_entry(char *name, int eq, struct value_list *list); extern void move_conditional_value(const char *rulename, char **dst_ptr, struct cond_entry *cond_ent); extern void free_cond_entry(struct cond_entry *ent); extern void free_cond_list(struct cond_entry *ents); extern void print_cond_entry(struct cond_entry *ent); extern char *processid(const char *string, int len); extern char *processquoted(const char *string, int len); extern char *processunquoted(const char *string, int len); extern int get_keyword_token(const char *keyword); extern int name_to_capability(const char *keyword); extern int get_rlimit(const char *name); extern char *process_var(const char *var); extern int parse_mode(const char *mode); extern int parse_X_mode(const char *X, int valid, const char *str_mode, int *mode, int fail); bool label_contains_ns(const char *label); bool parse_label(bool *_stack, char **_ns, char **_name, const char *label, bool yyerr); extern struct cod_entry *new_entry(char *id, int mode, char *link_id); /* returns -1 if value != true or false, otherwise 0 == false, 1 == true */ extern int str_to_boolean(const char* str); extern struct cod_entry *copy_cod_entry(struct cod_entry *cod); extern void free_cod_entries(struct cod_entry *list); extern void __debug_capabilities(uint64_t capset, const char *name); void debug_cod_entries(struct cod_entry *list); #define SECONDS_P_MS (1000LL * 1000LL) long long convert_time_units(long long value, long long base, const char *units); /* parser_symtab.c */ struct set_value { char *val; struct set_value *next; }; extern int add_boolean_var(const char *var, int boolean); extern int get_boolean_var(const char *var); extern int new_set_var(const char *var, const char *value); extern int add_set_value(const char *var, const char *value); extern struct set_value *get_set_var(const char *var); extern char *get_next_set_value(struct set_value **context); extern int delete_set_var(const char *var_name); extern void dump_symtab(void); extern void dump_expanded_symtab(void); void free_symtabs(void); /* parser_alias.c */ extern int new_alias(const char *from, const char *to); extern int replace_profile_aliases(Profile *prof); extern void free_aliases(void); /* parser_merge.c */ extern int profile_merge_rules(Profile *prof); /* parser_interface.c */ extern int load_profile(int option, aa_kernel_interface *kernel_interface, Profile *prof, int cache_fd); extern void sd_serialize_profile(std::ostringstream &buf, Profile *prof, int flatten); extern int sd_load_buffer(int option, char *buffer, int size); extern int cache_fd; /* parser_policy.c */ extern void add_to_list(Profile *profile); extern void add_hat_to_policy(Profile *policy, Profile *hat); extern int add_entry_to_x_table(Profile *prof, char *name); extern void add_entry_to_policy(Profile *policy, struct cod_entry *entry); extern void post_process_file_entries(Profile *prof); extern void post_process_rule_entries(Profile *prof); extern int post_process_policy(int debug_only); extern int process_profile_regex(Profile *prof); extern int process_profile_variables(Profile *prof); extern int process_profile_policydb(Profile *prof); extern int post_merge_rules(void); extern int merge_hat_rules(Profile *prof); extern Profile *merge_policy(Profile *a, Profile *b); extern int load_policy(int option, aa_kernel_interface *kernel_interface, int cache_fd); extern int load_hats(std::ostringstream &buf, Profile *prof); extern int load_flattened_hats(Profile *prof, int option, aa_kernel_interface *kernel_interface, int cache_fd); extern void dump_policy_hats(Profile *prof); extern void dump_policy_names(void); void dump_policy(void); void free_policies(void); #endif /** __AA_PARSER_H */ apparmor-2.11.0/parser/dbus.h0000644000175000017500000000322312413327176013614 0ustar jjjj/* * Copyright (c) 2013 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_DBUS_H #define __AA_DBUS_H #include "parser.h" #include "rule.h" #include "profile.h" extern int parse_dbus_mode(const char *str_mode, int *mode, int fail); class dbus_rule: public rule_t { void move_conditionals(struct cond_entry *conds); public: char *bus; /** * Be careful! ->name can be the subject or the peer name, depending on * whether the rule is a bind rule or a send/receive rule. See the * comments in new_dbus_entry() for details. */ char *name; char *peer_label; char *path; char *interface; char *member; int mode; int audit; int deny; dbus_rule(int mode_p, struct cond_entry *conds, struct cond_entry *peer_conds); virtual ~dbus_rule() { free(bus); free(name); free(peer_label); free(path); free(interface); free(member); }; virtual ostream &dump(ostream &os); virtual int expand_variables(void); virtual int gen_policy_re(Profile &prof); virtual void post_process(Profile &prof unused) { }; }; #endif /* __AA_DBUS_H */ apparmor-2.11.0/parser/ptrace.h0000644000175000017500000000276712413327176014151 0ustar jjjj/* * Copyright (c) 2014 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_PTRACE_H #define __AA_PTRACE_H #include "immunix.h" #include "parser.h" #define AA_MAY_TRACE AA_MAY_WRITE #define AA_MAY_READBY 0x10 /* MAY_CREATE in new encoding */ #define AA_MAY_TRACEDBY AA_MAY_APPEND #define AA_VALID_PTRACE_PERMS (AA_MAY_READ | AA_MAY_TRACE | AA_MAY_READBY | \ AA_MAY_TRACEDBY) int parse_ptrace_mode(const char *str_mode, int *mode, int fail); class ptrace_rule: public rule_t { void move_conditionals(struct cond_entry *conds); public: char *peer_label; int mode; int audit; int deny; ptrace_rule(int mode, struct cond_entry *conds); virtual ~ptrace_rule() { free(peer_label); }; virtual ostream &dump(ostream &os); virtual int expand_variables(void); virtual int gen_policy_re(Profile &prof); virtual void post_process(Profile &prof unused) { }; }; #endif /* __AA_PTRACE_H */ apparmor-2.11.0/parser/signal.cc0000644000175000017500000001500512467167244014302 0ustar jjjj/* * Copyright (c) 2014 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #include #include #include #include #include #include #include #include #include "parser.h" #include "profile.h" #include "parser_yacc.h" #include "signal.h" #define MAXMAPPED_SIG 35 #define MINRT_SIG 128 /* base of RT sigs */ #define MAXRT_SIG 32 /* Max RT above MINRT_SIG */ /* Signal names mapped to and internal ordering */ static struct signal_map { const char *name; int num; } signal_map[] = { {"hup", 1}, {"int", 2}, {"quit", 3}, {"ill", 4}, {"trap", 5}, {"abrt", 6}, {"bus", 7}, {"fpe", 8}, {"kill", 9}, {"usr1", 10}, {"segv", 11}, {"usr2", 12}, {"pipe", 13}, {"alrm", 14}, {"term", 15}, {"stkflt", 16}, {"chld", 17}, {"cont", 18}, {"stop", 19}, {"stp", 20}, {"ttin", 21}, {"ttou", 22}, {"urg", 23}, {"xcpu", 24}, {"xfsz", 25}, {"vtalrm", 26}, {"prof", 27}, {"winch", 28}, {"io", 29}, {"pwr", 30}, {"sys", 31}, {"emt", 32}, {"exists", 35}, /* terminate */ {NULL, 0} }; /* this table is ordered post sig_map[sig] mapping */ static const char *const sig_names[MAXMAPPED_SIG + 1] = { "unknown", "hup", "int", "quit", "ill", "trap", "abrt", "bus", "fpe", "kill", "usr1", "segv", "usr2", "pipe", "alrm", "term", "stkflt", "chld", "cont", "stop", "stp", "ttin", "ttou", "urg", "xcpu", "xfsz", "vtalrm", "prof", "winch", "io", "pwr", "sys", "emt", "lost", "unused", "exists", /* always last existance test mapped to MAXMAPPED_SIG */ }; int parse_signal_mode(const char *str_mode, int *mode, int fail) { return parse_X_mode("signal", AA_VALID_SIGNAL_PERMS, str_mode, mode, fail); } static int find_signal_mapping(const char *sig) { if (strncmp("rtmin+", sig, 6) == 0) { char *end; unsigned long n = strtoul(sig + 6, &end, 10); if (end == sig || n > MAXRT_SIG) return -1; return MINRT_SIG + n; } else { for (int i = 0; signal_map[i].name; i++) { if (strcmp(sig, signal_map[i].name) == 0) return signal_map[i].num; } } return -1; } void signal_rule::extract_sigs(struct value_list **list) { struct value_list *entry, *tmp, *prev = NULL; list_for_each_safe(*list, entry, tmp) { int i = find_signal_mapping(entry->value); if (i != -1) { signals.insert(i); list_remove_at(*list, prev, entry); free_value_list(entry); } else { yyerror("unknown signal \"%s\"\n", entry->value); prev = entry; } } } void signal_rule::move_conditionals(struct cond_entry *conds) { struct cond_entry *cond_ent; list_for_each(conds, cond_ent) { /* for now disallow keyword 'in' (list) */ if (!cond_ent->eq) yyerror("keyword \"in\" is not allowed in signal rules\n"); if (strcmp(cond_ent->name, "set") == 0) { extract_sigs(&cond_ent->vals); } else if (strcmp(cond_ent->name, "peer") == 0) { move_conditional_value("signal", &peer_label, cond_ent); } else { yyerror("invalid signal rule conditional \"%s\"\n", cond_ent->name); } } } signal_rule::signal_rule(int mode_p, struct cond_entry *conds): signals(), peer_label(NULL), audit(0), deny(0) { if (mode_p) { mode = mode_p; if (mode & ~AA_VALID_SIGNAL_PERMS) yyerror("mode contains invalid permission for signals\n"); } else { mode = AA_VALID_SIGNAL_PERMS; } move_conditionals(conds); free_cond_list(conds); } ostream &signal_rule::dump(ostream &os) { if (audit) os << "audit "; if (deny) os << "deny "; os << "signal"; if (mode != AA_VALID_SIGNAL_PERMS) { os << " ("; if (mode & AA_MAY_SEND) os << "send "; if (mode & AA_MAY_RECEIVE) os << "receive "; os << ")"; } if (!signals.empty()) { os << " set=("; for (Signals::iterator i = signals.begin(); i != signals.end(); i++) { if (i != signals.begin()) os << ", "; if (*i < MINRT_SIG) os << sig_names[*i]; else os << "rtmin+" << (*i - MINRT_SIG); } os << ")"; } if (peer_label) os << " " << peer_label; os << ",\n"; return os; } int signal_rule::expand_variables(void) { return expand_entry_variables(&peer_label); } /* do we want to warn once/profile or just once per compile?? */ static void warn_once(const char *name) { static const char *warned_name = NULL; if ((warnflags & WARN_RULE_NOT_ENFORCED) && warned_name != name) { cerr << "Warning from profile " << name << " ("; if (current_filename) cerr << current_filename; else cerr << "stdin"; cerr << ") signal rules not enforced\n"; warned_name = name; } } int signal_rule::gen_policy_re(Profile &prof) { std::ostringstream buffer; std::string buf; pattern_t ptype; int pos; /* Currently do not generate the rules if the kernel doesn't support * it. We may want to switch this so that a compile could be * used for full support on kernels that don't support the feature */ if (!kernel_supports_signal) { warn_once(prof.name); return RULE_NOT_SUPPORTED; } if (signals.size() == 0) { /* not conditional on signal set, so will generate a label * rule as well */ buffer << "(" << "\\x" << std::setfill('0') << std::setw(2) << std::hex << AA_CLASS_LABEL << "\\x" << AA_CLASS_SIGNAL << "|"; } buffer << "\\x" << std::setfill('0') << std::setw(2) << std::hex << AA_CLASS_SIGNAL; if (signals.size()) { buffer << "["; for (Signals::iterator i = signals.begin(); i != signals.end(); i++) { buffer << "\\x" << std::setfill('0') << std::setw(2) << std::hex << *i; } buffer << "]"; } else { /* match any char */ buffer << "."; } if (signals.size() == 0) { /* close alternation */ buffer << ")"; } if (peer_label) { ptype = convert_aaregex_to_pcre(peer_label, 0, glob_default, buf, &pos); if (ptype == ePatternInvalid) goto fail; buffer << buf; } else { buffer << anyone_match_pattern; } buf = buffer.str(); if (mode & (AA_MAY_SEND | AA_MAY_RECEIVE)) { if (!prof.policy.rules->add_rule(buf.c_str(), deny, mode, audit, dfaflags)) goto fail; } return RULE_OK; fail: return RULE_ERROR; } apparmor-2.11.0/parser/tst/0000755000175000017500000000000013034613166013315 5ustar jjjjapparmor-2.11.0/parser/tst/Makefile0000644000175000017500000000377412506466405014775 0ustar jjjj# PROVE=/usr/bin/prove TESTS=simple.pl PARSER_DIR=.. PARSER_BIN=apparmor_parser PARSER=$(PARSER_DIR)/$(PARSER_BIN) PROVE_ARG=-f ifeq ($(VERBOSE),1) PROVE_ARG+=-v PYTEST_ARG = -v else VERBOSE= endif all: tests .PHONY: tests error_output gen_dbus gen_xtrans parser_sanity caching minimize equality valgrind tests: error_output caching minimize equality parser_sanity GEN_TRANS_DIRS=simple_tests/generated_x/ simple_tests/generated_perms_leading/ simple_tests/generated_perms_safe/ simple_tests/generated_dbus gen_xtrans: $(GEN_TRANS_DIRS) ./gen-xtrans.pl $(GEN_TRANS_DIRS): mkdir $@ gen_dbus: $(GEN_TRANS_DIRS) ./gen-dbus.pl error_output: $(PARSER) LANG=C $(PARSER) -S -I errors >/dev/null errors/okay.sd LANG=C $(PARSER) -S -I errors 2>&1 >/dev/null errors/single.sd | \ grep -q "AppArmor parser error for errors/single.sd in errors/single.sd at line 3: Could not open 'failure'" LANG=C $(PARSER) -S -I errors 2>&1 >/dev/null errors/double.sd | \ grep -q "AppArmor parser error for errors/double.sd in errors/includes/busted at line 66: Could not open 'does-not-exist'" LANG=C $(PARSER) -S -I errors 2>&1 >/dev/null errors/modefail.sd | \ grep -q "AppArmor parser error for errors/modefail.sd in errors/modefail.sd at line 6: syntax error" LANG=C $(PARSER) -S -I errors 2>&1 >/dev/null errors/multi_include.sd | \ grep -q "AppArmor parser error for errors/multi_include.sd in errors/multi_include.sd at line 12: Could not open 'failure'" @echo "Error Output: PASS" parser_sanity: $(PARSER) gen_xtrans gen_dbus $(Q)LANG=C APPARMOR_PARSER="$(PARSER)" ${PROVE} ${PROVE_ARG} ${TESTS} caching: $(PARSER) LANG=C ./caching.py -p "$(PARSER)" $(PYTEST_ARG) minimize: $(PARSER) LANG=C APPARMOR_PARSER="$(PARSER)" ./minimize.sh equality: $(PARSER) LANG=C APPARMOR_PARSER="$(PARSER)" ./equality.sh valgrind: $(PARSER) gen_xtrans gen_dbus LANG=C ./valgrind_simple.py -p "$(PARSER)" -v simple_tests $(PARSER): make -C $(PARSER_DIR) $(PARSER_BIN) clean: find $(GEN_TRANS_DIRS) -type f | xargs rm -f rm -f gmon.out apparmor-2.11.0/parser/tst/valgrind_simple.py0000755000175000017500000001064512502532154017053 0ustar jjjj#!/usr/bin/env python3 # ------------------------------------------------------------------ # # Copyright (C) 2013 Canonical Ltd. # Author: Steve Beattie # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ # TODO # - finish adding suppressions for valgrind false positives from argparse import ArgumentParser # requires python 2.7 or newer import os import sys import tempfile import unittest import testlib DEFAULT_TESTDIR = "./simple_tests/vars" VALGRIND_ERROR_CODE = 151 VALGRIND_ARGS = ['--leak-check=full', '--error-exitcode=%d' % (VALGRIND_ERROR_CODE)] VALGRIND_SUPPRESSIONS = ''' { valgrind-serialize_profile-obsessive-overreads Memcheck:Addr4 fun:_Z*sd_serialize_profile* ... fun:_Z*__sd_serialize_profile* fun:_Z*load_profile* fun:_Z*load_policy_list* }''' class AAParserValgrindTests(testlib.AATestTemplate): def setUp(self): # REPORT ALL THE OUTPUT self.maxDiff = None def _runtest(self, testname, config): parser_args = ['-Q', '-I', config.testdir, '-M', './features_files/features.all'] failure_rc = [VALGRIND_ERROR_CODE, testlib.TIMEOUT_ERROR_CODE] command = [config.valgrind] command.extend(VALGRIND_ARGS) command.append(config.parser) command.extend(parser_args) command.append(testname) rc, output = self.run_cmd(command, timeout=120) self.assertNotIn(rc, failure_rc, "valgrind returned error code %d, gave the following output\n%s\ncommand run: %s" % (rc, output, " ".join(command))) def find_testcases(testdir): '''dig testcases out of passed directory''' for (fdir, direntries, files) in os.walk(testdir): for f in files: if f.endswith(".sd"): yield os.path.join(fdir, f) def create_suppressions(): '''generate valgrind suppressions file''' handle, name = tempfile.mkstemp(suffix='.suppressions', prefix='aa-parser-valgrind') os.close(handle) handle = open(name,"w+") handle.write(VALGRIND_SUPPRESSIONS) handle.close() return name def main(): rc = 0 p = ArgumentParser() p.add_argument('-p', '--parser', default=testlib.DEFAULT_PARSER, action="store", dest='parser', help="Specify path of apparmor parser to use [default = %(default)s]") p.add_argument('-v', '--verbose', action="store_true", dest="verbose") p.add_argument('-V', '--valgrind', default='/usr/bin/valgrind', action="store", dest="valgrind", help="Specify path of valgrind to use [default = %(default)s]") p.add_argument('-s', '--skip-suppressions', action="store_true", dest="skip_suppressions", help="Don't use valgrind suppressions to skip false positives") p.add_argument('--dump-suppressions', action="store_true", dest="dump_suppressions", help="Dump valgrind suppressions to stdout") p.add_argument('testdir', action="store", default=DEFAULT_TESTDIR, nargs='?', metavar='dir', help="run tests on alternate directory [default = %(default)s]") config = p.parse_args() if config.dump_suppressions: print(VALGRIND_SUPPRESSIONS) return rc if not os.path.exists(config.valgrind): print("Unable to find valgrind at '%s', ensure that it is installed" % (config.valgrind), file=sys.stderr) exit(1) verbosity = 1 if config.verbose: verbosity = 2 if not config.skip_suppressions: suppression_file = create_suppressions() VALGRIND_ARGS.append('--suppressions=%s' % (suppression_file)) for f in find_testcases(config.testdir): def stub_test(self, testname=f): self._runtest(testname, config) stub_test.__doc__ = "test %s" % (f) setattr(AAParserValgrindTests, 'test_%s' % (f), stub_test) test_suite = unittest.TestSuite() test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserValgrindTests)) try: result = unittest.TextTestRunner(verbosity=verbosity).run(test_suite) if not result.wasSuccessful(): rc = 1 except: rc = 1 finally: os.remove(suppression_file) return rc if __name__ == "__main__": rc = main() exit(rc) apparmor-2.11.0/parser/tst/mk_features_file.py0000755000175000017500000000214012326261256017175 0ustar jjjj#!/usr/bin/env python3 # ------------------------------------------------------------------ # # Copyright (C) 2014 Canonical Ltd. # Author: Steve Beattie # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ from testlib import read_features_dir from argparse import ArgumentParser import os from sys import stderr, exit DEFAULT_FEATURES_DIR='/sys/kernel/security/apparmor/features' def main(): p = ArgumentParser() p.add_argument('fdir', action="store", nargs='?', metavar="features_dir", default=DEFAULT_FEATURES_DIR, help="path to features directory") config = p.parse_args() if not os.path.exists(config.fdir): print('Unable to find apparmor features directory "%s"' % config.fdir, file=stderr) return 1 features = read_features_dir(config.fdir) print(features) return 0 if __name__ == "__main__": exit(main()) apparmor-2.11.0/parser/tst/testlib.py0000644000175000017500000001461112564653131015343 0ustar jjjj#!/usr/bin/env python3 # ------------------------------------------------------------------ # # Copyright (C) 2013 Canonical Ltd. # Author: Steve Beattie # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ import os import shutil import signal import subprocess import tempfile import time import unittest TIMEOUT_ERROR_CODE = 152 DEFAULT_PARSER = '../apparmor_parser' # http://www.chiark.greenend.org.uk/ucgi/~cjwatson/blosxom/2009-07-02-python-sigpipe.html # This is needed so that the subprocesses that produce endless output # actually quit when the reader goes away. def subprocess_setup(): # Python installs a SIGPIPE handler by default. This is usually not # what non-Python subprocesses expect. signal.signal(signal.SIGPIPE, signal.SIG_DFL) class AANoCleanupMetaClass(type): def __new__(cls, name, bases, attrs): for attr_name, attr_value in attrs.items(): if attr_name.startswith("test_"): attrs[attr_name] = cls.keep_on_fail(attr_value) return super(AANoCleanupMetaClass, cls).__new__(cls, name, bases, attrs) @classmethod def keep_on_fail(cls, unittest_func): '''wrapping function for unittest testcases to detect failure and leave behind test files in tearDown(); to be used as a decorator''' def new_unittest_func(self): try: return unittest_func(self) except unittest.SkipTest: raise except Exception: self.do_cleanup = False raise return new_unittest_func class AATestTemplate(unittest.TestCase, metaclass=AANoCleanupMetaClass): '''Stub class for use by test scripts''' debug = False do_cleanup = True def run_cmd_check(self, command, input=None, stderr=subprocess.STDOUT, stdout=subprocess.PIPE, stdin=None, timeout=120, expected_rc=0, expected_string=None): '''Wrapper around run_cmd that checks the rc code against expected_rc and for expected strings in the output if passed. The valgrind tests generally don't care what the rc is as long as it's not a specific set of return codes, so can't push the check directly into run_cmd().''' rc, report = self.run_cmd(command, input, stderr, stdout, stdin, timeout) self.assertEqual(rc, expected_rc, "Got return code %d, expected %d\nCommand run: %s\nOutput: %s" % (rc, expected_rc, (' '.join(command)), report)) if expected_string: self.assertIn(expected_string, report, 'Expected message "%s", got: \n%s' % (expected_string, report)) return report def run_cmd(self, command, input=None, stderr=subprocess.STDOUT, stdout=subprocess.PIPE, stdin=None, timeout=120): '''Try to execute given command (array) and return its stdout, or return a textual error if it failed.''' if self.debug: print('\n===> Running command: \'%s\'' % (' '.join(command))) try: sp = subprocess.Popen(command, stdin=stdin, stdout=stdout, stderr=stderr, close_fds=True, preexec_fn=subprocess_setup) except OSError as e: return [127, str(e)] timeout_communicate = TimeoutFunction(sp.communicate, timeout) out, outerr = (None, None) try: out, outerr = timeout_communicate(input) rc = sp.returncode except TimeoutFunctionException as e: sp.terminate() outerr = b'test timed out, killed' rc = TIMEOUT_ERROR_CODE # Handle redirection of stdout if out is None: out = b'' # Handle redirection of stderr if outerr is None: outerr = b'' report = out.decode('utf-8') + outerr.decode('utf-8') return [rc, report] # Timeout handler using alarm() from John P. Speno's Pythonic Avocado class TimeoutFunctionException(Exception): """Exception to raise on a timeout""" pass class TimeoutFunction: def __init__(self, function, timeout): self.timeout = timeout self.function = function def handle_timeout(self, signum, frame): raise TimeoutFunctionException() def __call__(self, *args, **kwargs): old = signal.signal(signal.SIGALRM, self.handle_timeout) signal.alarm(self.timeout) try: result = self.function(*args, **kwargs) finally: signal.signal(signal.SIGALRM, old) signal.alarm(0) return result def filesystem_time_resolution(): '''detect whether the filesystem stores subsecond timestamps''' default_diff = 0.1 result = (True, default_diff) tmp_dir = tempfile.mkdtemp(prefix='aa-caching-nanostamp-') try: last_stamp = None for i in range(10): s = None with open(os.path.join(tmp_dir, 'test.%d' % i), 'w+') as f: s = os.fstat(f.fileno()) if (s.st_mtime == last_stamp): print('\n===> WARNING: TMPDIR lacks subsecond timestamp resolution, falling back to slower test') result = (False, 1.0) break last_stamp = s.st_mtime time.sleep(default_diff) except: pass finally: if os.path.exists(tmp_dir): shutil.rmtree(tmp_dir) return result def read_features_dir(path): result = '' if not os.path.exists(path) or not os.path.isdir(path): return result for name in os.listdir(path): entry = os.path.join(path, name) result += '%s {' % name if os.path.isfile(entry): with open(entry, 'r') as f: # don't need extra '\n' here as features file contains it result += '%s' % (f.read()) elif os.path.isdir(entry): result += '%s' % (read_features_dir(entry)) result += '}\n' return result def touch(path): return os.utime(path, None) def write_file(directory, file, contents): '''construct path, write contents to it, and return the constructed path''' path = os.path.join(directory, file) with open(path, 'w+') as f: f.write(contents) return path apparmor-2.11.0/parser/tst/errors/0000755000175000017500000000000013034613162014625 5ustar jjjjapparmor-2.11.0/parser/tst/errors/double.sd0000644000175000017500000000011611402326300016415 0ustar jjjj# /does/not/exist { #include #include } apparmor-2.11.0/parser/tst/errors/multi_include.sd0000644000175000017500000000025611411203364020011 0ustar jjjj# # # /does/not/exist { #include #include #include #include /bin/true rix, #include } apparmor-2.11.0/parser/tst/errors/single.sd0000644000175000017500000000011011402326300016416 0ustar jjjj# # #include # /does/not/exist { #include } apparmor-2.11.0/parser/tst/errors/modefail.sd0000644000175000017500000000012711411203364016731 0ustar jjjj# 1 # 2 # 3 /does/not/exist { # 4 /lib/lib*.so rm, # 5 /fail abcdefgh, # 6 } # 7 apparmor-2.11.0/parser/tst/errors/includes/0000755000175000017500000000000013034613162016433 5ustar jjjjapparmor-2.11.0/parser/tst/errors/includes/busted0000644000175000017500000000571511503736226017662 0ustar jjjj# ------------------------------------------------------------------ # # Copyright (C) 2002-2005 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ # (Note that the ldd profile has inlined this file; if you make # modifications here, please consider including them in the ldd # profile as well.) # The __canary_death_handler function writes a time-stamped log # message to /dev/log for logging by syslogd. So, /dev/log, timezones, # and localisations of date should be available EVERYWHERE, so # StackGuard, FormatGuard, etc., alerts can be properly logged. /dev/log w, /dev/urandom r, /etc/locale/** r, /etc/localtime r, /usr/share/locale/** r, /usr/share/zoneinfo/** r, /usr/lib64/locale/** r, /usr/lib64/gconv/*.so r, /usr/lib64/gconv/gconv-modules* r, /usr/lib/locale/** r, /usr/lib/gconv/*.so r, /usr/lib/gconv/gconv-modules* r, # used by glibc when binding to ephemeral ports /etc/bindresvport.blacklist r, # ld.so.cache and ld are used to load shared libraries; they are best # available everywhere /etc/ld.so.cache r, # 'px' requires a profile to be available for the transition to # function; without a loaded profile, the kernel will fail the exec. /lib/ld-*.so px, /lib64/ld-*.so px, /opt/*-linux-uclibc/lib/ld-uClibc*so* px, # we might as well allow everything to use common libraries /lib/lib*.so* r, /lib/tls/lib*.so* r, /lib/power4/lib*.so* r, /lib/power5/lib*.so* r, /lib/power5+/lib*.so* r, /lib64/power4/lib*.so* r, /lib64/power5/lib*.so* r, /lib64/power5+/lib*.so* r, /usr/lib/*.so* r, /usr/lib/tls/lib*.so* r, /usr/lib/power4/lib*.so* r, /usr/lib/power5/lib*.so* r, /usr/lib/power5+/lib*.so* r, /lib64/lib*.so* r, /lib64/tls/lib*.so* r, /usr/lib64/*.so* r, /usr/lib64/tls/lib*.so* r, #include # /dev/null is pretty harmless and frequently used /dev/null rw, # as is /dev/zero /dev/zero rw, # Sometimes used to determine kernel/user interfaces to use /proc/sys/kernel/version r, # Depending on which glibc routine uses this file, base may not be the # best place -- but many profiles require it, and it is quite harmless. /proc/sys/kernel/ngroups_max r, # glibc's sysconf(3) routine to determine free memory, etc /proc/meminfo r, /proc/stat r, /proc/cpuinfo r, apparmor-2.11.0/parser/tst/errors/includes/base0000644000175000017500000000566011503736226017305 0ustar jjjj# ------------------------------------------------------------------ # # Copyright (C) 2002-2005 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ # (Note that the ldd profile has inlined this file; if you make # modifications here, please consider including them in the ldd # profile as well.) # The __canary_death_handler function writes a time-stamped log # message to /dev/log for logging by syslogd. So, /dev/log, timezones, # and localisations of date should be available EVERYWHERE, so # StackGuard, FormatGuard, etc., alerts can be properly logged. /dev/log w, /dev/urandom r, /etc/locale/** r, /etc/localtime r, /usr/share/locale/** r, /usr/share/zoneinfo/** r, /usr/lib64/locale/** r, /usr/lib64/gconv/*.so r, /usr/lib64/gconv/gconv-modules* r, /usr/lib/locale/** r, /usr/lib/gconv/*.so r, /usr/lib/gconv/gconv-modules* r, # used by glibc when binding to ephemeral ports /etc/bindresvport.blacklist r, # ld.so.cache and ld are used to load shared libraries; they are best # available everywhere /etc/ld.so.cache r, # 'px' requires a profile to be available for the transition to # function; without a loaded profile, the kernel will fail the exec. /lib/ld-*.so px, /lib64/ld-*.so px, /opt/*-linux-uclibc/lib/ld-uClibc*so* px, # we might as well allow everything to use common libraries /lib/lib*.so* r, /lib/tls/lib*.so* r, /lib/power4/lib*.so* r, /lib/power5/lib*.so* r, /lib/power5+/lib*.so* r, /lib64/power4/lib*.so* r, /lib64/power5/lib*.so* r, /lib64/power5+/lib*.so* r, /usr/lib/*.so* r, /usr/lib/tls/lib*.so* r, /usr/lib/power4/lib*.so* r, /usr/lib/power5/lib*.so* r, /usr/lib/power5+/lib*.so* r, /lib64/lib*.so* r, /lib64/tls/lib*.so* r, /usr/lib64/*.so* r, /usr/lib64/tls/lib*.so* r, # /dev/null is pretty harmless and frequently used /dev/null rw, # as is /dev/zero /dev/zero rw, # Sometimes used to determine kernel/user interfaces to use /proc/sys/kernel/version r, # Depending on which glibc routine uses this file, base may not be the # best place -- but many profiles require it, and it is quite harmless. /proc/sys/kernel/ngroups_max r, # glibc's sysconf(3) routine to determine free memory, etc /proc/meminfo r, /proc/stat r, /proc/cpuinfo r, apparmor-2.11.0/parser/tst/errors/okay.sd0000644000175000017500000000006111402326300016105 0ustar jjjj# /does/not/exist { #include } apparmor-2.11.0/parser/tst/equality.sh0000755000175000017500000005323212724212206015511 0ustar jjjj#!/bin/bash # # Copyright (c) 2013 # Canonical, Ltd. (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Canonical Ltd. # # Tests for post-parser equality among multiple profiles. These tests are # useful to verify that keyword aliases, formatting differences, etc., all # result in the same parser output. set -o pipefail _SCRIPTDIR=$(dirname "${BASH_SOURCE[0]}" ) APPARMOR_PARSER="${APPARMOR_PARSER:-${_SCRIPTDIR}/../apparmor_parser}" fails=0 errors=0 verbose="${VERBOSE:-}" hash_binary_policy() { printf %s "$1" | ${APPARMOR_PARSER} --features-file ${_SCRIPTDIR}/features_files/features.all -qS 2>/dev/null| md5sum | cut -d ' ' -f 1 return $? } # verify_binary - compares the binary policy of multiple profiles # $1: Test type (equality or inequality) # $2: A short description of the test # $3: The known-good profile # $4..$n: The profiles to compare against $3 # # Upon failure/error, prints out the test description and profiles that failed # and increments $fails or $errors for each failure and error, respectively verify_binary() { local t=$1 local desc=$2 local good_profile=$3 local good_hash local ret=0 shift shift shift if [ "$t" != "equality" ] && [ "$t" != "inequality" ] then printf "\nERROR: Unknown test mode:\n%s\n\n" "$t" 1>&2 ((errors++)) return $((ret + 1)) fi if [ -n "$verbose" ] ; then printf "Binary %s %s" "$t" "$desc" ; fi good_hash=$(hash_binary_policy "$good_profile") if [ $? -ne 0 ] then if [ -z "$verbose" ] ; then printf "Binary %s %s" "$t" "$desc" ; fi printf "\nERROR: Error hashing the following \"known-good\" profile:\n%s\n\n" \ "$good_profile" 1>&2 ((errors++)) return $((ret + 1)) fi for profile in "$@" do hash=$(hash_binary_policy "$profile") if [ $? -ne 0 ] then if [ -z "$verbose" ] ; then printf "Binary %s %s" "$t" "$desc" ; fi printf "\nERROR: Error hashing the following profile:\n%s\n\n" \ "$profile" 1>&2 ((errors++)) ((ret++)) elif [ "$t" == "equality" ] && [ "$hash" != "$good_hash" ] then if [ -z "$verbose" ] ; then printf "Binary %s %s" "$t" "$desc" ; fi printf "\nFAIL: Hash values do not match\n" 2>&1 printf "known-good (%s) != profile-under-test (%s) for the following profile:\n%s\n\n" \ "$good_hash" "$hash" "$profile" 1>&2 ((fails++)) ((ret++)) elif [ "$t" == "inequality" ] && [ "$hash" == "$good_hash" ] then if [ -z "$verbose" ] ; then printf "Binary %s %s" "$t" "$desc" ; fi printf "\nFAIL: Hash values match\n" 2>&1 printf "known-good (%s) == profile-under-test (%s) for the following profile:\n%s\n\n" \ "$good_hash" "$hash" "$profile" 1>&2 ((fails++)) ((ret++)) fi done if [ $ret -eq 0 ] then if [ -z "$verbose" ] ; then printf "." else printf " ok\n" fi fi return $ret } verify_binary_equality() { verify_binary "equality" "$@" } verify_binary_inequality() { verify_binary "inequality" "$@" } printf "Equality Tests:\n" verify_binary_equality "dbus send" \ "/t { dbus send, }" \ "/t { dbus write, }" \ "/t { dbus w, }" verify_binary_equality "dbus receive" \ "/t { dbus receive, }" \ "/t { dbus read, }" \ "/t { dbus r, }" verify_binary_equality "dbus send + receive" \ "/t { dbus (send, receive), }" \ "/t { dbus (read, write), }" \ "/t { dbus (r, w), }" \ "/t { dbus (rw), }" \ "/t { dbus rw, }" \ verify_binary_equality "dbus all accesses" \ "/t { dbus (send, receive, bind, eavesdrop), }" \ "/t { dbus (read, write, bind, eavesdrop), }" \ "/t { dbus (r, w, bind, eavesdrop), }" \ "/t { dbus (rw, bind, eavesdrop), }" \ "/t { dbus (), }" \ "/t { dbus, }" \ verify_binary_equality "dbus implied accesses with a bus conditional" \ "/t { dbus (send, receive, bind, eavesdrop) bus=session, }" \ "/t { dbus (read, write, bind, eavesdrop) bus=session, }" \ "/t { dbus (r, w, bind, eavesdrop) bus=session, }" \ "/t { dbus (rw, bind, eavesdrop) bus=session, }" \ "/t { dbus () bus=session, }" \ "/t { dbus bus=session, }" \ verify_binary_equality "dbus implied accesses for services" \ "/t { dbus bind name=com.foo, }" \ "/t { dbus name=com.foo, }" verify_binary_equality "dbus implied accesses for messages" \ "/t { dbus (send, receive) path=/com/foo interface=org.foo, }" \ "/t { dbus path=/com/foo interface=org.foo, }" verify_binary_equality "dbus implied accesses for messages with peer names" \ "/t { dbus (send, receive) path=/com/foo interface=org.foo peer=(name=com.foo), }" \ "/t { dbus path=/com/foo interface=org.foo peer=(name=com.foo), }" \ "/t { dbus (send, receive) path=/com/foo interface=org.foo peer=(name=(com.foo)), }" \ "/t { dbus path=/com/foo interface=org.foo peer=(name=(com.foo)), }" verify_binary_equality "dbus implied accesses for messages with peer labels" \ "/t { dbus (send, receive) path=/com/foo interface=org.foo peer=(label=/usr/bin/app), }" \ "/t { dbus path=/com/foo interface=org.foo peer=(label=/usr/bin/app), }" verify_binary_equality "dbus element parsing" \ "/t { dbus bus=b path=/ interface=i member=m peer=(name=n label=l), }" \ "/t { dbus bus=\"b\" path=\"/\" interface=\"i\" member=\"m\" peer=(name=\"n\" label=\"l\"), }" \ "/t { dbus bus=(b) path=(/) interface=(i) member=(m) peer=(name=(n) label=(l)), }" \ "/t { dbus bus=(\"b\") path=(\"/\") interface=(\"i\") member=(\"m\") peer=(name=(\"n\") label=(\"l\")), }" \ "/t { dbus bus =b path =/ interface =i member =m peer =(name =n label =l), }" \ "/t { dbus bus= b path= / interface= i member= m peer= (name= n label= l), }" \ "/t { dbus bus = b path = / interface = i member = m peer = ( name = n label = l ), }" verify_binary_equality "dbus access parsing" \ "/t { dbus, }" \ "/t { dbus (), }" \ "/t { dbus (send, receive, bind, eavesdrop), }" \ "/t { dbus (send receive bind eavesdrop), }" \ "/t { dbus (send, receive bind, eavesdrop), }" \ "/t { dbus (send,receive,bind,eavesdrop), }" \ "/t { dbus (send,receive,,,,,,,,,,,,,,,,bind,eavesdrop), }" \ "/t { dbus (send,send,send,send send receive,bind eavesdrop), }" \ verify_binary_equality "dbus variable expansion" \ "/t { dbus (send, receive) path=/com/foo member=spork interface=org.foo peer=(name=com.foo label=/com/foo), }" \ "@{FOO}=foo /t { dbus (send, receive) path=/com/@{FOO} member=spork interface=org.@{FOO} peer=(name=com.@{FOO} label=/com/@{FOO}), }" \ "@{FOO}=foo @{SPORK}=spork /t { dbus (send, receive) path=/com/@{FOO} member=@{SPORK} interface=org.@{FOO} peer=(name=com.@{FOO} label=/com/@{FOO}), }" \ "@{FOO}=/com/foo /t { dbus (send, receive) path=@{FOO} member=spork interface=org.foo peer=(name=com.foo label=@{FOO}), }" \ "@{FOO}=com /t { dbus (send, receive) path=/@{FOO}/foo member=spork interface=org.foo peer=(name=@{FOO}.foo label=/@{FOO}/foo), }" verify_binary_equality "dbus variable expansion, multiple values/rules" \ "/t { dbus (send, receive) path=/com/foo, dbus (send, receive) path=/com/bar, }" \ "/t { dbus (send, receive) path=/com/{foo,bar}, }" \ "/t { dbus (send, receive) path={/com/foo,/com/bar}, }" \ "@{FOO}=foo /t { dbus (send, receive) path=/com/@{FOO}, dbus (send, receive) path=/com/bar, }" \ "@{FOO}=foo bar /t { dbus (send, receive) path=/com/@{FOO}, }" \ "@{FOO}=bar foo /t { dbus (send, receive) path=/com/@{FOO}, }" \ "@{FOO}={bar,foo} /t { dbus (send, receive) path=/com/@{FOO}, }" \ "@{FOO}=foo @{BAR}=bar /t { dbus (send, receive) path=/com/{@{FOO},@{BAR}}, }" \ verify_binary_equality "dbus variable expansion, ensure rule de-duping occurs" \ "/t { dbus (send, receive) path=/com/foo, dbus (send, receive) path=/com/bar, }" \ "/t { dbus (send, receive) path=/com/foo, dbus (send, receive) path=/com/bar, dbus (send, receive) path=/com/bar, }" \ "@{FOO}=bar foo bar foo /t { dbus (send, receive) path=/com/@{FOO}, }" \ "@{FOO}=bar foo bar foo /t { dbus (send, receive) path=/com/@{FOO}, dbus (send, receive) path=/com/@{FOO}, }" verify_binary_equality "dbus minimization with all perms" \ "/t { dbus, }" \ "/t { dbus bus=session, dbus, }" \ "/t { dbus (send, receive, bind, eavesdrop), dbus, }" verify_binary_equality "dbus minimization with bind" \ "/t { dbus bind, }" \ "/t { dbus bind bus=session, dbus bind, }" \ "/t { dbus bind bus=system name=com.foo, dbus bind, }" verify_binary_equality "dbus minimization with send and a bus conditional" \ "/t { dbus send bus=system, }" \ "/t { dbus send bus=system path=/com/foo interface=com.foo member=bar, dbus send bus=system, }" \ "/t { dbus send bus=system peer=(label=/usr/bin/foo), dbus send bus=system, }" verify_binary_equality "dbus minimization with an audit modifier" \ "/t { audit dbus eavesdrop, }" \ "/t { audit dbus eavesdrop bus=session, audit dbus eavesdrop, }" verify_binary_equality "dbus minimization with a deny modifier" \ "/t { deny dbus send bus=system peer=(name=com.foo), }" \ "/t { deny dbus send bus=system peer=(name=com.foo label=/usr/bin/foo), deny dbus send bus=system peer=(name=com.foo), }" \ verify_binary_equality "dbus minimization found in dbus abstractions" \ "/t { dbus send bus=session, }" \ "/t { dbus send bus=session path=/org/freedesktop/DBus interface=org.freedesktop.DBus member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName} peer=(name=org.freedesktop.DBus), dbus send bus=session, }" # Rules compatible with audit, deny, and audit deny # note: change_profile does not support audit/allow/deny atm for rule in "capability" "capability mac_admin" \ "network" "network tcp" "network inet6 tcp"\ "mount" "mount /a" "mount /a -> /b" "mount options in (ro) /a -> b" \ "remount" "remount /a" \ "umount" "umount /a" \ "pivot_root" "pivot_root /a" "pivot_root oldroot=/" \ "pivot_root oldroot=/ /a" "pivot_root oldroot=/ /a -> foo" \ "ptrace" "ptrace trace" "ptrace (readby,tracedby) peer=unconfined" \ "signal" "signal (send,receive)" "signal peer=unconfined" \ "signal receive set=(kill)" \ "dbus" "dbus send" "dbus bus=system" "dbus bind name=foo" \ "dbus peer=(label=foo)" "dbus eavesdrop" \ "unix" "unix (create, listen, accept)" "unix addr=@*" "unix addr=none" \ "unix peer=(label=foo)" \ "/f r" "/f w" "/f rwmlk" "/** r" "/**/ w" \ "file /f r" "file /f w" "file /f rwmlk" \ "link /a -> /b" "link subset /a -> /b" \ "l /a -> /b" "l subset /a -> /b" \ "file l /a -> /b" "l subset /a -> /b" do verify_binary_equality "allow modifier for \"${rule}\"" \ "/t { ${rule}, }" \ "/t { allow ${rule}, }" verify_binary_equality "audit allow modifier for \"${rule}\"" \ "/t { audit ${rule}, }" \ "/t { audit allow ${rule}, }" verify_binary_inequality "audit, deny, and audit deny modifiers for \"${rule}\"" \ "/t { ${rule}, }" \ "/t { audit ${rule}, }" \ "/t { audit allow ${rule}, }" \ "/t { deny ${rule}, }" \ "/t { audit deny ${rule}, }" verify_binary_inequality "audit vs deny and audit deny modifiers for \"${rule}\"" \ "/t { audit ${rule}, }" \ "/t { deny ${rule}, }" \ "/t { audit deny ${rule}, }" verify_binary_inequality "deny and audit deny modifiers for \"${rule}\"" \ "/t { deny ${rule}, }" \ "/t { audit deny ${rule}, }" done # Rules that need special treatment for the deny modifier for rule in "/f ux" "/f Ux" "/f px" "/f Px" "/f cx" "/f Cx" "/f ix" \ "/f pux" "/f Pux" "/f pix" "/f Pix" \ "/f cux" "/f Cux" "/f cix" "/f Cix" \ "/* ux" "/* Ux" "/* px" "/* Px" "/* cx" "/* Cx" "/* ix" \ "/* pux" "/* Pux" "/* pix" "/* Pix" \ "/* cux" "/* Cux" "/* cix" "/* Cix" \ "/f px -> b " "/f Px -> b" "/f cx -> b" "/f Cx -> b" \ "/f pux -> b" "/f Pux -> b" "/f pix -> b" "/f Pix -> b" \ "/f cux -> b" "/f Cux -> b" "/f cix -> b" "/f Cix -> b" \ "/* px -> b" "/* Px -> b" "/* cx -> b" "/* Cx -> b" \ "/* pux -> b" "/* Pux -> b" "/* pix -> b" "/* Pix -> b" \ "/* cux -> b" "/* Cux -> b" "/* cix -> b" "/* Cix -> b" \ "file /f ux" "file /f Ux" "file /f px" "file /f Px" \ "file /f cx" "file /f Cx" "file /f ix" \ "file /f pux" "file /f Pux" "file /f pix" "file /f Pix" \ "/f cux" "/f Cux" "/f cix" "/f Cix" \ "file /* ux" "file /* Ux" "file /* px" "file /* Px" \ "file /* cx" "file /* Cx" "file /* ix" \ "file /* pux" "file /* Pux" "file /* pix" "file /* Pix" \ "file /* cux" "file /* Cux" "file /* cix" "file /* Cix" \ "file /f px -> b " "file /f Px -> b" "file /f cx -> b" "file /f Cx -> b" \ "file /f pux -> b" "file /f Pux -> b" "file /f pix -> b" "file /f Pix -> b" \ "file /f cux -> b" "file /f Cux -> b" "file /f cix -> b" "file /f Cix -> b" \ "file /* px -> b" "file /* Px -> b" "file /* cx -> b" "file /* Cx -> b" \ "file /* pux -> b" "file /* Pux -> b" "file /* pix -> b" "file /* Pix -> b" \ "file /* cux -> b" "file /* Cux -> b" "file /* cix -> b" "file /* Cix -> b" do verify_binary_equality "allow modifier for \"${rule}\"" \ "/t { ${rule}, }" \ "/t { allow ${rule}, }" verify_binary_equality "audit allow modifier for \"${rule}\"" \ "/t { audit ${rule}, }" \ "/t { audit allow ${rule}, }" # skip rules that don't end with x perm if [ -n "${rule##*x}" ] ; then continue ; fi verify_binary_inequality "deny, audit deny modifier for \"${rule}\"" \ "/t { ${rule}, }" \ "/t { audit ${rule}, }" \ "/t { audit allow ${rule}, }" \ "/t { deny ${rule% *} x, }" \ "/t { audit deny ${rule% *} x, }" verify_binary_inequality "audit vs deny and audit deny modifiers for \"${rule}\"" \ "/t { audit ${rule}, }" \ "/t { deny ${rule% *} x, }" \ "/t { audit deny ${rule% *} x, }" done # verify deny and audit deny differ for x perms for prefix in "/f" "/*" "file /f" "file /*" ; do verify_binary_inequality "deny and audit deny x modifiers for \"${prefix}\"" \ "/t { deny ${prefix} x, }" \ "/t { audit deny ${prefix} x, }" done #Test equality of leading and trailing file permissions for audit in "" "audit" ; do for allow in "" "allow" "deny" ; do for owner in "" "owner" ; do for f in "" "file" ; do prefix="$audit $allow $owner $f" for perm in "r" "w" "a" "l" "k" "m" "rw" "ra" \ "rl" "rk" "rm" "wl" "wk" "wm" \ "rwl" "rwk" "rwm" "ral" "rak" \ "ram" "rlk" "rlm" "rkm" "wlk" \ "wlm" "wkm" "alk" "alm" "akm" \ "lkm" "rwlk" "rwlm" "rwkm" \ "ralk" "ralm" "wlkm" "alkm" \ "rwlkm" "ralkm" ; do verify_binary_equality "leading and trailing perms for \"${perm}\"" \ "/t { ${prefix} /f ${perm}, }" \ "/t { ${prefix} ${perm} /f, }" done if [ "$allow" == "deny" ] ; then continue ; fi for perm in "ux" "Ux" "px" "Px" "cx" "Cx" \ "ix" "pux" "Pux" "pix" "Pix" \ "cux" "Cux" "cix" "Cix" do verify_binary_equality "leading and trailing perms for \"${perm}\"" \ "/t { ${prefix} /f ${perm}, }" \ "/t { ${prefix} ${perm} /f, }" done for perm in "px" "Px" "cx" "Cx" \ "pux" "Pux" "pix" "Pix" \ "cux" "Cux" "cix" "Cix" do verify_binary_equality "leading and trailing perms for x-transition \"${perm}\"" \ "/t { ${prefix} /f ${perm} -> b, }" \ "/t { ${prefix} ${perm} /f -> b, }" done done done done done #Test rule overlap for x most specific match for perm1 in "ux" "Ux" "px" "Px" "cx" "Cx" "ix" "pux" "Pux" \ "pix" "Pix" "cux" "Cux" "cix" "Cix" "px -> b" \ "Px -> b" "cx -> b" "Cx -> b" "pux -> b" "Pux ->b" \ "pix -> b" "Pix -> b" "cux -> b" "Cux -> b" \ "cix -> b" "Cix -> b" do for perm2 in "ux" "Ux" "px" "Px" "cx" "Cx" "ix" "pux" "Pux" \ "pix" "Pix" "cux" "Cux" "cix" "Cix" "px -> b" \ "Px -> b" "cx -> b" "Cx -> b" "pux -> b" "Pux ->b" \ "pix -> b" "Pix -> b" "cux -> b" "Cux -> b" \ "cix -> b" "Cix -> b" do if [ "$perm1" == "$perm2" ] ; then verify_binary_equality "Exec perm \"${perm1}\" - most specific match: same as glob" \ "/t { /* ${perm1}, /f ${perm2}, }" \ "/t { /* ${perm1}, }" else verify_binary_inequality "Exec \"${perm1}\" vs \"${perm2}\" - most specific match: different from glob" \ "/t { /* ${perm1}, /f ${perm2}, }" \ "/t { /* ${perm1}, }" fi done verify_binary_inequality "Exec \"${perm1}\" vs deny x - most specific match: different from glob" \ "/t { /* ${perm1}, audit deny /f x, }" \ "/t { /* ${perm1}, }" done #Test deny carves out permission verify_binary_inequality "Deny removes r perm" \ "/t { /foo/[abc] r, audit deny /foo/b r, }" \ "/t { /foo/[abc] r, }" verify_binary_equality "Deny removes r perm" \ "/t { /foo/[abc] r, audit deny /foo/b r, }" \ "/t { /foo/[ac] r, }" #this one may not be true in the future depending on if the compiled profile #is explicitly including deny permissions for dynamic composition verify_binary_equality "Deny of ungranted perm" \ "/t { /foo/[abc] r, audit deny /foo/b w, }" \ "/t { /foo/[abc] r, }" verify_binary_equality "change_profile == change_profile -> **" \ "/t { change_profile, }" \ "/t { change_profile -> **, }" verify_binary_equality "change_profile /** == change_profile /** -> **" \ "/t { change_profile /**, }" \ "/t { change_profile /** -> **, }" verify_binary_equality "change_profile /** == change_profile /** -> **" \ "/t { change_profile unsafe /**, }" \ "/t { change_profile unsafe /** -> **, }" verify_binary_equality "change_profile /** == change_profile /** -> **" \ "/t { change_profile /**, }" \ "/t { change_profile safe /** -> **, }" verify_binary_inequality "change_profile /** == change_profile /** -> **" \ "/t { change_profile /**, }" \ "/t { change_profile unsafe /**, }" verify_binary_equality "profile name is hname in rule" \ ":ns:/hname { signal peer=/hname, }" \ ":ns:/hname { signal peer=@{profile_name}, }" verify_binary_inequality "profile name is NOT fq name in rule" \ ":ns:/hname { signal peer=:ns:/hname, }" \ ":ns:/hname { signal peer=@{profile_name}, }" verify_binary_equality "profile name is hname in sub pofile rule" \ ":ns:/hname { profile child { signal peer=/hname//child, } }" \ ":ns:/hname { profile child { signal peer=@{profile_name}, } }" verify_binary_inequality "profile name is NOT fq name in sub profile rule" \ ":ns:/hname { profile child { signal peer=:ns:/hname//child, } }" \ ":ns:/hname { profile child { signal peer=@{profile_name}, } }" verify_binary_equality "profile name is hname in hat rule" \ ":ns:/hname { ^child { signal peer=/hname//child, } }" \ ":ns:/hname { ^child { signal peer=@{profile_name}, } }" verify_binary_inequality "profile name is NOT fq name in hat rule" \ ":ns:/hname { ^child { signal peer=:ns:/hname//child, } }" \ ":ns:/hname { ^child { signal peer=@{profile_name}, } }" verify_binary_equality "@{profile_name} is literal in peer" \ "/{a,b} { signal peer=/\{a,b\}, }" \ "/{a,b} { signal peer=@{profile_name}, }" verify_binary_equality "@{profile_name} is literal in peer with pattern" \ "/{a,b} { signal peer={/\{a,b\},c}, }" \ "/{a,b} { signal peer={@{profile_name},c}, }" verify_binary_inequality "@{profile_name} is not pattern in peer" \ "/{a,b} { signal peer=/{a,b}, }" \ "/{a,b} { signal peer=@{profile_name}, }" verify_binary_equality "@{profile_name} is literal in peer with esc sequence" \ "/\\\\a { signal peer=/\\\\a, }" \ "/\\\\a { signal peer=@{profile_name}, }" verify_binary_equality "@{profile_name} is literal in peer with esc alt sequence" \ "/\\{a,b\\},c { signal peer=/\\{a,b\\},c, }" \ "/\\{a,b\\},c { signal peer=@{profile_name}, }" # verify rlimit data conversions verify_binary_equality "set rlimit rttime <= 12 weeks" \ "/t { set rlimit rttime <= 12 weeks, }" \ "/t { set rlimit rttime <= $((12 * 7)) days, }" \ "/t { set rlimit rttime <= $((12 * 7 * 24)) hours, }" \ "/t { set rlimit rttime <= $((12 * 7 * 24 * 60)) minutes, }" \ "/t { set rlimit rttime <= $((12 * 7 * 24 * 60 * 60)) seconds, }" \ "/t { set rlimit rttime <= $((12 * 7 * 24 * 60 * 60 * 1000)) ms, }" \ "/t { set rlimit rttime <= $((12 * 7 * 24 * 60 * 60 * 1000 * 1000)) us, }" \ "/t { set rlimit rttime <= $((12 * 7 * 24 * 60 * 60 * 1000 * 1000)), }" verify_binary_equality "set rlimit cpu <= 42 weeks" \ "/t { set rlimit cpu <= 42 weeks, }" \ "/t { set rlimit cpu <= $((42 * 7)) days, }" \ "/t { set rlimit cpu <= $((42 * 7 * 24)) hours, }" \ "/t { set rlimit cpu <= $((42 * 7 * 24 * 60)) minutes, }" \ "/t { set rlimit cpu <= $((42 * 7 * 24 * 60 * 60)) seconds, }" \ "/t { set rlimit cpu <= $((42 * 7 * 24 * 60 * 60)), }" verify_binary_equality "set rlimit memlock <= 2GB" \ "/t { set rlimit memlock <= 2GB, }" \ "/t { set rlimit memlock <= $((2 * 1024)) MB, }" \ "/t { set rlimit memlock <= $((2 * 1024 * 1024)) KB, }" \ "/t { set rlimit memlock <= $((2 * 1024 * 1024 * 1024)) , }" \ if [ $fails -ne 0 -o $errors -ne 0 ] then printf "ERRORS: %d\nFAILS: %d\n" $errors $fails 2>&1 exit $(($fails + $errors)) fi [ -z "${verbose}" ] && printf "\n" printf "PASS\n" exit 0 apparmor-2.11.0/parser/tst/simple.pl0000755000175000017500000001001212326261256015142 0ustar jjjj#!/usr/bin/perl -w # # A simple driver for testing the subdomain parser. # All files in $CWD named *.sd will be tested against the parser. # use strict; use Getopt::Long; use Test::More; my %config; $config{'parser'} = "/sbin/apparmor_parser"; $config{'profiledir'} = "./simple_tests/"; $config{'timeout'} = 120; # in seconds my $help; my $pwd = `pwd`; chomp($pwd); GetOptions( "help|h" => \$help, ); sub usage { print STDERR "Usage $0 profile_directory\n"; print STDERR "\tTests the subdomain parser on the given profile directory\n"; print STDOUT "Bail out! Got the usage statement\n"; exit 0; } &usage if ($help); read_config(); # let environment variable override config file, for use in automated # test suites if ($ENV{APPARMOR_PARSER}) { $config{'parser'} = $ENV{APPARMOR_PARSER}; } # Override config file profile location when passed on command line if (@ARGV >= 1) { $config{'profiledir'} = shift; } if ($config{'profiledir'} =~ /^\//) { $config{'includedir'} = $config{'profiledir'}; } else { $config{'includedir'} = "$pwd/$config{'profiledir'}"; } sub read_config { my $which; if(open(CONF, "uservars.conf")) { while() { chomp; next if /^\s*#/; if (m/^\s*(\S+)\s*=\s*(.+)\s*$/) { my ($key, $value) = ($1, $2); $config{$key} = $value; } } close(CONF); } } sub test_profile { my $profile = shift; my $description = "no description for testcase"; my $expass = 1; my $istodo = 0; my $isdisabled = 0; my $result = 1; my $signal = 0; my $coredump = 0; my $child; $child = open(PARSER, "|-"); if ($child == 0) { # child open(STDOUT, ">/dev/null") or die "Failed to redirect STDOUT"; open(STDERR, ">/dev/null") or die "Failed to redirect STDERR"; exec("$config{'parser'}", "-M", "features_files/features.all", "-S", "-I", "$config{'includedir'}") or die "Bail out! couldn't open parser"; # noreturn } # parent eval { local $SIG{ALRM} = sub { kill PIPE => $child; $description = "$description - TESTCASE TIMED OUT"; }; alarm $config{'timeout'}; open(PROFILE, $profile) or die "Bail out! couldn't open profile $profile"; while () { if (/^#=DESCRIPTION\s*(.*)/i) { $description = $1; } elsif (/^#=EXRESULT\s*(\w+)/) { if ($1 eq "PASS") { $expass = 1; } elsif ($1 eq "FAIL") { $expass = 0; } else { die "Bail out! unknown expected result '$1' in $profile"; } } elsif (/^#=TODO\s*/) { $istodo = 1; } elsif (/^#=DISABLED\s*/) { $isdisabled = 1; } else { print PARSER if not $isdisabled; } } close(PARSER) or ($! and die "Bail out! couldn't close parser pipe"); $result = $? >> 8; $signal = $? & 127; $coredump = $signal ? $? & 128 : 0; alarm 0; }; alarm 0; if ($isdisabled) { TODO: { local $TODO = "Disabled testcase."; ok(0, "TODO: $profile: $description"); } } elsif ($coredump) { ok(0, "$profile: Produced core dump (signal $signal): $description"); } elsif ($istodo) { TODO: { local $TODO = "Unfixed testcase."; ok($expass ? !$result : $result, "TODO: $profile: $description"); } } else { ok($expass ? !$result : $result, "$profile: $description"); } } sub find_all_tests { my $testdir = shift; opendir(DIR, $testdir) or die "Bail out! can't opendir $testdir: $!"; my @files = sort grep { /\.sd$/ && -f "$testdir/$_" } readdir(DIR); closedir(DIR); my @profiles; foreach my $profile (@files) { push (@profiles, "$testdir/$profile"); } opendir(DIR, $testdir) or die "Bail out! can't opendir $testdir: $!"; my @dirs = sort grep { /^[^\.]/ && -d "$testdir/$_" } readdir(DIR); closedir(DIR); foreach my $dir (@dirs) { push(@profiles, find_all_tests("$testdir/$dir")); } return @profiles; } my @profiles = find_all_tests($config{'profiledir'}); plan tests => scalar(@profiles); foreach my $profile (@profiles) { test_profile ("$profile"); } apparmor-2.11.0/parser/tst/caching.py0000755000175000017500000005173712567456106015314 0ustar jjjj#!/usr/bin/env python3 # ------------------------------------------------------------------ # # Copyright (C) 2013-2015 Canonical Ltd. # Authors: Steve Beattie # Tyler Hicks # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ # TODO # - check cache not used if parser in $PATH is newer # - check cache used for force-complain, disable symlink, etc. from argparse import ArgumentParser import os import platform import shutil import time import tempfile import unittest import testlib ABSTRACTION_CONTENTS = ''' # Simple example abstraction capability setuid, ''' ABSTRACTION = 'suid-abstraction' PROFILE_CONTENTS = ''' # Simple example profile for caching tests /bin/pingy { #include <%s> capability net_raw, network inet raw, /bin/ping mixr, /etc/modules.conf r, } ''' % (ABSTRACTION) PROFILE = 'sbin.pingy' config = None class AAParserCachingCommon(testlib.AATestTemplate): do_cleanup = True def setUp(self): '''setup for each test''' global config # REPORT ALL THE OUTPUT self.maxDiff = None self.tmp_dir = tempfile.mkdtemp(prefix='aa-caching-') os.chmod(self.tmp_dir, 0o755) # create directory for cached blobs self.cache_dir = os.path.join(self.tmp_dir, 'cache') os.mkdir(self.cache_dir) # default path of the output cache file self.cache_file = os.path.join(self.cache_dir, PROFILE) # write our sample abstraction and profile out self.abstraction = testlib.write_file(self.tmp_dir, ABSTRACTION, ABSTRACTION_CONTENTS) self.profile = testlib.write_file(self.tmp_dir, PROFILE, PROFILE_CONTENTS) if config.debug: self.do_cleanup = False self.debug = True self.cmd_prefix = [config.parser, '--base', self.tmp_dir, '--skip-kernel-load'] if not self.is_apparmorfs_mounted(): self.cmd_prefix += ['-M', './features_files/features.all'] def tearDown(self): '''teardown for each test''' if not self.do_cleanup: print("\n===> Skipping cleanup, leaving testfiles behind in '%s'" % (self.tmp_dir)) else: if os.path.exists(self.tmp_dir): shutil.rmtree(self.tmp_dir) def assert_path_exists(self, path, expected=True): if expected is True: self.assertTrue(os.path.exists(path), 'test did not create file %s, when it was expected to do so' % path) else: self.assertFalse(os.path.exists(path), 'test created file %s, when it was not expected to do so' % path) def is_apparmorfs_mounted(self): return os.path.exists("/sys/kernel/security/apparmor") def require_apparmorfs(self): # skip the test if apparmor securityfs isn't mounted if not self.is_apparmorfs_mounted(): raise unittest.SkipTest("WARNING: /sys/kernel/security/apparmor does not exist. Skipping test.") def compare_features_file(self, features_path, expected=True): # tests that need this function should call require_apparmorfs() early # compare features contents expected_output = testlib.read_features_dir('/sys/kernel/security/apparmor/features') with open(features_path) as f: features = f.read() if expected: self.assertEquals(expected_output, features, "features contents differ, expected:\n%s\nresult:\n%s" % (expected_output, features)) else: self.assertNotEquals(expected_output, features, "features contents equal, expected:\n%s\nresult:\n%s" % (expected_output, features)) class AAParserBasicCachingTests(AAParserCachingCommon): def setUp(self): super(AAParserBasicCachingTests, self).setUp() def test_no_cache_by_default(self): '''test profiles are not cached by default''' cmd = list(self.cmd_prefix) cmd.extend(['-q', '-r', self.profile]) self.run_cmd_check(cmd) self.assert_path_exists(os.path.join(self.cache_dir, PROFILE), expected=False) def test_no_cache_w_skip_cache(self): '''test profiles are not cached with --skip-cache''' cmd = list(self.cmd_prefix) cmd.extend(['-q', '--write-cache', '--skip-cache', '-r', self.profile]) self.run_cmd_check(cmd) self.assert_path_exists(os.path.join(self.cache_dir, PROFILE), expected=False) def test_cache_when_requested(self): '''test profiles are cached when requested''' cmd = list(self.cmd_prefix) cmd.extend(['-q', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd) self.assert_path_exists(os.path.join(self.cache_dir, PROFILE)) def test_write_features_when_caching(self): '''test features file is written when caching''' cmd = list(self.cmd_prefix) cmd.extend(['-q', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd) self.assert_path_exists(os.path.join(self.cache_dir, PROFILE)) self.assert_path_exists(os.path.join(self.cache_dir, '.features')) def test_features_match_when_caching(self): '''test features file is written when caching''' self.require_apparmorfs() cmd = list(self.cmd_prefix) cmd.extend(['-q', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd) self.assert_path_exists(os.path.join(self.cache_dir, PROFILE)) self.assert_path_exists(os.path.join(self.cache_dir, '.features')) self.compare_features_file(os.path.join(self.cache_dir, '.features')) class AAParserAltCacheBasicTests(AAParserBasicCachingTests): '''Same tests as above, but with an alternate cache location specified on the command line''' def setUp(self): super(AAParserAltCacheBasicTests, self).setUp() alt_cache_dir = tempfile.mkdtemp(prefix='aa-alt-cache', dir=self.tmp_dir) os.chmod(alt_cache_dir, 0o755) self.unused_cache_dir = self.cache_dir self.cache_dir = alt_cache_dir self.cmd_prefix.extend(['--cache-loc', alt_cache_dir]) def tearDown(self): if len(os.listdir(self.unused_cache_dir)) > 0: self.fail('original cache dir \'%s\' not empty' % self.unused_cache_dir) super(AAParserAltCacheBasicTests, self).tearDown() class AAParserCreateCacheBasicTestsCacheExists(AAParserBasicCachingTests): '''Same tests as above, but with create cache option on the command line and the cache already exists''' def setUp(self): super(AAParserCreateCacheBasicTestsCacheExists, self).setUp() self.cmd_prefix.append('--create-cache-dir') class AAParserCreateCacheBasicTestsCacheNotExist(AAParserBasicCachingTests): '''Same tests as above, but with create cache option on the command line and cache dir removed''' def setUp(self): super(AAParserCreateCacheBasicTestsCacheNotExist, self).setUp() shutil.rmtree(self.cache_dir) self.cmd_prefix.append('--create-cache-dir') class AAParserCreateCacheAltCacheTestsCacheNotExist(AAParserBasicCachingTests): '''Same tests as above, but with create cache option on the command line, alt cache specified, and cache dir removed''' def setUp(self): super(AAParserCreateCacheAltCacheTestsCacheNotExist, self).setUp() shutil.rmtree(self.cache_dir) self.cmd_prefix.append('--create-cache-dir') class AAParserCachingTests(AAParserCachingCommon): def setUp(self): super(AAParserCachingTests, self).setUp() r = testlib.filesystem_time_resolution() self.mtime_res = r[1] def _generate_cache_file(self): cmd = list(self.cmd_prefix) cmd.extend(['-q', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd) self.assert_path_exists(self.cache_file) def _assertTimeStampEquals(self, time1, time2): '''Compare two timestamps to ensure equality''' # python 3.2 and earlier don't support writing timestamps with # nanosecond resolution, only microsecond. When comparing # timestamps in such an environment, loosen the equality bounds # to compensate # Reference: https://bugs.python.org/issue12904 (major, minor, _) = platform.python_version_tuple() if (int(major) < 3) or ((int(major) == 3) and (int(minor) <= 2)): self.assertAlmostEquals(time1, time2, places=5) else: self.assertEquals(time1, time2) def _set_mtime(self, path, mtime): atime = os.stat(path).st_atime os.utime(path, (atime, mtime)) self._assertTimeStampEquals(os.stat(path).st_mtime, mtime) def test_cache_loaded_when_exists(self): '''test cache is loaded when it exists, is newer than profile, and features match''' self._generate_cache_file() cmd = list(self.cmd_prefix) cmd.extend(['-v', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Cached reload succeeded') def test_cache_not_loaded_when_skip_arg(self): '''test cache is not loaded when --skip-cache is passed''' self._generate_cache_file() cmd = list(self.cmd_prefix) cmd.extend(['-v', '--skip-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') def test_cache_not_loaded_when_skip_read_arg(self): '''test cache is not loaded when --skip-read-cache is passed''' self._generate_cache_file() cmd = list(self.cmd_prefix) cmd.extend(['-v', '--skip-read-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') def test_cache_not_loaded_when_features_differ(self): '''test cache is not loaded when features file differs''' self._generate_cache_file() testlib.write_file(self.cache_dir, '.features', 'monkey\n') cmd = list(self.cmd_prefix) cmd.extend(['-v', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') def test_cache_writing_does_not_overwrite_features_when_features_differ(self): '''test cache writing does not overwrite the features files when it differs and --skip-bad-cache is given''' self.require_apparmorfs() features_file = testlib.write_file(self.cache_dir, '.features', 'monkey\n') cmd = list(self.cmd_prefix) cmd.extend(['-v', '--write-cache', '--skip-bad-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') self.assert_path_exists(features_file) # ensure that the features does *not* match the current features set self.compare_features_file(features_file, expected=False) def test_cache_writing_skipped_when_features_differ(self): '''test cache writing is skipped when features file differs''' testlib.write_file(self.cache_dir, '.features', 'monkey\n') cmd = list(self.cmd_prefix) cmd.extend(['-v', '--write-cache', '--skip-bad-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') self.assert_path_exists(self.cache_file, expected=False) def test_cache_writing_updates_features(self): '''test cache writing updates features''' self.require_apparmorfs() features_file = testlib.write_file(self.cache_dir, '.features', 'monkey\n') cmd = list(self.cmd_prefix) cmd.extend(['-v', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') self.assert_path_exists(features_file) self.compare_features_file(features_file) def test_cache_writing_updates_cache_file(self): '''test cache writing updates cache file''' cache_file = testlib.write_file(self.cache_dir, PROFILE, 'monkey\n') orig_stat = os.stat(cache_file) cmd = list(self.cmd_prefix) cmd.extend(['-v', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') self.assert_path_exists(cache_file) stat = os.stat(cache_file) # We check sizes here rather than whether the string monkey is # in cache_contents because of the difficulty coercing cache # file bytes into strings in python3 self.assertNotEquals(orig_stat.st_size, stat.st_size, 'Expected cache file to be updated, size is not changed.') self.assertEquals(os.stat(self.profile).st_mtime, stat.st_mtime) def test_cache_writing_clears_all_files(self): '''test cache writing clears all cache files''' check_file = testlib.write_file(self.cache_dir, 'monkey', 'monkey\n') cmd = list(self.cmd_prefix) cmd.extend(['-v', '--write-cache', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') self.assert_path_exists(check_file, expected=False) def test_profile_mtime_preserved(self): '''test profile mtime is preserved when it is newest''' expected = 1 self._set_mtime(self.abstraction, 0) self._set_mtime(self.profile, expected) self._generate_cache_file() self.assertEquals(expected, os.stat(self.cache_file).st_mtime) def test_abstraction_mtime_preserved(self): '''test abstraction mtime is preserved when it is newest''' expected = 1000 self._set_mtime(self.profile, 0) self._set_mtime(self.abstraction, expected) self._generate_cache_file() self.assertEquals(expected, os.stat(self.cache_file).st_mtime) def test_equal_mtimes_preserved(self): '''test equal profile and abstraction mtimes are preserved''' expected = 10000 + self.mtime_res self._set_mtime(self.profile, expected) self._set_mtime(self.abstraction, expected) self._generate_cache_file() self.assertEquals(expected, os.stat(self.cache_file).st_mtime) def test_profile_newer_skips_cache(self): '''test cache is skipped if profile is newer''' self._generate_cache_file() profile_mtime = os.stat(self.cache_file).st_mtime + self.mtime_res self._set_mtime(self.profile, profile_mtime) orig_stat = os.stat(self.cache_file) cmd = list(self.cmd_prefix) cmd.extend(['-v', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') stat = os.stat(self.cache_file) self.assertEquals(orig_stat.st_size, stat.st_size) self.assertEquals(orig_stat.st_ino, stat.st_ino) self.assertEquals(orig_stat.st_mtime, stat.st_mtime) def test_abstraction_newer_skips_cache(self): '''test cache is skipped if abstraction is newer''' self._generate_cache_file() abstraction_mtime = os.stat(self.cache_file).st_mtime + self.mtime_res self._set_mtime(self.abstraction, abstraction_mtime) orig_stat = os.stat(self.cache_file) cmd = list(self.cmd_prefix) cmd.extend(['-v', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') stat = os.stat(self.cache_file) self.assertEquals(orig_stat.st_size, stat.st_size) self.assertEquals(orig_stat.st_ino, stat.st_ino) self.assertEquals(orig_stat.st_mtime, stat.st_mtime) def test_profile_newer_rewrites_cache(self): '''test cache is rewritten if profile is newer''' self._generate_cache_file() profile_mtime = os.stat(self.cache_file).st_mtime + self.mtime_res self._set_mtime(self.profile, profile_mtime) orig_stat = os.stat(self.cache_file) cmd = list(self.cmd_prefix) cmd.extend(['-v', '-r', '-W', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') stat = os.stat(self.cache_file) self.assertNotEquals(orig_stat.st_ino, stat.st_ino) self._assertTimeStampEquals(profile_mtime, stat.st_mtime) def test_abstraction_newer_rewrites_cache(self): '''test cache is rewritten if abstraction is newer''' self._generate_cache_file() abstraction_mtime = os.stat(self.cache_file).st_mtime + self.mtime_res self._set_mtime(self.abstraction, abstraction_mtime) orig_stat = os.stat(self.cache_file) cmd = list(self.cmd_prefix) cmd.extend(['-v', '-r', '-W', self.profile]) self.run_cmd_check(cmd, expected_string='Replacement succeeded for') stat = os.stat(self.cache_file) self.assertNotEquals(orig_stat.st_ino, stat.st_ino) self._assertTimeStampEquals(abstraction_mtime, stat.st_mtime) def test_parser_newer_uses_cache(self): '''test cache is not skipped if parser is newer''' self._generate_cache_file() # copy parser os.mkdir(os.path.join(self.tmp_dir, 'parser')) new_parser = os.path.join(self.tmp_dir, 'parser', 'apparmor_parser') shutil.copy(config.parser, new_parser) self._set_mtime(new_parser, os.stat(self.cache_file).st_mtime + self.mtime_res) cmd = list(self.cmd_prefix) cmd[0] = new_parser cmd.extend(['-v', '-r', self.profile]) self.run_cmd_check(cmd, expected_string='Cached reload succeeded for') def _purge_cache_test(self, location): cache_file = testlib.write_file(self.cache_dir, location, 'monkey\n') cmd = list(self.cmd_prefix) cmd.extend(['-v', '--purge-cache', '-r', self.profile]) self.run_cmd_check(cmd) # no message is output self.assert_path_exists(cache_file, expected=False) def test_cache_purge_removes_features_file(self): '''test cache --purge-cache removes .features file''' self._purge_cache_test('.features') def test_cache_purge_removes_cache_file(self): '''test cache --purge-cache removes profile cache file''' self._purge_cache_test(PROFILE) def test_cache_purge_removes_other_cache_files(self): '''test cache --purge-cache removes other cache files''' self._purge_cache_test('monkey') class AAParserAltCacheTests(AAParserCachingTests): '''Same tests as above, but with an alternate cache location specified on the command line''' check_orig_cache = True def setUp(self): super(AAParserAltCacheTests, self).setUp() alt_cache_dir = tempfile.mkdtemp(prefix='aa-alt-cache', dir=self.tmp_dir) os.chmod(alt_cache_dir, 0o755) self.orig_cache_dir = self.cache_dir self.cache_dir = alt_cache_dir self.cache_file = os.path.join(self.cache_dir, PROFILE) self.cmd_prefix.extend(['--cache-loc', alt_cache_dir]) def tearDown(self): if self.check_orig_cache and len(os.listdir(self.orig_cache_dir)) > 0: self.fail('original cache dir \'%s\' not empty' % self.orig_cache_dir) super(AAParserAltCacheTests, self).tearDown() def test_cache_purge_leaves_original_cache_alone(self): '''test cache purging only touches alt cache''' # skip tearDown check to ensure non-alt cache is empty self.check_orig_cache = False filelist = [PROFILE, '.features', 'monkey'] for f in filelist: testlib.write_file(self.orig_cache_dir, f, 'monkey\n') self._purge_cache_test(PROFILE) for f in filelist: if not os.path.exists(os.path.join(self.orig_cache_dir, f)): self.fail('cache purge removed %s, was not supposed to' % (os.path.join(self.orig_cache_dir, f))) def main(): global config p = ArgumentParser() p.add_argument('-p', '--parser', default=testlib.DEFAULT_PARSER, action="store", dest='parser') p.add_argument('-v', '--verbose', action="store_true", dest="verbose") p.add_argument('-d', '--debug', action="store_true", dest="debug") config = p.parse_args() verbosity = 1 if config.verbose: verbosity = 2 test_suite = unittest.TestSuite() test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserBasicCachingTests)) test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserAltCacheBasicTests)) test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserCreateCacheBasicTestsCacheExists)) test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserCreateCacheBasicTestsCacheNotExist)) test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserCreateCacheAltCacheTestsCacheNotExist)) test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserCachingTests)) test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AAParserAltCacheTests)) rc = 0 try: result = unittest.TextTestRunner(verbosity=verbosity).run(test_suite) if not result.wasSuccessful(): rc = 1 except: rc = 1 return rc if __name__ == "__main__": rc = main() exit(rc) apparmor-2.11.0/parser/tst/features_files/0000755000175000017500000000000013034613166016315 5ustar jjjjapparmor-2.11.0/parser/tst/features_files/features.dbus0000644000175000017500000000205112325777052021017 0ustar jjjjdbus {mask {acquire send receive } } caps {mask {chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend } } rlimit {mask {cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime } } capability {0xffffff } namespaces {pivot_root {yes } profile {yes } } network {af_mask {unspec unix local inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock max } } file {mask {create read write exec append mmap_exec link lock } } domain {change_profile {yes } change_onexec {yes } change_hatv {yes } change_hat {yes } } policy {set_load {yes } } apparmor-2.11.0/parser/tst/features_files/features.nopolicydb0000644000175000017500000000200412325777052022222 0ustar jjjjcaps {mask {chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend } } rlimit {mask {cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime } } capability {0xffffff } namespaces {pivot_root {yes } profile {yes } } network {af_mask {unspec unix local inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock max } } file {mask {create read write exec append mmap_exec link lock } } domain {change_profile {yes } change_onexec {yes } change_hatv {yes } change_hat {yes } } policy {set_load {yes } } apparmor-2.11.0/parser/tst/features_files/features.all0000644000175000017500000000254112673203706020632 0ustar jjjjdbus {mask {acquire send receive } } signal {mask {hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost } } ptrace {mask {read trace } } caps {mask {chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read } } rlimit {mask {cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime } } capability {0xffffff } namespaces {pivot_root {yes } profile {yes } } mount {mask {mount umount } } network {af_unix {yes } af_mask {unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock } } file {mask {create read write exec append mmap_exec link lock } } domain {stack {yes } change_profile {yes } change_onexec {yes } change_hatv {yes } change_hat {yes } } policy {set_load {yes } versions {v7 {yes } v6 {yes } v5 {yes } } } apparmor-2.11.0/parser/tst/features_files/features.mount+dbus0000644000175000017500000000210712325777052022157 0ustar jjjjdbus {mask {acquire send receive } } caps {mask {chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend } } rlimit {mask {cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime } } capability {0xffffff } namespaces {pivot_root {yes } profile {yes } } mount {mask {mount umount } } network {af_mask {unspec unix local inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock max } } file {mask {create read write exec append mmap_exec link lock } } domain {change_profile {yes } change_onexec {yes } change_hatv {yes } change_hat {yes } } policy {set_load {yes } } apparmor-2.11.0/parser/tst/features_files/features.mount0000644000175000017500000000204212325777052021224 0ustar jjjjcaps {mask {chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend } } rlimit {mask {cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime } } capability {0xffffff } namespaces {pivot_root {yes } profile {yes } } mount {mask {mount umount } } network {af_mask {unspec unix local inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock max } } file {mask {create read write exec append mmap_exec link lock } } domain {change_profile {yes } change_onexec {yes } change_hatv {yes } change_hat {yes } } policy {set_load {yes } } apparmor-2.11.0/parser/tst/uservars.conf0000644000175000017500000000041411503736226016037 0ustar jjjj# # Simple configuration file for the parser regression tests # config items are 'name = value' pairs. Currently the only config items # are the location of the parser and the location of the simple profiles. # parser = ../apparmor_parser profiledir = ./simple_tests/ apparmor-2.11.0/parser/tst/README0000644000175000017500000000622212214136357014200 0ustar jjjjThis is the README for the AppArmor parser regression testsuite. Running the testsuite --------------------- Running the tests is pretty easy, a simple 'make tests' should make it go, assuming the subdomain parser and perl are installed. There is a user configuration file 'uservars.conf'. If you wish to test against a different parser, or use a different set of profiles for the simple.pl test, you can change those settings in 'uservars.conf'. You can also override which parser is used through make by specifying the PARSER veriable. For example, to run the tests on the system parser, run 'make PARSER=/sbin/apparmor_parser'. Adding to the testsuite ----------------------- The testsuite currently contains one testscript (simple.pl) and makes use of perl's Test::Simple, Test::Harness, and prove utilities (see 'perldoc Test::Tutorial', 'perldoc Test::Simple', 'perldoc Test::Harness', and 'man 1 prove' for more information on these). It should be relatively easy to extend the suite with other testscripts, as long as they're written using Test::Simple or can emulate the Test::Harness protocol. To add a script, add it to the TESTS variable in the Makefile, and it will included in the tests to be run. However, in many cases, it is not necessary to add an entire new testscript for a testcase. Instead, the simple testcase (see below) will run all the profiles it finds on the parser, thus adding testcases is usually as simple as writing a new profile with a couple of extra comments. Simple parsing tests (simple.pl) -------------------------------- This test script tests the parser front end's ability to identify legal profiles. It does this by running the parser against several legal and illegal profiles (in debug mode, so as not to load them into the module proper) The simple script has the parser attempt to parse all of the profiles named *.sd in the simple_tests/ subdirectory; thus, to add a new profile to test, simply add it to the simple_tests/ directory. The simple script also adds the testdir (simple_tests/ by default) to the parsers include path (assuming that particular bug has been fixed :-)). There is an includes/ subdir to place additional includes if necessary (we purposefully choose to use different directory names versus the shipped profiles to minimize testsuite breakage with changes in the external policy). The simple script looks for a few special comments in the profile, #=DESCRIPTION, #=EXRESULT, and #=TODO: - #=DESCRIPTION -- all text following the keyword is considered a description for the test. Please try to make these meaningful. - #=EXRESULT -- This records the expected result of parsing this profile. Values can either be PASS or FAIL; if no comment is found that matches this pattern, then the profile is assumed to have an expected parse result of PASS. - #=TODO -- marks the test as being for a future item to implement and thus are expected testsuite failures and hsould be ignored. - #=DISABLED -- skips the test, and marks it as a failed TODO task. Useful if the particular testcase causes the parser to infinite loop or dump core. Otherwise, the profile is passed on as-is to the subdomain parser. apparmor-2.11.0/parser/tst/minimize.sh0000755000175000017500000001642612325777052015515 0ustar jjjj#!/bin/bash # APPARMOR_PARSER="${APPARMOR_PARSER:-../apparmor_parser}" # Format of -D dfa-states # dfa-states output is split into 2 parts: # the accept state infomation # {state} (allow deny audit XXX) ignore XXX for now # followed by the transition table information # {Y} -> {Z}: 0xXX Char #0xXX is the hex dump of Char # where the start state is always shown as # {1} <== # # Eg. echo "/t { /a r, /b w, /c a, /d l, /e k, /f m, deny /** w, }" | ./apparmor_parser -QT -O minimize -D dfa-states --quiet # # {1} <== (allow/deny/audit/quiet) # {3} (0x 0/2800a/0/2800a) # {4} (0x 10004/2800a/0/2800a) # {7} (0x 40010/2800a/0/2800a) # {8} (0x 80020/2800a/0/2800a) # {9} (0x 100040/2800a/0/2800a) # {c} (0x 40030/0/0/0) # # {1} -> {2}: 0x2f / # {2} -> {4}: 0x61 a # {2} -> {3}: 0x62 b # {2} -> {3}: 0x63 c # {2} -> {7}: 0x64 d # {2} -> {8}: 0x65 e # {2} -> {9}: 0x66 f # {2} -> {3}: [^\0x0/] # {3} -> {3}: [^\0x0] # {4} -> {3}: [^\0x0] # {7} -> {a}: 0x0 # {7} -> {3}: [] # {8} -> {3}: [^\0x0] # {9} -> {3}: [^\0x0] # {a} -> {b}: 0x2f / # {b} -> {c}: [^/] # {c} -> {c}: [] # # These tests currently only look at the accept state permissions # # To view any of these DFAs as graphs replace --D dfa-states with -D dfa-graph # strip of the test stuff around the parser command and use the the dot # command to convert # Eg. # echo "/t { /a r, /b w, /c a, /d l, /e k, /f m, deny /** w, }" | ./apparmor_parser -QT -O minimize -D dfa-graph --quiet 2>min.graph # dot -T png -o min.png min.graph # and then view min.png in your favorite viewer # #------------------------------------------------------------------------ # test to see if minimization is eliminating non-redundant accept state # Test xtrans and regular perms separately. The are the same basic failure # but can xtrans has an extra code path. # # The permission test is setup to have all the none xtrans permissions show # up once on unique paths and have a global write permission that adds to # it. # This should result in a un-minimized dump looking like. Notice it has 6 # states with accept information, 1 for each rule except for the 'w' # permission which is combined into a single state for /b and /** # # {1} <== (allow/deny/audit/quiet) # {3} (0x 2800a/0/0/0) # {4} (0x 3800e/0/0/0) # {5} (0x 6801a/0/0/0) # {6} (0x a802a/0/0/0) # {7} (0x 12804a/0/0/0) # {a} (0x 40030/0/0/0) # A dump of minimization that is not respecting the uniqueness of the # permissions on the states looks like below. Notice it has only 3 states # with accept information # {1} <== (allow/deny/audit/quiet) # {3} (0x 1b806e/0/0/0) # {5} (0x 6801a/0/0/0) # {a} (0x 40030/0/0/0) echo -n "Minimize profiles basic perms " if [ `echo "/t { /a r, /b w, /c a, /d l, /e k, /f m, /** w, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 6 ] ; then echo "failed" exit 1; fi echo "ok" # same test as above except with audit perms added # {1} <== (allow/deny/audit/quiet) # {3} (0x 2800a/0/2800a/0) # {4} (0x 3800e/0/2800a/0) # {7} (0x 6801a/0/2800a/0) # {8} (0x a802a/0/2800a/0) # {9} (0x 12804a/0/2800a/0) # {c} (0x 40030/0/0/0) echo -n "Minimize profiles audit perms " if [ `echo "/t { /a r, /b w, /c a, /d l, /e k, /f m, audit /** w, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 6 ] ; then echo "failed" exit 1; fi echo "ok" # same test as above except with deny 'w' perm added to /**, this does not # elimnates the states with 'w' and 'a' because the quiet information is # being carried # # {1} <== (allow/deny/audit/quiet) # {3} (0x 0/2800a/0/2800a) # {4} (0x 10004/2800a/0/2800a) # {7} (0x 40010/2800a/0/2800a) # {8} (0x 80020/2800a/0/2800a) # {9} (0x 100040/2800a/0/2800a) # {c} (0x 40030/0/0/0) echo -n "Minimize profiles deny perms " if [ `echo "/t { /a r, /b w, /c a, /d l, /e k, /f m, deny /** w, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 6 ] ; then echo "failed" exit 1; fi echo "ok" # same test as above except with audit deny 'w' perm added to /**, with the # parameter this elimnates the states with 'w' and 'a' because # the quiet information is NOT being carried # # {1} <== (allow/deny/audit/quiet) # {4} (0x 10004/0/0/0) # {7} (0x 40010/0/0/0) # {8} (0x 80020/0/0/0) # {9} (0x 100040/0/0/0) # {c} (0x 40030/0/0/0) echo -n "Minimize profiles audit deny perms " if [ `echo "/t { /a r, /b w, /c a, /d l, /e k, /f m, audit deny /** w, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 5 ] ; then echo "failed" exit 1; fi echo "ok" # The x transition test profile is setup so that there are 3 conflicting x # permissions, two are on paths that won't collide during dfa creation. The # 3rd is a generic permission that should be overriden during dfa creation. # # This should result in a dfa that specifies transitions on 'a' and 'b' to # unique states that store the alternate accept information. However # minimization can remove the unique accept permission states if x permissions # are treated as a single accept state. # # The minimized dump should retain the 'a' and 'b' transitions accept states. # notice the below dump has 3 states with accept information {3}, {4}, {5} # # {1} <== (allow/deny/audit/quiet) # {3} (0x 2914a45/0/0/0) # {4} (0x 4115045/0/0/0) # {5} (0x 2514945/0/0/0) # # A dump of minimization that is not respecting the uniqueness of the # permissions on the states transitioned to by 'a' and 'b' looks like # below. Notice that only state {3} has accept information # {1} <== (allow/deny/audit/quiet) # {3} (0x 2514945/0/0/0) # echo -n "Minimize profiles xtrans " if [ `echo "/t { /b px, /* Pixr, /a Cx -> foo, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 3 ] ; then echo "failed" exit 1; fi echo "ok" # same test as above + audit echo -n "Minimize profiles audit xtrans " if [ `echo "/t { /b px, audit /* Pixr, /a Cx -> foo, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 3 ] ; then echo "failed" exit 1; fi echo "ok" # now try denying x and make sure perms are cleared # notice that only deny and quiet information is being carried # {1} <== (allow/deny/audit/quiet) # {3} (0x 0/fe17f85/0/14005) echo -n "Minimize profiles deny xtrans " if [ `echo "/t { /b px, deny /* xr, /a Cx -> foo, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 1 ] ; then echo "failed" exit 1; fi echo "ok" # now try audit + denying x and make sure perms are cleared # notice that the deny info is being carried, by an artifical trap state # {1} <== (allow/deny/audit/quiet) # {3} (0x 0/fe17f85/0/0) echo -n "Minimize profiles audit deny xtrans " if [ `echo "/t { /b px, audit deny /* xr, /a Cx -> foo, }" | ${APPARMOR_PARSER} -M features_files/features.nopolicydb -QT -O minimize -D dfa-states 2>&1 | grep -v '<==' | grep '^{.*} (.*)$' | wc -l` -ne 0 ] ; then echo "failed" exit 1; fi echo "ok" apparmor-2.11.0/parser/tst/gen-xtrans.pl0000755000175000017500000001404411557612747015762 0ustar jjjj#!/usr/bin/perl use strict; use Locale::gettext; use POSIX; setlocale(LC_MESSAGES, ""); my $prefix="simple_tests/generated_x"; my $prefix_leading="simple_tests/generated_perms_leading"; my $prefix_safe="simple_tests/generated_perms_safe"; my @trans_types = ("p", "P", "c", "C", "u", "i"); my @modifiers = ("i", "u"); my %trans_modifiers = ( "p" => \@modifiers, "P" => \@modifiers, "c" => \@modifiers, "C" => \@modifiers, ); my @targets = ("", "target", "target2"); my @null_target = (""); my %named_trans = ( "p" => \@targets, "P" => \@targets, "c" => \@targets, "C" => \@targets, "u" => \@null_target, "i" => \@null_target, ); my %safe_map = ( "p" => "unsafe", "P" => "safe", "c" => "unsafe", "C" => "safe", "u" => "", "i" => "", ); my %invert_safe = ( "safe" => "unsafe", "unsafe" => "safe", ); # audit qualifier disabled for now it really shouldn't affect the conflict # test but it may be worth checking every once in awhile #my @qualifiers = ("", "owner", "audit", "audit owner"); my @qualifiers = ("", "owner"); my $count = 0; gen_conflicting_x(); gen_overlap_re_exact(); gen_dominate_re_re(); gen_ambiguous_re_re(); gen_leading_perms("exact", "/bin/cat", "/bin/cat"); gen_leading_perms("exact-re", "/bin/*", "/bin/*"); gen_leading_perms("overlap", "/*", "/bin/cat"); gen_leading_perms("dominate", "/**", "/*"); gen_leading_perms("ambiguous", "/a*", "/*b"); gen_safe_perms("exact", "PASS", "", "/bin/cat", "/bin/cat"); gen_safe_perms("exact-re", "PASS", "", "/bin/*", "/bin/*"); gen_safe_perms("overlap", "PASS", "", "/*", "/bin/cat"); gen_safe_perms("dominate", "PASS", "", "/**", "/*"); gen_safe_perms("ambiguous", "PASS", "", "/a*", "/*b"); gen_safe_perms("exact", "FAIL", "inv", "/bin/cat", "/bin/cat"); gen_safe_perms("exact-re", "FAIL", "inv", "/bin/*", "/bin/*"); gen_safe_perms("overlap", "PASS", "inv", "/*", "/bin/cat"); gen_safe_perms("dominate", "FAIL", "inv", "/**", "/*"); gen_safe_perms("ambiguous", "FAIL", "inv", "/a*", "/*b"); print "Generated $count xtransition interaction tests\n"; sub gen_list { my @output; foreach my $trans (@trans_types) { if ($trans_modifiers{$trans}) { foreach my $mod (@{$trans_modifiers{$trans}}) { push @output, "${trans}${mod}x"; } } push @output, "${trans}x"; } return @output; } sub print_rule($$$$$$) { my ($file, $leading, $qual, $name, $perm, $target) = @_; if ($leading) { print $file "\t${qual} ${perm} ${name}"; } else { print $file "\t${qual} ${name} ${perm}"; } if ($target ne "") { print $file " -> $target"; } print $file ",\n"; } sub gen_file($$$$$$$$$$$$) { my ($name, $xres, $leading1, $qual1, $rule1, $perm1, $target1, $leading2, $qual2, $rule2, $perm2, $target2) = @_; # print "$xres $rule1 $perm1 $target1 $rule2 $perm2 $target2\n"; my $file; unless (open $file, ">$name") { print("couldn't open $name\n"); exit 1; } print $file "#\n"; print $file "#=DESCRIPTION ${name}\n"; print $file "#=EXRESULT ${xres}\n"; print $file "#\n"; print $file "/usr/bin/foo {\n"; print_rule($file, $leading1, $qual1, $rule1, $perm1, $target1); print_rule($file, $leading2, $qual2, $rule2, $perm2, $target2); print $file "}\n"; close($file); $count++; } #NOTE: currently we don't do px to cx, or cx to px conversion # so # /foo { # /* px -> /foo//bar, # /* cx -> bar, # # will conflict # #NOTE: conflict tests don't tests leading permissions or using unsafe keywords # It is assumed that there are extra tests to verify 1 to 1 coorispondance sub gen_files($$$$) { my ($name, $rule1, $rule2, $default) = @_; my @perms = gen_list(); # print "@perms\n"; foreach my $i (@perms) { foreach my $t (@{$named_trans{substr($i, 0, 1)}}) { foreach my $q (@qualifiers) { foreach my $j (@perms) { foreach my $u (@{$named_trans{substr($j, 0, 1)}}) { foreach my $r (@qualifiers) { my $file="${prefix}/${name}-$q$i$t-$r$j$u.sd"; # print "$file\n"; #override failures when transitions are the same my $xres = ${default}; if ($i eq $j && $t eq $u) { $xres = "PASS"; } # print "foo $xres $rule1 $i $t $rule2 $j $u\n"; gen_file($file, $xres, 0, $q, $rule1, $i, $t, 0, $r, $rule2, $j, $u); } } } } } } } sub gen_conflicting_x { gen_files("conflict", "/bin/cat", "/bin/cat", "FAIL"); } sub gen_overlap_re_exact { gen_files("exact", "/bin/cat", "/bin/*", "PASS"); } # we currently don't support this, once supported change to "PASS" sub gen_dominate_re_re { gen_files("dominate", "/bin/*", "/bin/**", "FAIL"); } sub gen_ambiguous_re_re { gen_files("ambiguous", "/bin/a*", "/bin/*b", "FAIL"); } # test that rules that lead with permissions don't conflict with # the same rule using trailing permissions. sub gen_leading_perms($$$) { my ($name, $rule1, $rule2) = @_; my @perms = gen_list(); foreach my $i (@perms) { foreach my $t (@{$named_trans{substr($i, 0, 1)}}) { foreach my $q (@qualifiers) { my $file="${prefix_leading}/${name}-$q$i$t.sd"; # print "$file\n"; gen_file($file, "PASS", 0, $q, $rule1, $i, $t, 1, $q, $rule2, $i, $t); } } } } # test for rules with leading safe or unsafe keywords. # check they are equivalent to their counter part, # or if $invert that they properly conflict with their counterpart sub gen_safe_perms($$$$$) { my ($name, $xres, $invert, $rule1, $rule2) = @_; my @perms = gen_list(); foreach my $i (@perms) { foreach my $t (@{$named_trans{substr($i, 0, 1)}}) { foreach my $q (@qualifiers) { my $qual = $safe_map{substr($i, 0, 1)}; if ($invert) { $qual = $invert_safe{$qual}; } if (! $invert || $qual) { my $file="${prefix_safe}/${name}-$invert-$q${qual}-rule-$i$t.sd"; # print "$file\n"; gen_file($file, $xres, 0, "$q $qual", $rule1, $i, $t, 1, $q, $rule2, $i, $t); $file="${prefix_safe}/${name}-$invert-$q$qual${i}-rule-$t.sd"; gen_file($file, $xres, 0, $q, $rule1, $i, $t, 1, "$q $qual", $rule2, $i, $t); } } } } } apparmor-2.11.0/parser/tst/gen-dbus.pl0000755000175000017500000001417112250421430015353 0ustar jjjj#!/usr/bin/perl # # Copyright (c) 2013 # Canonical, Ltd. (All rights reserved) # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, contact Canonical Ltd. # use strict; use Locale::gettext; use POSIX; setlocale(LC_MESSAGES, ""); my $count=0; my $prefix="simple_tests/generated_dbus"; my @quantifier = ("", "deny", "audit"); my @session = ("", "bus=session", "bus=system", "bus=accessibility"); my @path = ("", "path=/foo/bar", "path=\"/foo/bar\""); my @interface = ("", "interface=com.baz", "interface=\"com.baz\""); my @member = ("", "member=bar", "member=\"bar\""); my @name = ("", "name=com.foo", "name=\"com.foo\""); my @peer = map { "peer=($_)" } (@name, "label=/usr/bin/app", "label=\"/usr/bin/app\"", "name=com.foo label=/usr/bin/app", "name=\"com.foo\" label=\"/usr/bin/app\""); # @msg_perms are the permissions that are related to sending and receiving # messages. @svc_perms are the permissions related to services. my @base_msg_perms = ("r", "w", "rw", "read", "receive", "write", "send"); my @msg_perms = ("", @base_msg_perms, (map { "($_)" } @base_msg_perms), "(write, read)", "(send receive)", "(send read)", "(receive write)"); gen_files("message-rules", "PASS", \@quantifier, \@msg_perms, \@session, [""], \@path, \@interface, \@member, \@peer); gen_files("service-rules", "PASS", \@quantifier, ["bind"], \@session, \@name, [""], [""], [""], [""]); gen_files("eavesdrop-rules", "PASS", \@quantifier, ["eavesdrop"], \@session, [""], [""], [""], [""], [""]); gen_file("sloppy-formatting", "PASS", "", "(send , receive )", "bus=session", "", "path =\"/foo/bar\"", "interface = com.foo", " member=bar", "peer =( label= /usr/bin/app name =\"com.foo\")"); gen_file("sloppy-formatting", "PASS", "", "bind", "bus =session", "name= com.foo", "", "", "", ""); gen_file("sloppy-formatting", "PASS", "", "eavesdrop", "bus = system", "", "", "", "", ""); # Don't use the first element, which is empty, from each array since all empty # conditionals would PASS but we want all FAILs shift @msg_perms; shift @name; shift @path; shift @interface; shift @member; shift @peer; gen_files("message-incompat", "FAIL", \@quantifier, \@msg_perms, \@session, \@name, [""], [""], [""], [""]); gen_files("service-incompat", "FAIL", \@quantifier, ["bind"], \@session, \@name, \@path, [""], [""], [""]); gen_files("service-incompat", "FAIL", \@quantifier, ["bind"], \@session, \@name, [""], \@interface, [""], [""]); gen_files("service-incompat", "FAIL", \@quantifier, ["bind"], \@session, \@name, [""], [""], \@member, [""]); gen_files("service-incompat", "FAIL", \@quantifier, ["bind"], \@session, \@name, [""], [""], [""], \@peer); gen_files("eavesdrop-incompat", "FAIL", \@quantifier, ["eavesdrop"], \@session, \@name, \@path, \@interface, \@member, \@peer); gen_files("pairing-unsupported", "FAIL", \@quantifier, ["send", "bind"], \@session, ["name=sn", "label=sl"], [""], [""], [""], ["peer=(name=pn)", "peer=(label=pl)"]); # missing bus= prefix gen_file("bad-formatting", "FAIL", "", "send", "session", "", "", "", "", ""); # incorrectly formatted permissions gen_files("bad-perms", "FAIL", [""], ["send receive", "(send", "send)"], ["bus=session"], [""], [""], [""], [""], [""]); # invalid permissions gen_files("bad-perms", "FAIL", [""], ["a", "x", "Ux", "ix", "m", "k", "l", "(a)", "(x)"], [""], [""], [""], [""], [""], [""]); gen_file("duplicated-conditionals", "FAIL", "", "bus=1 bus=2"); gen_file("duplicated-conditionals", "FAIL", "", "name=1 name=2"); gen_file("duplicated-conditionals", "FAIL", "", "path=1 path=2"); gen_file("duplicated-conditionals", "FAIL", "", "interface=1 interface=2"); gen_file("duplicated-conditionals", "FAIL", "", "member=1 member=2"); gen_file("duplicated-conditionals", "FAIL", "", "peer=(name=1) peer=(name=2)"); gen_file("duplicated-conditionals", "FAIL", "", "peer=(label=1) peer=(label=2)"); gen_file("duplicated-conditionals", "FAIL", "", "peer=(name=1) peer=(label=2)"); print "Generated $count dbus tests\n"; sub print_rule($$$$$$$$$) { my ($file, $quantifier, $perms, $session, $name, $path, $interface, $member, $peer) = @_; print $file " "; print $file " ${quantifier}" if ${quantifier}; print $file " dbus"; print $file " ${perms}" if ${perms}; print $file " ${session}" if ${session}; print $file " ${name}" if ${name}; print $file " ${path}" if ${path}; print $file " ${interface}" if ${interface}; print $file " ${member}" if ${member}; print $file " ${peer}" if ${peer}; print $file ",\n"; } sub gen_file($$$$$$$$$$) { my ($test, $xres, $quantifier, $perms, $session, $name, $path, $interface, $member, $peer) = @_; my $file; unless (open $file, ">${prefix}/$test-$count.sd") { print("couldn't open $test\n"); exit 1; } print $file "#\n"; print $file "#=DESCRIPTION ${test}\n"; print $file "#=EXRESULT ${xres}\n"; print $file "#\n"; print $file "/usr/bin/foo {\n"; print_rule($file, $quantifier, $perms, $session, $name, $path, $interface, $member, $peer); print $file "}\n"; close($file); $count++; } sub gen_files($$$$$$$$$$) { my ($test, $xres, $quantifiers, $perms, $sessions, $names, $paths, $interfaces, $members, $peers) = @_; foreach my $quantifier (@{$quantifiers}) { foreach my $perm (@{$perms}) { foreach my $session (@{$sessions}) { foreach my $name (@{$names}) { foreach my $path (@{$paths}) { foreach my $interface (@{$interfaces}) { foreach my $member (@{$members}) { foreach my $peer (@{$peers}) { gen_file($test, $xres, $quantifier, $perm, $session, $name, $path, $interface, $member, $peer); } } } } } } } } } apparmor-2.11.0/parser/tst/caching.profile0000644000175000017500000000024411276605606016301 0ustar jjjj# Simple example profile for caching tests /bin/pingy { capability net_raw, capability setuid, network inet raw, /bin/ping mixr, /etc/modules.conf r, } apparmor-2.11.0/parser/tst/simple_tests/0000755000175000017500000000000013034613162016024 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/xtrans/0000755000175000017500000000000013034613167017350 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_20.sd0000644000175000017500000000016211503731607023647 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls riPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_31.sd0000644000175000017500000000016211503731607025060 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { riux /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_5.sd0000644000175000017500000000015411503731607025002 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { rU /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_ok_cx_1.sd0000644000175000017500000000034311345365206022575 0ustar jjjj# #=DESCRIPTION test cx #=EXRESULT PASS # /usr/bin/foo { /bin/cat cx, /bin/foo Cx, unsafe cx /bin/bar, cx /bin/a, profile /bin/cat { /bin/cat mr, } profile /bin/a { /bin/a mr, /tmp/slurp* rw, } } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_22.sd0000644000175000017500000000016211503731607025060 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rIPx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_30.sd0000644000175000017500000000016211503731607025057 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rUIx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_ok_x_mods_1.sd0000644000175000017500000000403611232012201023432 0ustar jjjj# #=DESCRIPTION test valid overlapping x mods #=EXRESULT PASS # /usr/bin/foo { /1/1exact px, /1/1* ix, /1/2exact px, /1/2* ux, /1/3exact px, /1/3* Px, /1/4exact px, /1/4* Ux, /1/5exact px, /1/5* pix, /2/1exact ix, /2/1* px, /2/2exact ix, /2/2* ux, /2/3exact ix, /2/3* Px, /2/4exact ix, /2/4* Ux, /2/5exact ix, /2/5* pix, /3/1exact ux, /3/1* ix, /3/2exact ux, /3/2* px, /3/3exact ux, /3/3* Px, /3/4exact ux, /3/4* Ux, /3/5exact ux, /3/5* pix, /4/1exact pix, /4/1* ix, /4/2exact pix, /4/2* ux, /4/3exact pix, /4/3* px, /4/4exact pix, /4/4* Ux, /4/5exact pix, /4/5* Px, /5/1exact px, /5/1** ix, /5/2exact px, /5/2** ux, /5/3exact px, /5/3** Px, /5/4exact px, /5/4** Ux, /5/5exact px, /5/5** pix, /6/1exact ix, /6/1** px, /6/2exact ix, /6/2** ux, /6/3exact ix, /6/3** Px, /6/4exact ix, /6/4** Ux, /6/5exact ix, /6/5** pix, /7/1exact ux, /7/1** ix, /7/2exact ux, /7/2** px, /7/3exact ux, /7/3** Px, /7/4exact ux, /7/4** Ux, /7/5exact ux, /7/5** pix, /8/1exact pix, /8/1** ix, /8/2exact pix, /8/2** ux, /8/3exact pix, /8/3** px, /8/4exact pix, /8/4** Ux, /8/5exact pix, /8/5** Px, /9/1exact px, /9/1exac? ix, /9/2exact px, /9/2exac? ux, /9/3exact px, /9/3exac? Px, /9/4exact px, /9/4exac? Ux, /9/5exact px, /9/5exac? pix, /a/1exact ix, /a/1exac? px, /a/2exact ix, /a/2exac? ux, /a/3exact ix, /a/3exac? Px, /a/4exact ix, /a/4exac? Ux, /a/5exact ix, /a/5exac? pix, /b/1exact ux, /b/1exac? ix, /b/2exact ux, /b/2exac? px, /b/3exact ux, /b/3exac? Px, /b/4exact ux, /b/4exac? Ux, /b/5exact ux, /b/5exac? pix, /c/1exact pix, /c/1exac? ix, /c/2exact pix, /c/2exac? ux, /c/3exact pix, /c/3exac? px, /c/4exact pix, /c/4exac? Ux, /c/5exact pix, /c/5exac? Px, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_15.sd0000644000175000017500000000016211503731607025062 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rppx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_8.sd0000644000175000017500000000022411232012201025106 0ustar jjjj# #=DESCRIPTION px and Px conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat px, /lib/lib*.so* rix, /bin/cat Px, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_ok_pux_1.sd0000644000175000017500000000054011503744054022774 0ustar jjjj# #=DESCRIPTION pux is allowed as a multiple x modifier #=EXRESULT PASS # /usr/bin/foo { /bin/ls rpux, } /usr/bin/foo2 { /bin/ls rPux, } /usr/bin/foo3 { /bin/ls rpUx, } /usr/bin/foo4 { /bin/ls rPUx, } /usr/bin/foo5 { rpux /bin/ls, } /usr/bin/foo6 { rPux /bin/ls, } /usr/bin/foo7 { rpUx /bin/ls, } /usr/bin/foo8 { rPUx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_30.sd0000644000175000017500000000016211503731607023650 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rUIx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_10.sd0000644000175000017500000000022411232012201025157 0ustar jjjj# #=DESCRIPTION ux and Ux conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat Ux, /lib/lib*.so* rix, /bin/cat ux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/x-conflict2.sd0000644000175000017500000000100312061504020022004 0ustar jjjj# #=DESCRIPTION test for reused flag state #=EXRESULT PASS # /usr/bin/parent-profile { /usr/bin/profile1 Cx -> profile1, /usr/bin/profile2 Cx -> profile2, /usr/bin/profile3 Cx -> profile3, /usr/bin/profile4 Cx -> profile4, /usr/bin/profile5 Cx -> profile5, /usr/bin/profile6 Cx -> profile6, profile profile1 { } profile profile2 { } profile profile3 { } profile profile4 { /usr/bin/apt-get Ux, /usr/bin/dpkg Ux, } profile profile5 { } profile profile6 { } } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_2.sd0000644000175000017500000000015411503731607024777 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { rP /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_3.sd0000644000175000017500000000015411503731607023571 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls ri, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_22.sd0000644000175000017500000000016211503731607023651 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rIPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_17.sd0000644000175000017500000000016211503731607025064 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rPpx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_20.sd0000644000175000017500000000016211503731607025056 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { riPx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_6.sd0000644000175000017500000000022411232012201025104 0ustar jjjj# #=DESCRIPTION ux and ix conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat ux, /lib/lib*.so* rix, /bin/cat ix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_15.sd0000644000175000017500000000016211503731607023653 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rppx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_9.sd0000644000175000017500000000015511503731607023600 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls urx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_7.sd0000644000175000017500000000012711232012201025107 0ustar jjjj# #=DESCRIPTION px and Px conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat pxPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_10.sd0000644000175000017500000000015511503731607025057 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { Urx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/minimize-x-conflict.sd0000644000175000017500000000023711726372603023572 0ustar jjjj# #=DESCRIPTION test for conflict resolution in minimization phase of dfa gen #=EXRESULT PASS #=TODO # /usr/bin/foo { /b px, /* Pixr, /a Cx -> foo, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_27.sd0000644000175000017500000000016211503731607025065 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { ruix /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_no_bare_x.sd0000644000175000017500000000014611503731607024013 0ustar jjjj# #=DESCRIPTION Require px, ix, or ux, not bare x. #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_10.sd0000644000175000017500000000015511503731607023650 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls Urx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_31.sd0000644000175000017500000000016211503731607023651 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls riux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_25.sd0000644000175000017500000000016211503731607023654 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rUpx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_24.sd0000644000175000017500000000016211503731607025062 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { ruPx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_16.sd0000644000175000017500000000016211503731607023654 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rpPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_26.sd0000644000175000017500000000016211503731607025064 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rUPx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_23.sd0000644000175000017500000000016211503731607023652 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rupx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_1.sd0000644000175000017500000000015411503731607024776 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { rp /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_27.sd0000644000175000017500000000016211503731607023656 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls ruix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_37.sd0000644000175000017500000000047011232012201025045 0ustar jjjj# #=DESCRIPTION test pix - in forward perms P and p are the same and the # unsafe keyword is required. So these should conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat pix, /bin/foo Pix, /bin/bar pIx, /bin/a PIx, unsafe pix /bin/cat, Pix /bin/foo, unsafe pIx /bin/bar, unsafe PIx /bin/a, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_21.sd0000644000175000017500000000016211503731607023650 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rIpx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_4.sd0000644000175000017500000000022411232012201025102 0ustar jjjj# #=DESCRIPTION px and ux conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat px, /lib/lib*.so* rix, /bin/cat ux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_29.sd0000644000175000017500000000016211503731607023660 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rUix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/x-conflict.sd0000644000175000017500000000023711726372514021754 0ustar jjjj# #=DESCRIPTION test for conflict resolution in minimization phase of dfa gen #=EXRESULT FAIL #=TODO # /usr/bin/foo { /b* px, /* Pixr, /a* Cx -> foo, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_28.sd0000644000175000017500000000016211503731607025066 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { ruIx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_1.sd0000644000175000017500000000015411503731607023567 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rp, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_4.sd0000644000175000017500000000015411503731607025001 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { ru /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_33.sd0000644000175000017500000000016211503731607023653 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rIux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_12.sd0000644000175000017500000000022411232012201025161 0ustar jjjj# #=DESCRIPTION ix and Px conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat ix, /lib/lib*.so* rix, /bin/cat Px, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_18.sd0000644000175000017500000000016211503731607023656 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rPPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_7.sd0000644000175000017500000000015511503731607023576 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls irx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_16.sd0000644000175000017500000000016211503731607025063 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rpPx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_33.sd0000644000175000017500000000016211503731607025062 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rIux /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_17.sd0000644000175000017500000000016211503731607023655 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rPpx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_35.sd0000644000175000017500000000046111232012201025043 0ustar jjjj# #=DESCRIPTION test pix - in forward perms P and p are the same and the # unsafe keyword is required. So these should conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat pix, /bin/foo Pix, /bin/bar pIx, /bin/a PIx, unsafe pix /bin/cat, unsafe Pix /bin/foo, pIx /bin/bar, PIx /bin/a, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_32.sd0000644000175000017500000000016211503731607023652 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls riUx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_15.sd0000644000175000017500000000012711232012201025166 0ustar jjjj# #=DESCRIPTION Ux and ix conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat Uxix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_21.sd0000644000175000017500000000016211503731607025057 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rIpx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_8.sd0000644000175000017500000000015511503731607023577 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls irx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_8.sd0000644000175000017500000000015511503731607025006 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { irx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_6.sd0000644000175000017500000000015511503731607023575 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls prx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_1.sd0000644000175000017500000000012711232012201025101 0ustar jjjj# #=DESCRIPTION px and ix conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat pxix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_9.sd0000644000175000017500000000015511503731607025007 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { urx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_3.sd0000644000175000017500000000015411503731607025000 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { ri /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_ok_pix_1.sd0000644000175000017500000000031111503732411022746 0ustar jjjj# #=DESCRIPTION test pix #=EXRESULT PASS # /usr/bin/foo { /bin/cat pix, /bin/foo Pix, /bin/bar pIx, /bin/a PIx, unsafe pix /bin/cat, Pix /bin/foo, unsafe pix /bin/bar, Pix /bin/a, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_6.sd0000644000175000017500000000015511503731607025004 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { prx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_9.sd0000644000175000017500000000012711232012201025111 0ustar jjjj# #=DESCRIPTION ux and Ux conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat Uxux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_29.sd0000644000175000017500000000016211503731607025067 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rUix /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_23.sd0000644000175000017500000000016211503731607025061 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rupx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_14.sd0000644000175000017500000000012711232012201025165 0ustar jjjj# #=DESCRIPTION Px and ix conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat ixPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_5.sd0000644000175000017500000000012711232012201025105 0ustar jjjj# #=DESCRIPTION ux and ix conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat uxix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_34.sd0000644000175000017500000000016211503731607022303 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rIUx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_36.sd0000644000175000017500000000045211232012201025044 0ustar jjjj# #=DESCRIPTION test pix - in forward perms P and p are the same and the # unsafe keyword is required. So these should conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat pix, /bin/foo Pix, /bin/bar pIx, /bin/a PIx, unsafe pix /bin/cat, pix /bin/foo, pIx /bin/bar, PIx /bin/a, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_13.sd0000644000175000017500000000022411232012201025162 0ustar jjjj# #=DESCRIPTION ix and Ux conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat ix, /lib/lib*.so* rix, /bin/cat Ux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_11.sd0000644000175000017500000000022411232012201025160 0ustar jjjj# #=DESCRIPTION ux and Px conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat ux, /lib/lib*.so* rix, /bin/cat Px, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_25.sd0000644000175000017500000000016211503731607025063 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rUpx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_24.sd0000644000175000017500000000016211503731607023653 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls ruPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_7.sd0000644000175000017500000000015511503731607025005 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { irx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_26.sd0000644000175000017500000000016211503731607023655 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rUPx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_2.sd0000644000175000017500000000015411503731607023570 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rP, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_5.sd0000644000175000017500000000015411503731607023573 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls rU, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_2.sd0000644000175000017500000000022411232012201025100 0ustar jjjj# #=DESCRIPTION px and ix conflict, different identical rules #=EXRESULT FAIL # /usr/bin/foo { /bin/cat px, /lib/lib*.so* rix, /bin/cat ix, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_19.sd0000644000175000017500000000016211503731607023657 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls ripx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_19.sd0000644000175000017500000000016211503731607025066 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { ripx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_conflicting_x_3.sd0000644000175000017500000000012711232012201025103 0ustar jjjj# #=DESCRIPTION px and ux conflict #=EXRESULT FAIL # /usr/bin/foo { /bin/cat pxux, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_28.sd0000644000175000017500000000016211503731607023657 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { /bin/ls ruIx, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_32.sd0000644000175000017500000000016211503731607025061 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { riUx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_4.sd0000644000175000017500000000015411503731607023572 0ustar jjjj# #=DESCRIPTION x modifiers can not appear by themselves #=EXRESULT FAIL # /usr/bin/foo { /bin/ls ru, } apparmor-2.11.0/parser/tst/simple_tests/xtrans/simple_bad_x_mods_first_18.sd0000644000175000017500000000016211503731607025065 0ustar jjjj# #=DESCRIPTION only pix is allowed as a multiple x modifier #=EXRESULT FAIL # /usr/bin/foo { rPPx /bin/ls, } apparmor-2.11.0/parser/tst/simple_tests/profile/0000755000175000017500000000000013034613162017464 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/profile/simple_named_ok_no_rules.sd0000644000175000017500000000043311503744054025054 0ustar jjjj# #=DESCRIPTION simple syntax test -- no actual rules. #=EXRESULT PASS # profile noexist /does/not/exist { } profile noexist2 /does/not/exist2 { ^hat1 { } ^hat2 { } } profile noexist3 /does/not/exist { } profile noexist4 /does/not/exist2 { ^hat1 { } ^hat2 { } } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad1.sd0000644000175000017500000000106611503736226023054 0ustar jjjj# #=DESCRIPTION collision same profile, same namespace #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # :foo:/exists { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :foo:/exists { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad4.sd0000644000175000017500000000054411503736226023057 0ustar jjjj# #=DESCRIPTION collision same profile, same namespace #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # ::/does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/local/0000755000175000017500000000000013034613162020556 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/profile/local/local_profiles_ok2.sd0000644000175000017500000000110611503736226024662 0ustar jjjj# #=DESCRIPTION More basic parsing test of local (internal) profiles #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /bin/ls ixixixix, /bin/echo uxuxuxuxux, profile /bin/grep { #include /bin/grep r, /tmp/shmeegol rwm, } capability setuid, profile /bin/cat { #include /bin/cat r, /tmp/shmeegol w, } /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, } apparmor-2.11.0/parser/tst/simple_tests/profile/local/local_named_profiles_ok2.sd0000644000175000017500000000112611503744054026026 0ustar jjjj# # $Id$ #=DESCRIPTION More basic parsing test of local (internal) profiles #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /bin/ls ixixixix, /bin/echo uxuxuxuxux, profile grep /bin/grep { #include /bin/grep r, /tmp/shmeegol rwm, } capability setuid, profile cat /bin/cat { #include /bin/cat r, /tmp/shmeegol w, } /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, } apparmor-2.11.0/parser/tst/simple_tests/profile/local/local_profile_ok1.sd0000644000175000017500000000065011232012201024454 0ustar jjjj# #=DESCRIPTION simple local (interior) profile cases #=EXRESULT PASS # /does/not/exist { /foo rw, /foo/** rw, rw /bar, rw /bar/**, profile /bin/grep { /one rw, /one/** rw, rw /two, rw /two/**, } hat GREP { /one r, /one/** r, r /two, r /two/**, } profile /bin/true { /three rw, /three/** rw, rw /four, rw /four/**, } profile /bin/false { } } apparmor-2.11.0/parser/tst/simple_tests/profile/local/local_named_profiles_ok1.sd0000644000175000017500000000073111503744054026026 0ustar jjjj# # $Id$ #=DESCRIPTION Basic parsing test of local (internal) profiles #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, profile grep /bin/grep { #include /bin/grep r, /tmp/shmeegol rwm, } } apparmor-2.11.0/parser/tst/simple_tests/profile/local/local_profiles_ok1.sd0000644000175000017500000000071511503736226024666 0ustar jjjj# #=DESCRIPTION Basic parsing test of local (internal) profiles #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, profile /bin/grep { #include /bin/grep r, /tmp/shmeegol rwm, } } apparmor-2.11.0/parser/tst/simple_tests/profile/local/local_named_profile_ok1.sd0000644000175000017500000000067111503744054025646 0ustar jjjj# #=DESCRIPTION simple local (interior) named profile cases #=EXRESULT PASS # /does/not/exist { /foo rw, /foo/** rw, rw /bar, rw /bar/**, profile /bin/grep { /one rw, /one/** rw, rw /two, rw /two/**, } hat GREP { /one r, /one/** r, r /two, r /two/**, } profile true /bin/true { /three rw, /three/** rw, rw /four, rw /four/**, } profile false /bin/false { } } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_no_close_brace4.sd0000644000175000017500000000032311232012201025173 0ustar jjjj# #=DESCRIPTION A simple syntax error -- no closing brace with hat. #=EXRESULT FAIL # /usr/bin/foo { /usr/bin/foo r, /blah rw, ^hat1 { /foo rw, ^hat2 { /bar rw, } /var/log/messages w, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad7.sd0000644000175000017500000000035512661437156023070 0ustar jjjj# #=DESCRIPTION collision same profile, same namespace w/ and w/o profile keyword #=EXRESULT FAIL # vim:syntax=apparmor # Last Modified: Thu Feb 11 00:14:20 2016 # :ns:/t { /does/not/exist r, } profile :ns:/t { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad3.sd0000644000175000017500000000054311503736226023055 0ustar jjjj# #=DESCRIPTION collision same profile, same namespace #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # :/does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_basic_named_ok1.sd0000644000175000017500000000060611503744054024541 0ustar jjjj# # $Id$ #=DESCRIPTION Basic parsing test, name profile duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile exist /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profiles_dupe_2.sd0000644000175000017500000000103211503736226023077 0ustar jjjj# #=DESCRIPTION dupe profiles #=EXRESULT FAIL # /does/not/exist1 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /does/not/exist2 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /does/not/exist { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /does/not/exist2 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_no_close_brace2.sd0000644000175000017500000000027011232012201025172 0ustar jjjj# #=DESCRIPTION A simple syntax error -- no closing brace with hat. #=EXRESULT FAIL # /usr/bin/foo { /usr/bin/foo r, /blah rw, ^hat1 { /foo rw, } /var/log/messages w, apparmor-2.11.0/parser/tst/simple_tests/profile/profiles_dupe_3.sd0000644000175000017500000000126011503736226023103 0ustar jjjj# #=DESCRIPTION dupe hats in profile #=EXRESULT FAIL # /does/not/exist { ^does/not/exist1 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } ^does/not/exist2 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, ^does/not/exist3 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } ^does/not/exist2 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } ^does/not/exist4 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_no_close_brace1.sd0000644000175000017500000000017211232012201025172 0ustar jjjj# #=DESCRIPTION A simple syntax error -- no closing brace #=EXRESULT FAIL # /usr/bin/foo { /usr/bin/foo r, /blah rw, apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_ok4.sd0000644000175000017500000000125311503736226022740 0ustar jjjj# #=DESCRIPTION same unattached profile different namespaces test, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } profile :foo:unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } profile :bar:unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_ok3.sd0000644000175000017500000000435011503736226021206 0ustar jjjj# #=DESCRIPTION Basic test that re profile names are allowed in quotes #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # "/ **" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } "/ *" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } "/ ?" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } "/ [ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } "/ [^ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile "a **" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile "a *" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile "a ?" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile "a [ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile "a [^ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/entry_mods_audit_ok1.sd0000644000175000017500000000045611232012201024125 0ustar jjjj# #=DESCRIPTION test audit flag for file rules #=EXRESULT PASS # /usr/bin/foo { audit /foo rw, audit /foo/** rw, /tmp/** rw, audit rw /bar, audit rw /bar/**, rw /var/tmp/**, audit { /one rw, /one/** rw, rw /two, rw /two/**, } audit /audit r, audit { } } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_nomode.sd0000644000175000017500000000014411232012201023434 0ustar jjjj# #=DESCRIPTION A simple syntax error #=EXRESULT FAIL # /usr/bin/foo { /usr/bin/foo r, blah, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/0000755000175000017500000000000013034613166020564 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok1.sd0000644000175000017500000000142311503736226022764 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(chroot_relative) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, chroot_relative) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(chroot_relative, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, chroot_relative) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(chroot_relative, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad_debug_1.sd0000644000175000017500000000033712535374557024424 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(debug) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad13.sd0000644000175000017500000000037012373637413023170 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(chroot_attach, chroot_no_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok3.sd0000644000175000017500000000142311503736226022766 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(mediate_deleted) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, mediate_deleted) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(mediate_deleted, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, mediate_deleted) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(mediate_deleted, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok_whitespace.sd0000644000175000017500000000102711503736226025117 0ustar jjjj# #=DESCRIPTION verify whitespace is allowed in profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist3 flags=(complain, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, } /does/not/exist4 flags = (audit , complain){ #include /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, } /does/not/exist5 flags = ( audit , complain , audit ) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist8 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad3.sd0000644000175000017500000000042512373637413023110 0ustar jjjj# #=DESCRIPTION Ensure really bad parsing fails #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(blahblab { /usr/X11R6/lib/lib*so* r /does/not/exist r } audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok.sd0000644000175000017500000000244711503736226022712 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, } /does/not/exist3 flags=(complain,audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, } /does/not/exist4 flags=(audit,complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, } /does/not/exist5 flags=(audit,complain,audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist8 r, } /does/not/exist6 (complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist7 (audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, } /does/not/exist8 (complain,audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, } /does/not/exist9 (audit,complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, } /does/not/exist10 (audit,complain,audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist8 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad6.sd0000644000175000017500000000033212373637413023110 0ustar jjjj# #=DESCRIPTION Don't accept other keyword as a flag #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist (capability) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad8.sd0000644000175000017500000000036312373637413023116 0ustar jjjj# #=DESCRIPTION Bad flags parsing should fail #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist ({{{ }} { } { } audit {{}}}{{{} {}{}{} / ^ ) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad10.sd0000644000175000017500000000037412373637413023171 0ustar jjjj# #=DESCRIPTION Ensure conflicting namespace flags fail #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(chroot_relative, namepace_relative) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad_debug_3.sd0000644000175000017500000000035312535374557024424 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist3 flags=(debug,complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok6.sd0000644000175000017500000000146611503736226023000 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(no_attach_disconnected) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, no_attach_disconnected) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(no_attach_disconnected, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, no_attach_disconnected) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(no_attach_disconnected, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad_debug_2.sd0000644000175000017500000000034712535374557024426 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist2 flags=(audit,debug) { /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_hats_ok.sd0000644000175000017500000001104311503736226023721 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags with hats. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, ^FOO { #include } } /does/not/exist2 flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, ^FOO flags=(complain) { #include } ^FOO2 (complain) { #include } } /does/not/exist3 flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist3 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } } /does/not/exist4 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist4 r, ^FOO flags=(complain) { #include } ^FOO2 (complain) { #include } } /does/not/exist5 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, ^FOO { #include } } /does/not/exist6 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist6 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } } /does/not/exist7 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, ^FOO flags=(complain) { #include } ^FOO2 (complain) { #include } } /does/not/exist8 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist8 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } } /does/not/exist9 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist9 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } ^BAR { #include } ^BAZ flags=(audit) { #include } ^BAZ2 (audit) { #include } ^BIF flags=(complain) { #include } ^BIF2 (complain) { #include } ^BUZ flags=(complain,audit) { /var/log/messages r, } ^BUZ2 (complain,audit) { /var/log/messages r, } } /does/not/exist11 flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, ^FOO { #include } } /does/not/exist12 flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, ^FOO flags=(complain) { #include } ^FOO2 (complain) { #include } } /does/not/exist13 flags=(complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist3 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } } /does/not/exist14 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist4 r, ^FOO flags=(complain) { #include } ^FOO2 (complain) { #include } } /does/not/exist15 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, ^FOO { #include } } /does/not/exist16 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist6 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } } /does/not/exist17 flags=(audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, ^FOO flags=(complain) { #include } ^FOO2 (complain) { #include } } /does/not/exist18 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist8 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } } /does/not/exist19 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist9 r, ^FOO flags=(audit) { #include } ^FOO2 (audit) { #include } ^BAR { #include } ^BAZ flags=(audit) { #include } ^BAZ2 (audit) { #include } ^BIF flags=(complain) { #include } ^BIF2 (complain) { #include } ^BUZ flags=(complain,audit) { /var/log/messages r, } ^BUZ2 (complain,audit) { /var/log/messages r, } } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok9.sd0000644000175000017500000000761611503736226023006 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # #============================== /does/not/exist flags=(chroot_relative, mediate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, chroot_relative, mediate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(chroot_relative, mediate_deleted, audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, chroot_relative, mediate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(chroot_relative, mediate_deleted, complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } #------- /does/not/exist11 flags=(chroot_relative, delegate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist12 flags=(audit, chroot_relative, delegate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist13 flags=(chroot_relative, delegate_deleted, audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist14 flags=(complain, chroot_relative, delegate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist15 flags=(chroot_relative, delegate_deleted, complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } #------- /does/not/exist21 flags=(chroot_relative, attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist22 flags=(audit, chroot_relative, attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist23 flags=(chroot_relative, attach_disconnected, audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist24 flags=(complain, chroot_relative, attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist25 flags=(chroot_relative, attach_disconnected, complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } #------- /does/not/exist31 flags=(chroot_relative, no_attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist32 flags=(audit, chroot_relative, no_attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist33 flags=(chroot_relative, no_attach_disconnected, audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist34 flags=(complain, chroot_relative, no_attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist35 flags=(chroot_relative, no_attach_disconnected, complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } #------- /does/not/exist41 flags=(chroot_relative, chroot_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist42 flags=(audit, chroot_relative, chroot_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist43 flags=(chroot_relative, chroot_attach, audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist44 flags=(complain, chroot_relative, chroot_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist45 flags=(chroot_relative, chroot_attach, complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } #------- /does/not/exist51 flags=(chroot_relative, chroot_no_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist52 flags=(audit, chroot_relative, chroot_no_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist53 flags=(chroot_relative, chroot_no_attach, audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist54 flags=(complain, chroot_relative, chroot_no_attach) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist55 flags=(chroot_relative, chroot_no_attach, complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok8.sd0000644000175000017500000000143011503736226022771 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(chroot_no_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, chroot_no_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(chroot_no_attach, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, chroot_no_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(chroot_no_attach, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad4.sd0000644000175000017500000000037112373637413023111 0ustar jjjj# #=DESCRIPTION Bad flags parsing should fail #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=({{{ }} { } { } audit {{}}}{{{} {}{}{} / ^ ) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad12.sd0000644000175000017500000000042412373637413023167 0ustar jjjj# #=DESCRIPTION Ensure conflicting disconnested flags generate an error #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(attach_disconnected, no_attach_disconnected) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok7.sd0000644000175000017500000000141111503736226022767 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(chroot_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, chroot_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(chroot_attach, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, chroot_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(chroot_attach, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad16.sd0000644000175000017500000000020312475130176023163 0ustar jjjj# #=DESCRIPTION Ensure empty flags fail #=EXRESULT FAIL # vim:syntax=apparmor # /does/not/exist flags=() { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok5.sd0000644000175000017500000000144711503736226022776 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(attach_disconnected) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, attach_disconnected) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(attach_disconnected, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, attach_disconnected) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(attach_disconnected, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad19.sd0000644000175000017500000000034312475131107023166 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist3 (debug,complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist5 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad14.sd0000644000175000017500000000026312266425523023170 0ustar jjjj# #=DESCRIPTION fail if flags is not speeled correctly #=EXRESULT FAIL # vim:syntax=apparmor # /does/not/exist flogs=(audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad2.sd0000644000175000017500000000034012373637413023103 0ustar jjjj# #=DESCRIPTION Don't accept other keyword as a flag #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(capability) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad_debug_4.sd0000644000175000017500000000044112535374557024423 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist4 flags=(audit,complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, ^debug flags=(debug) { /var/log/debug rwl, } } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad5.sd0000644000175000017500000000033112475131107023076 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist (debug) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad20.sd0000644000175000017500000000045712475131107023164 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted (even if it's inside a hat) #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist4 (audit,complain) { /usr/X11R6/lib/lib*so* r, /does/not/exist7 r, ^debug (debug) { /var/log/debug rwl, } } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok4.sd0000644000175000017500000000143011503736226022765 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(delegate_deleted) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, delegate_deleted) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(delegate_deleted, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, delegate_deleted) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(delegate_deleted, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok2.sd0000644000175000017500000000144211503736226022766 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(namespace_relative) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist1 flags=(audit, namespace_relative) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist2 flags=(namespace_relative, audit) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist3 flags=(complain, namespace_relative) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } /does/not/exist4 flags=(namespace_relative, complain) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad17.sd0000644000175000017500000000022512475130176023170 0ustar jjjj# #=DESCRIPTION Ensure empty (whitespace-only) flags fail #=EXRESULT FAIL # vim:syntax=apparmor # /does/not/exist ( ) { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_ok10.sd0000644000175000017500000000047211503736226023047 0ustar jjjj# #=DESCRIPTION validate some uses of the profile flags. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(chroot_relative, mediate_deleted, attach_disconnected, chroot_attach) { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad7.sd0000644000175000017500000000041712373637413023115 0ustar jjjj# #=DESCRIPTION Ensure really bad parsing fails #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist (blahblab { /usr/X11R6/lib/lib*so* r /does/not/exist r } audit) { /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad18.sd0000644000175000017500000000034112475131107023163 0ustar jjjj# #=DESCRIPTION Ensure debug flag is no longer accepted #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist2 (audit,debug) { /usr/X11R6/lib/lib*so* r, /does/not/exist2 r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad11.sd0000644000175000017500000000040312373637413023163 0ustar jjjj# #=DESCRIPTION Ensure conflicting deletion flags cause an error #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist flags=(mediate_deleted, delegate_deleted) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/flags/flags_bad15.sd0000644000175000017500000000034112266425523023166 0ustar jjjj# #=DESCRIPTION Ensure namespace_relative and chroot_relative conflict #=EXRESULT FAIL # vim:syntax=apparmor # /does/not/exist flags=(namespace_relative, chroot_relative) { /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_no_close_brace3.sd0000644000175000017500000000027011232012201025173 0ustar jjjj# #=DESCRIPTION A simple syntax error -- no closing brace with hat. #=EXRESULT FAIL # /usr/bin/foo { /usr/bin/foo r, /blah rw, ^hat1 { /foo rw, /var/log/messages w, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad2.sd0000644000175000017500000000054611503736226023057 0ustar jjjj# #=DESCRIPTION collision same profile, same namespace #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # foo:/does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_named_ok4.sd0000644000175000017500000000445311503744054022355 0ustar jjjj# # $Id$ #=DESCRIPTION Basic test that re profile names are allowed after :ns: #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # :ns:one /** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:two /* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:three /? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:four /[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:five /[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:six /** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:seven /* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:eight /? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:nine /[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:ten /[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_ok5.sd0000644000175000017500000000433211503736226021210 0ustar jjjj# #=DESCRIPTION Basic test that re profile names are allowed that aren't trailing #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /**a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /*a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /?a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /[ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /[^ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile **a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile *a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile ?a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile [ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile [^ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_basic_ok1.sd0000644000175000017500000000054411503736226023400 0ustar jjjj# #=DESCRIPTION Basic parsing test, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_basic_ok2.sd0000644000175000017500000000054611503736226023403 0ustar jjjj# #=DESCRIPTION Basic parsing test, unattached profile #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile notattached { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_named_ok1.sd0000644000175000017500000000235311503744054022347 0ustar jjjj# # $Id$ #=DESCRIPTION Basic test that named profiles with re attachment are allowed #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile one /** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile two /* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile three /? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile four /[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile five /[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_ok1.sd0000644000175000017500000000427311503736226021210 0ustar jjjj# #=DESCRIPTION Basic test that re profile names are allowed #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile ** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile * { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile ? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile [ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile [^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_ok2.sd0000644000175000017500000000123011503736226022731 0ustar jjjj# #=DESCRIPTION same profile different namespaces test, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :foo:/does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :bar:/does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_bad1.sd0000644000175000017500000000045511503736226022355 0ustar jjjj# #=DESCRIPTION unattached profile without profile keyword #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } apparmor-2.11.0/parser/tst/simple_tests/profile/profiles_dupe_1.sd0000644000175000017500000000052511503736226023104 0ustar jjjj# #=DESCRIPTION dupe profiles #=EXRESULT FAIL # /does/not/exist { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /does/not/exist2 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /does/not/exist2 { #include /usr/X11R6/lib/lib*so* r, /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_ok4.sd0000644000175000017500000000435611503736226021215 0ustar jjjj# #=DESCRIPTION Basic test that re profile names are allowed after :ns: #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # :ns:/** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:/* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:/? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:/[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :ns:/[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :ns:[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_ok_no_rules.sd0000644000175000017500000000022011232012201023657 0ustar jjjj# #=DESCRIPTION simple syntax test -- no actual rules. #=EXRESULT PASS # /does/not/exist { } /does/not/exist2 { ^hat1 { } ^hat2 { } } apparmor-2.11.0/parser/tst/simple_tests/profile/re_named_ok5.sd0000644000175000017500000000450011503744054022347 0ustar jjjj# # $Id$ #=DESCRIPTION Basic test that re profile names are allowed that aren't trailing #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile one /**a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile two /*a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile three /?a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile four /[ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile five /[^ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile size /**a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile seven /*a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile eight /?a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile nine /[ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile ten /[^ab]a { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad8.sd0000644000175000017500000000030212661437156023061 0ustar jjjj# #=DESCRIPTION no terminating ':' for ns namespace (w/ profile keyword) #=EXRESULT FAIL # vim:syntax=apparmor # Last Modified: Thu Feb 11 00:14:20 2016 # profile :ns/t { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_no_program_name.sd0000644000175000017500000000015111232012201025314 0ustar jjjj# #=DESCRIPTION A simple syntax error -- no program #=EXRESULT FAIL # { /usr/bin/foo r, /blah rw, } apparmor-2.11.0/parser/tst/simple_tests/profile/exploding_profile.sd0000644000175000017500000000316111232012201023507 0ustar jjjj#=DESCRIPTION Test of dfa tree optimization #=EXRESULT PASS #This profile exercises the dfa tree optimization #Without working tree optimization this profile generates a dfa with 100,000s #of states and that requires several gigs, and takes hours to compute #With working tree optimization this profile generates a dfa with about 3,000 #states and takes a second or two to compute. /foo { /a/b/c/webdir/config.inc.php rw, /a/b/c/** r, /a/b/c/upload/** rw, /a/b/c/webdir/cms/files/** rw, /a/b/c/webdir/content/** rw, /a/b/c/webdir/mitarbeiter/** rw, /a/b/c/webdir/newsletter/** wr, /a/b/c/webdir/pnTemp/** rw, /a/b/c/webdir/redaxo/include/generated/articles/** rw, /a/b/c/webdir/typo3/ext/** rw, /a/b/c/webdir/wiki/images/** rw, /a/b/c/**.txt rw, /a/b/c/**.log rw, /a/b/c/webdir/**/com_docman/docman.config.php wr, /a/b/c/webdir/**/settings.php wr, /a/b/c/webdir/**.txt rw, /a/b/c/webdir/upload/**{.jpg,.pdf,.ps,.gif,.png,.ppt,.doc,.txt,.rtf} rw, /a/b/c/webdir/courses/uploaded_file*/** rw, /a/b/c/webdir/**/conf*.php rw, /a/b/c/**{cache,data,download,/ext,fileadmin,files,images,joomla,moodledata/sessions}/** rw, /a/b/c/**log{,s}/** rw, /a/b/c/**typo3{conf,temp}/** rw, /a/b/c/webdir/**/components/** rw, /a/b/c/webdir/content/**/conf/** rw, /a/b/c/webdir/**/content/** rw, /a/b/c/webdir/**/{pages,pictures,data,doc,files,languages,media}/** rw, /a/b/c/webdir/**/{pages,pictures}/** rw, /a/b/c/webdir/**/module{s,}/** rw, /a/b/c/webdir/**/{templates_c,templates,temp,tmp}/** rw, /a/b/c/webdir/**/upload/** rw, /a/b/c/webdir/**count*/** rw, /a/b/c/webdir/**/**uploads/** rw, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_named_ok1.sd0000644000175000017500000000116711503744054024103 0ustar jjjj# # $Id$ #=DESCRIPTION Basic namespace test wit named profile, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # :foo:exist /does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :foo:exist2 /does/not/exist2 { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/simple_bad_no_opening_brace1.sd0000644000175000017500000000017211232012201025524 0ustar jjjj# #=DESCRIPTION A simple syntax error -- no opening brace #=EXRESULT FAIL # /usr/bin/foo /usr/bin/foo r, /blah rw, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_ok1.sd0000644000175000017500000000201412661437156022737 0ustar jjjj# #=DESCRIPTION Basic namespace test, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # :foo:/does/not/exist { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :foo:/does/not/exist2 { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } :foo:unattached { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile :foo:unattached2 { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_named_ok2.sd0000644000175000017500000000130711503744054024100 0ustar jjjj# # $Id$ #=DESCRIPTION same named profile different namespaces test, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile exist /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :foo:exist /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } profile :bar:exist /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad6.sd0000644000175000017500000000035712661437156023071 0ustar jjjj# #=DESCRIPTION collision same profile, same namespace with profile keyword #=EXRESULT FAIL # vim:syntax=apparmor # Last Modified: Thu Feb 11 00:14:20 2016 # profile :ns:/t { /does/not/exist r, } profile :ns:/t { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_named_ok2.sd0000644000175000017500000000452111503744054022347 0ustar jjjj# # $Id$ #=DESCRIPTION Basic test that named re local profile names are allowed #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /foo//local1 /** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//local2 /* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//local3 /? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//local4 /[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//local5 /[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//local6 /** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//local7 /* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//local8 /? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//local9 /[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//local10 /[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_ok3.sd0000644000175000017500000000123311503736226022735 0ustar jjjj# #=DESCRIPTION same unattached profile different namespaces test, duplicate mode bits #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :foo:unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :bar:unattached { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_bad5.sd0000644000175000017500000000024612661437156023065 0ustar jjjj# #=DESCRIPTION namespace with no profile name #=EXRESULT FAIL # vim:syntax=apparmor # Last Modified: Thu Feb 11 00:14:20 2016 # :namespace: { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_named_ok3.sd0000644000175000017500000000451611503744054022354 0ustar jjjj# # $Id$ #=DESCRIPTION Basic test that named re profile names are allowed in quotes #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile one "/ **" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile two "/ *" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile three "/ ?" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile four "/ [ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile five "/ [^ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile six "/ **" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile seven "/ *" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile eight "/ ?" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile nine "/ [ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile ten "/ [^ab]" { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/re_ok2.sd0000644000175000017500000000436311503736226021211 0ustar jjjj# #=DESCRIPTION Basic test that re local profile names are allowed #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /foo//** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } /foo//[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//** { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//* { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//? { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//[ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } profile foo//[^ab] { #include /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, /bin/echo uxuxuxuxux, } apparmor-2.11.0/parser/tst/simple_tests/profile/profile_ns_named_ok3.sd0000644000175000017500000000233311503744054024101 0ustar jjjj# # $Id$ #=DESCRIPTION same named profile mixed with unnamed same attach different namespaces test, #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # profile /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :foo:/does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } profile :bar:/does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } profile exist /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } :foo:exist /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } profile :bar:exist /does/not/exist { /usr/X11R6/lib/lib*so* rrr, /does/not/exist r, /var/log/messages www, /tmp/sd*.foo rwrwwrll, /bin/cat pxpxpxpxpx, /bin/ls ixixixix, } apparmor-2.11.0/parser/tst/simple_tests/generated_x/0000755000175000017500000000000013034613142020307 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/change_profile/0000755000175000017500000000000013034613161020770 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_7.sd0000644000175000017500000000023512536656106024014 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_7.sd0000644000175000017500000000173312534527473023333 0ustar jjjj# #=DESCRIPTION audit deny change_profile with just re, namespace #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> :ab:*, } /usr/bin/foo2 { audit deny change_profile -> :ab:**, } /usr/bin/foo3 { audit deny change_profile -> :ab:?, } /usr/bin/foo4 { audit deny change_profile -> :ab:[ab], } /usr/bin/foo5 { audit deny change_profile -> :ab:[^ab], } /usr/bin/foo6 { audit deny change_profile -> :*:ab, } /usr/bin/foo7 { audit deny change_profile -> :**:ab, } /usr/bin/foo8 { audit deny change_profile -> :?:ab, } /usr/bin/foo9 { audit deny change_profile -> :[ab]:ab, } /usr/bin/foo10 { audit deny change_profile -> :[^ab]:ab, } /usr/bin/foo11 { audit deny change_profile -> :*:*, } /usr/bin/foo12 { audit deny change_profile -> :**:**, } /usr/bin/foo13 { audit deny change_profile -> :?:?, } /usr/bin/foo14 { audit deny change_profile -> :[ab]:[ab], } /usr/bin/foo15 { audit deny change_profile -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_4.sd0000644000175000017500000000025312536656106023653 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { deny owner change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_8.sd0000644000175000017500000000136112536656106024560 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} re with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo5 { audit change_profile @{var} -> "/bin/*", } /usr/bin/foo6 { audit change_profile @{var} -> "/bin/**", } /usr/bin/foo7 { audit change_profile @{var} -> "/bin/[ab]", } /usr/bin/foo8 { audit change_profile @{var} -> "/bin/[^ab]", } /usr/bin/foo10 { audit change_profile @{var} -> "/bin/?ab", } /usr/bin/foo11 { audit change_profile @{var} -> "/bin/ *", } /usr/bin/foo12 { audit change_profile @{var} -> "/bin/ **", } /usr/bin/foo13 { audit change_profile @{var} -> "/bin/ [ab]", } /usr/bin/foo14 { audit change_profile @{var} -> "/bin/ [^ab]", } /usr/bin/foo15 { audit change_profile @{var} -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_2.sd0000644000175000017500000000022512536656106023515 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_1.sd0000644000175000017500000000015512534527473023366 0ustar jjjj# #=DESCRIPTION allow change_profile #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bare_bad_1.sd0000644000175000017500000000017512536656106024500 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_3.sd0000644000175000017500000000020612536656106023051 0ustar jjjj# #=DESCRIPTION change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_1.sd0000644000175000017500000000021412536656106024333 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_2.sd0000644000175000017500000000244512536656106024206 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> /bin/foo//bar, } /usr/bin/foo2 { audit allow change_profile /onexec -> /bin/foo//ba*, } /usr/bin/foo3 { audit allow change_profile /onexec -> /bin/foo//ba**, } /usr/bin/foo4 { audit allow change_profile /onexec -> /bin/foo//ba?, } /usr/bin/foo5 { audit allow change_profile /onexec -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit allow change_profile /onexec -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit allow change_profile /onexec -> /bin/fo*//bar, } /usr/bin/foo8 { audit allow change_profile /onexec -> /bin/fo**//bar, } /usr/bin/foo9 { audit allow change_profile /onexec -> /bin/fo?//bar, } /usr/bin/foo10 { audit allow change_profile /onexec -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit allow change_profile /onexec -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit allow change_profile /onexec -> /bin/fo*//ba*, } /usr/bin/foo13 { audit allow change_profile /onexec -> /bin/fo**//ba**, } /usr/bin/foo14 { audit allow change_profile /onexec -> /bin/fo?//ba?, } /usr/bin/foo15 { audit allow change_profile /onexec -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit allow change_profile /onexec -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ao_badh_1.sd0000644000175000017500000000020212534527473023125 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_8.sd0000644000175000017500000000022512536656106025216 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { audit deny owner change_profile @{var} -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_2.sd0000644000175000017500000000022112536656106023626 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_7.sd0000644000175000017500000000157312534527473023174 0ustar jjjj# #=DESCRIPTION deny change_profile with just re, namespace #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> :ab:*, } /usr/bin/foo2 { deny change_profile -> :ab:**, } /usr/bin/foo3 { deny change_profile -> :ab:?, } /usr/bin/foo4 { deny change_profile -> :ab:[ab], } /usr/bin/foo5 { deny change_profile -> :ab:[^ab], } /usr/bin/foo6 { deny change_profile -> :*:ab, } /usr/bin/foo7 { deny change_profile -> :**:ab, } /usr/bin/foo8 { deny change_profile -> :?:ab, } /usr/bin/foo9 { deny change_profile -> :[ab]:ab, } /usr/bin/foo10 { deny change_profile -> :[^ab]:ab, } /usr/bin/foo11 { deny change_profile -> :*:*, } /usr/bin/foo12 { deny change_profile -> :**:**, } /usr/bin/foo13 { deny change_profile -> :?:?, } /usr/bin/foo14 { deny change_profile -> :[ab]:[ab], } /usr/bin/foo15 { deny change_profile -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_1.sd0000644000175000017500000000055212534527473023323 0ustar jjjj# #=DESCRIPTION audit deny change_profile #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> /bin/*, } /usr/bin/foo2 { audit deny change_profile -> /bin/**, } /usr/bin/foo3 { audit deny change_profile -> /bin/?, } /usr/bin/foo4 { audit deny change_profile -> /bin/[ab], } /usr/bin/foo5 { audit deny change_profile -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_8.sd0000644000175000017500000000021212536656106024705 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { owner change_profile @{var} -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_4.sd0000644000175000017500000000026612536656106023363 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { deny change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_2.sd0000644000175000017500000000022412536656106024064 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_6.sd0000644000175000017500000000022312536656106024705 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_7.sd0000644000175000017500000000031112534527473022470 0ustar jjjj# #=DESCRIPTION audit change_profile to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> "/bin/foo//bar", } /usr/bin/foo2 { audit change_profile -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_8.sd0000644000175000017500000000034212534527473022636 0ustar jjjj# #=DESCRIPTION audit allow change_profile with name space with quotes #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> ":foo:/bin/foo", } /usr/bin/foo2 { audit allow change_profile -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_8.sd0000644000175000017500000000036212536656106024770 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with name space with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> ":foo:/bin/foo", } /usr/bin/foo2 { allow change_profile @{var} -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_5.sd0000644000175000017500000000050212534527473024054 0ustar jjjj# #=DESCRIPTION allow change_profile with just res #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> *, } /usr/bin/foo2 { allow change_profile -> **, } /usr/bin/foo3 { allow change_profile -> ?, } /usr/bin/foo4 { allow change_profile -> [ab], } /usr/bin/foo5 { allow change_profile -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_6.sd0000644000175000017500000000213012536656106024204 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with just res, child profile #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> *//ab, } /usr/bin/foo2 { audit deny change_profile /onexec -> **//ab, } /usr/bin/foo3 { audit deny change_profile /onexec -> ?//ab, } /usr/bin/foo4 { audit deny change_profile /onexec -> [ab]//ab, } /usr/bin/foo5 { audit deny change_profile /onexec -> [^ab]//ab, } /usr/bin/foo6 { audit deny change_profile /onexec -> ab//*, } /usr/bin/foo7 { audit deny change_profile /onexec -> ab//**, } /usr/bin/foo8 { audit deny change_profile /onexec -> ab//?, } /usr/bin/foo9 { audit deny change_profile /onexec -> ab//[ab], } /usr/bin/foo10 { audit deny change_profile /onexec -> ab//[^ab], } /usr/bin/foo11 { audit deny change_profile /onexec -> *//*, } /usr/bin/foo12 { audit deny change_profile /onexec -> **//*, } /usr/bin/foo13 { audit deny change_profile /onexec -> ?//*, } /usr/bin/foo14 { audit deny change_profile /onexec -> [ab]//*, } /usr/bin/foo15 { audit deny change_profile /onexec -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_5.sd0000644000175000017500000000033612536656106023057 0ustar jjjj# #=DESCRIPTION change_profile /onexec with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_1.sd0000644000175000017500000000017512536656106024323 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_5.sd0000644000175000017500000000035212536656106023355 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_8.sd0000644000175000017500000000136112536656106025456 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} re with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo5 { allow change_profile @{var} -> "/bin/*", } /usr/bin/foo6 { allow change_profile @{var} -> "/bin/**", } /usr/bin/foo7 { allow change_profile @{var} -> "/bin/[ab]", } /usr/bin/foo8 { allow change_profile @{var} -> "/bin/[^ab]", } /usr/bin/foo10 { allow change_profile @{var} -> "/bin/?ab", } /usr/bin/foo11 { allow change_profile @{var} -> "/bin/ *", } /usr/bin/foo12 { allow change_profile @{var} -> "/bin/ **", } /usr/bin/foo13 { allow change_profile @{var} -> "/bin/ [ab]", } /usr/bin/foo14 { allow change_profile @{var} -> "/bin/ [^ab]", } /usr/bin/foo15 { allow change_profile @{var} -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_7.sd0000644000175000017500000000165312536656106023552 0ustar jjjj# #=DESCRIPTION change_profile /onexec with just re, namespace #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> :ab:*, } /usr/bin/foo2 { change_profile /onexec -> :ab:**, } /usr/bin/foo3 { change_profile /onexec -> :ab:?, } /usr/bin/foo4 { change_profile /onexec -> :ab:[ab], } /usr/bin/foo5 { change_profile /onexec -> :ab:[^ab], } /usr/bin/foo6 { change_profile /onexec -> :*:ab, } /usr/bin/foo7 { change_profile /onexec -> :**:ab, } /usr/bin/foo8 { change_profile /onexec -> :?:ab, } /usr/bin/foo9 { change_profile /onexec -> :[ab]:ab, } /usr/bin/foo10 { change_profile /onexec -> :[^ab]:ab, } /usr/bin/foo11 { change_profile /onexec -> :*:*, } /usr/bin/foo12 { change_profile /onexec -> :**:**, } /usr/bin/foo13 { change_profile /onexec -> :?:?, } /usr/bin/foo14 { change_profile /onexec -> :[ab]:[ab], } /usr/bin/foo15 { change_profile /onexec -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_3.sd0000644000175000017500000000021612536656106024173 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_8.sd0000644000175000017500000000023412536656106024223 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_6.sd0000644000175000017500000000164512536656106024263 0ustar jjjj# #=DESCRIPTION change_profile @{var} with just res, child profile #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> *//ab, } /usr/bin/foo2 { change_profile @{var} -> **//ab, } /usr/bin/foo3 { change_profile @{var} -> ?//ab, } /usr/bin/foo4 { change_profile @{var} -> [ab]//ab, } /usr/bin/foo5 { change_profile @{var} -> [^ab]//ab, } /usr/bin/foo6 { change_profile @{var} -> ab//*, } /usr/bin/foo7 { change_profile @{var} -> ab//**, } /usr/bin/foo8 { change_profile @{var} -> ab//?, } /usr/bin/foo9 { change_profile @{var} -> ab//[ab], } /usr/bin/foo10 { change_profile @{var} -> ab//[^ab], } /usr/bin/foo11 { change_profile @{var} -> *//*, } /usr/bin/foo12 { change_profile @{var} -> **//*, } /usr/bin/foo13 { change_profile @{var} -> ?//*, } /usr/bin/foo14 { change_profile @{var} -> [ab]//*, } /usr/bin/foo15 { change_profile @{var} -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_3.sd0000644000175000017500000000022012536656106023350 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_4.sd0000644000175000017500000000026512536656106024351 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_1.sd0000644000175000017500000000023012536656106024336 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_7.sd0000644000175000017500000000161312534527473024062 0ustar jjjj# #=DESCRIPTION allow change_profile with just re, namespace #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> :ab:*, } /usr/bin/foo2 { allow change_profile -> :ab:**, } /usr/bin/foo3 { allow change_profile -> :ab:?, } /usr/bin/foo4 { allow change_profile -> :ab:[ab], } /usr/bin/foo5 { allow change_profile -> :ab:[^ab], } /usr/bin/foo6 { allow change_profile -> :*:ab, } /usr/bin/foo7 { allow change_profile -> :**:ab, } /usr/bin/foo8 { allow change_profile -> :?:ab, } /usr/bin/foo9 { allow change_profile -> :[ab]:ab, } /usr/bin/foo10 { allow change_profile -> :[^ab]:ab, } /usr/bin/foo11 { allow change_profile -> :*:*, } /usr/bin/foo12 { allow change_profile -> :**:**, } /usr/bin/foo13 { allow change_profile -> :?:?, } /usr/bin/foo14 { allow change_profile -> :[ab]:[ab], } /usr/bin/foo15 { allow change_profile -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_5.sd0000644000175000017500000000023212536656106025211 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/da_bare_bad_1.sd0000644000175000017500000000015312534527473023740 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_2.sd0000644000175000017500000000015711232012201022137 0ustar jjjj# #=DESCRIPTION change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { change_profile -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_7.sd0000644000175000017500000000201012536656106024547 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with just re, namespace #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> :ab:*, } /usr/bin/foo2 { audit change_profile @{var} -> :ab:**, } /usr/bin/foo3 { audit change_profile @{var} -> :ab:?, } /usr/bin/foo4 { audit change_profile @{var} -> :ab:[ab], } /usr/bin/foo5 { audit change_profile @{var} -> :ab:[^ab], } /usr/bin/foo6 { audit change_profile @{var} -> :*:ab, } /usr/bin/foo7 { audit change_profile @{var} -> :**:ab, } /usr/bin/foo8 { audit change_profile @{var} -> :?:ab, } /usr/bin/foo9 { audit change_profile @{var} -> :[ab]:ab, } /usr/bin/foo10 { audit change_profile @{var} -> :[^ab]:ab, } /usr/bin/foo11 { audit change_profile @{var} -> :*:*, } /usr/bin/foo12 { audit change_profile @{var} -> :**:**, } /usr/bin/foo13 { audit change_profile @{var} -> :?:?, } /usr/bin/foo14 { audit change_profile @{var} -> :[ab]:[ab], } /usr/bin/foo15 { audit change_profile @{var} -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_1.sd0000644000175000017500000000053012536656106023535 0ustar jjjj# #=DESCRIPTION change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> /bin/*, } /usr/bin/foo2 { change_profile /onexec -> /bin/**, } /usr/bin/foo3 { change_profile /onexec -> /bin/?, } /usr/bin/foo4 { change_profile /onexec -> /bin/[ab], } /usr/bin/foo5 { change_profile /onexec -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_4.sd0000644000175000017500000000030412536656106023512 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit allow change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_7.sd0000644000175000017500000000023212536656106025047 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_6.sd0000644000175000017500000000021312536656106023505 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_1.sd0000644000175000017500000000057412536656106024743 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> /bin/*, } /usr/bin/foo2 { allow change_profile /onexec -> /bin/**, } /usr/bin/foo3 { allow change_profile /onexec -> /bin/?, } /usr/bin/foo4 { allow change_profile /onexec -> /bin/[ab], } /usr/bin/foo5 { allow change_profile /onexec -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_3.sd0000644000175000017500000000022112536656106023627 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_8.sd0000644000175000017500000000021712536656106025056 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { deny owner change_profile @{var} -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_6.sd0000644000175000017500000000200512536656106024552 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with just res, child profile #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> *//ab, } /usr/bin/foo2 { audit change_profile @{var} -> **//ab, } /usr/bin/foo3 { audit change_profile @{var} -> ?//ab, } /usr/bin/foo4 { audit change_profile @{var} -> [ab]//ab, } /usr/bin/foo5 { audit change_profile @{var} -> [^ab]//ab, } /usr/bin/foo6 { audit change_profile @{var} -> ab//*, } /usr/bin/foo7 { audit change_profile @{var} -> ab//**, } /usr/bin/foo8 { audit change_profile @{var} -> ab//?, } /usr/bin/foo9 { audit change_profile @{var} -> ab//[ab], } /usr/bin/foo10 { audit change_profile @{var} -> ab//[^ab], } /usr/bin/foo11 { audit change_profile @{var} -> *//*, } /usr/bin/foo12 { audit change_profile @{var} -> **//*, } /usr/bin/foo13 { audit change_profile @{var} -> ?//*, } /usr/bin/foo14 { audit change_profile @{var} -> [ab]//*, } /usr/bin/foo15 { audit change_profile @{var} -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_bare_ok_1.sd0000644000175000017500000000020612536656106025215 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_6.sd0000644000175000017500000000161012534527473024056 0ustar jjjj# #=DESCRIPTION allow change_profile with just res, child profile #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> *//ab, } /usr/bin/foo2 { allow change_profile -> **//ab, } /usr/bin/foo3 { allow change_profile -> ?//ab, } /usr/bin/foo4 { allow change_profile -> [ab]//ab, } /usr/bin/foo5 { allow change_profile -> [^ab]//ab, } /usr/bin/foo6 { allow change_profile -> ab//*, } /usr/bin/foo7 { allow change_profile -> ab//**, } /usr/bin/foo8 { allow change_profile -> ab//?, } /usr/bin/foo9 { allow change_profile -> ab//[ab], } /usr/bin/foo10 { allow change_profile -> ab//[^ab], } /usr/bin/foo11 { allow change_profile -> *//*, } /usr/bin/foo12 { allow change_profile -> **//*, } /usr/bin/foo13 { allow change_profile -> ?//*, } /usr/bin/foo14 { allow change_profile -> [ab]//*, } /usr/bin/foo15 { allow change_profile -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_bare_ok_1.sd0000644000175000017500000000014512536656106024042 0ustar jjjj# #=DESCRIPTION change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_5.sd0000644000175000017500000000020312536656106024171 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_6.sd0000644000175000017500000000022012536656106023647 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_5.sd0000644000175000017500000000062012536656106024205 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with just res #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> *, } /usr/bin/foo2 { audit deny change_profile /onexec -> **, } /usr/bin/foo3 { audit deny change_profile /onexec -> ?, } /usr/bin/foo4 { audit deny change_profile /onexec -> [ab], } /usr/bin/foo5 { audit deny change_profile /onexec -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_6.sd0000644000175000017500000000027412536656106023061 0ustar jjjj# #=DESCRIPTION change_profile /onexec with quotes #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> "/bin/foo", } /usr/bin/foo2 { change_profile /onexec -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_8.sd0000644000175000017500000000027611232151655022170 0ustar jjjj# #=DESCRIPTION change_profile with name space with quotes #=EXRESULT PASS # /usr/bin/foo { change_profile -> ":foo:/bin/foo", } /usr/bin/foo2 { change_profile -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_1.sd0000644000175000017500000000056012534527473023317 0ustar jjjj# #=DESCRIPTION audit allow change_profile #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> /bin/*, } /usr/bin/foo2 { audit allow change_profile -> /bin/**, } /usr/bin/foo3 { audit allow change_profile -> /bin/?, } /usr/bin/foo4 { audit allow change_profile -> /bin/[ab], } /usr/bin/foo5 { audit allow change_profile -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_7.sd0000644000175000017500000000023112536656106025051 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_6.sd0000644000175000017500000000033512536656106023523 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with quotes #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> "/bin/foo", } /usr/bin/foo2 { audit deny change_profile /onexec -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_3.sd0000644000175000017500000000020412536656106024316 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_7.sd0000644000175000017500000000030612534527473022477 0ustar jjjj# #=DESCRIPTION deny change_profile to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> "/bin/foo//bar", } /usr/bin/foo2 { deny change_profile -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_3.sd0000644000175000017500000000230412536656106024736 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> :foo:/bin/foo, } /usr/bin/foo2 { allow change_profile /onexec -> :foo:/bin/fo*, } /usr/bin/foo3 { allow change_profile /onexec -> :foo:/bin/fo**, } /usr/bin/foo4 { allow change_profile /onexec -> :foo:/bin/fo?, } /usr/bin/foo5 { allow change_profile /onexec -> :foo:/bin/fo[ab], } /usr/bin/foo6 { allow change_profile /onexec -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { allow change_profile /onexec -> :fo*:/bin/foo, } /usr/bin/foo8 { allow change_profile /onexec -> :fo**:/bin/foo, } /usr/bin/foo9 { allow change_profile /onexec -> :fo?:/bin/foo, } /usr/bin/foo10 { allow change_profile /onexec -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { allow change_profile /onexec -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { allow change_profile /onexec -> :fo*:/bin/fo*, } /usr/bin/foo13 { allow change_profile /onexec -> :fo**:/bin/fo**, } /usr/bin/foo14 { allow change_profile /onexec -> :fo?:/bin/fo?, } /usr/bin/foo15 { allow change_profile /onexec -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { allow change_profile /onexec -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_3.sd0000644000175000017500000000016611232012201022140 0ustar jjjj# #=DESCRIPTION change_profile with name space #=EXRESULT PASS # /usr/bin/foo { change_profile -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_3.sd0000644000175000017500000000022212536656106023347 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_5.sd0000644000175000017500000000035112536656106023565 0ustar jjjj# #=DESCRIPTION change_profile @{var} with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_4.sd0000644000175000017500000000031612536656106025034 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_5.sd0000644000175000017500000000033112536656106023651 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { deny owner change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_3.sd0000644000175000017500000000022112536656106023557 0ustar jjjj# #=DESCRIPTION change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_2.sd0000644000175000017500000000024012536656106024353 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_4.sd0000644000175000017500000000026712536656106024371 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_3.sd0000644000175000017500000000021612536656106023505 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ado_bad_1.sd0000644000175000017500000000020712534527473023126 0ustar jjjj# #=DESCRIPTION owner not allowed on change_profile #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_2.sd0000644000175000017500000000021312536656106023346 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_4.sd0000644000175000017500000000166212536656106024560 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { audit change_profile @{var} -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit change_profile @{var} -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit change_profile @{var} -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit change_profile @{var} -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit change_profile @{var} -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit change_profile @{var} -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit change_profile @{var} -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit change_profile @{var} -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit change_profile @{var} -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit change_profile @{var} -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit change_profile @{var} -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_4.sd0000644000175000017500000000175612536656106024730 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit deny change_profile @{var} -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit deny change_profile @{var} -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit deny change_profile @{var} -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit deny change_profile @{var} -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit deny change_profile @{var} -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit deny change_profile @{var} -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit deny change_profile @{var} -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit deny change_profile @{var} -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit deny change_profile @{var} -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit deny change_profile @{var} -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_1.sd0000644000175000017500000000024312536656106024516 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_1.sd0000644000175000017500000000016712534527473022637 0ustar jjjj# #=DESCRIPTION audit deny change_profile #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_1.sd0000644000175000017500000000022312536656106024700 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_6.sd0000644000175000017500000000034012536656106023514 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with quotes #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> "/bin/foo", } /usr/bin/foo2 { audit allow change_profile /onexec -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_2.sd0000644000175000017500000000213112536656106023535 0ustar jjjj# #=DESCRIPTION change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> /bin/foo//bar, } /usr/bin/foo2 { change_profile /onexec -> /bin/foo//ba*, } /usr/bin/foo3 { change_profile /onexec -> /bin/foo//ba**, } /usr/bin/foo4 { change_profile /onexec -> /bin/foo//ba?, } /usr/bin/foo5 { change_profile /onexec -> /bin/foo//ba[ab], } /usr/bin/foo6 { change_profile /onexec -> /bin/foo//ba[^ab], } /usr/bin/foo7 { change_profile /onexec -> /bin/fo*//bar, } /usr/bin/foo8 { change_profile /onexec -> /bin/fo**//bar, } /usr/bin/foo9 { change_profile /onexec -> /bin/fo?//bar, } /usr/bin/foo10 { change_profile /onexec -> /bin/fo[ab]//bar, } /usr/bin/foo11 { change_profile /onexec -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { change_profile /onexec -> /bin/fo*//ba*, } /usr/bin/foo13 { change_profile /onexec -> /bin/fo**//ba**, } /usr/bin/foo14 { change_profile /onexec -> /bin/fo?//ba?, } /usr/bin/foo15 { change_profile /onexec -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { change_profile /onexec -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_5.sd0000644000175000017500000000035312536656106024527 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_7.sd0000644000175000017500000000025012536656106024522 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_7.sd0000644000175000017500000000031112534527473023366 0ustar jjjj# #=DESCRIPTION allow change_profile to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> "/bin/foo//bar", } /usr/bin/foo2 { allow change_profile -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_7.sd0000644000175000017500000000021612536656106024340 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_2.sd0000644000175000017500000000024512536656106024524 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_5.sd0000644000175000017500000000036512536656106024072 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_5.sd0000644000175000017500000000034512536656106024367 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_3.sd0000644000175000017500000000242512536656106024721 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> :foo:/bin/foo, } /usr/bin/foo2 { audit deny change_profile @{var} -> :foo:/bin/fo*, } /usr/bin/foo3 { audit deny change_profile @{var} -> :foo:/bin/fo**, } /usr/bin/foo4 { audit deny change_profile @{var} -> :foo:/bin/fo?, } /usr/bin/foo5 { audit deny change_profile @{var} -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit deny change_profile @{var} -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit deny change_profile @{var} -> :fo*:/bin/foo, } /usr/bin/foo8 { audit deny change_profile @{var} -> :fo**:/bin/foo, } /usr/bin/foo9 { audit deny change_profile @{var} -> :fo?:/bin/foo, } /usr/bin/foo10 { audit deny change_profile @{var} -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit deny change_profile @{var} -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit deny change_profile @{var} -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit deny change_profile @{var} -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit deny change_profile @{var} -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit deny change_profile @{var} -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit deny change_profile @{var} -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_8.sd0000644000175000017500000000022612536656106024506 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { audit deny owner change_profile /onexec -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_8.sd0000644000175000017500000000121312534527473023164 0ustar jjjj# #=DESCRIPTION deny change_profile re with quotes #=EXRESULT PASS # /usr/bin/foo5 { deny change_profile -> "/bin/*", } /usr/bin/foo6 { deny change_profile -> "/bin/**", } /usr/bin/foo7 { deny change_profile -> "/bin/[ab]", } /usr/bin/foo8 { deny change_profile -> "/bin/[^ab]", } /usr/bin/foo10 { deny change_profile -> "/bin/?ab", } /usr/bin/foo11 { deny change_profile -> "/bin/ *", } /usr/bin/foo12 { deny change_profile -> "/bin/ **", } /usr/bin/foo13 { deny change_profile -> "/bin/ [ab]", } /usr/bin/foo14 { deny change_profile -> "/bin/ [^ab]", } /usr/bin/foo15 { deny change_profile -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_5.sd0000644000175000017500000000021112536656106024331 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_7.sd0000644000175000017500000000022712536656106025040 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_8.sd0000644000175000017500000000133012534527473023322 0ustar jjjj# #=DESCRIPTION audit allow change_profile re with quotes #=EXRESULT PASS # /usr/bin/foo5 { audit allow change_profile -> "/bin/*", } /usr/bin/foo6 { audit allow change_profile -> "/bin/**", } /usr/bin/foo7 { audit allow change_profile -> "/bin/[ab]", } /usr/bin/foo8 { audit allow change_profile -> "/bin/[^ab]", } /usr/bin/foo10 { audit allow change_profile -> "/bin/?ab", } /usr/bin/foo11 { audit allow change_profile -> "/bin/ *", } /usr/bin/foo12 { audit allow change_profile -> "/bin/ **", } /usr/bin/foo13 { audit allow change_profile -> "/bin/ [ab]", } /usr/bin/foo14 { audit allow change_profile -> "/bin/ [^ab]", } /usr/bin/foo15 { audit allow change_profile -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_8.sd0000644000175000017500000000025012536656106024523 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_3.sd0000644000175000017500000000022312536656106023647 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_6.sd0000644000175000017500000000175012534527473023326 0ustar jjjj# #=DESCRIPTION audit allow change_profile with just res, child profile #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> *//ab, } /usr/bin/foo2 { audit allow change_profile -> **//ab, } /usr/bin/foo3 { audit allow change_profile -> ?//ab, } /usr/bin/foo4 { audit allow change_profile -> [ab]//ab, } /usr/bin/foo5 { audit allow change_profile -> [^ab]//ab, } /usr/bin/foo6 { audit allow change_profile -> ab//*, } /usr/bin/foo7 { audit allow change_profile -> ab//**, } /usr/bin/foo8 { audit allow change_profile -> ab//?, } /usr/bin/foo9 { audit allow change_profile -> ab//[ab], } /usr/bin/foo10 { audit allow change_profile -> ab//[^ab], } /usr/bin/foo11 { audit allow change_profile -> *//*, } /usr/bin/foo12 { audit allow change_profile -> **//*, } /usr/bin/foo13 { audit allow change_profile -> ?//*, } /usr/bin/foo14 { audit allow change_profile -> [ab]//*, } /usr/bin/foo15 { audit allow change_profile -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_1.sd0000644000175000017500000000022712536656106025032 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_3.sd0000644000175000017500000000023212536656106024702 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_5.sd0000644000175000017500000000034312536656106024347 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_8.sd0000644000175000017500000000134312536656106024052 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec re with quotes #=EXRESULT PASS # /usr/bin/foo5 { deny change_profile /onexec -> "/bin/*", } /usr/bin/foo6 { deny change_profile /onexec -> "/bin/**", } /usr/bin/foo7 { deny change_profile /onexec -> "/bin/[ab]", } /usr/bin/foo8 { deny change_profile /onexec -> "/bin/[^ab]", } /usr/bin/foo10 { deny change_profile /onexec -> "/bin/?ab", } /usr/bin/foo11 { deny change_profile /onexec -> "/bin/ *", } /usr/bin/foo12 { deny change_profile /onexec -> "/bin/ **", } /usr/bin/foo13 { deny change_profile /onexec -> "/bin/ [ab]", } /usr/bin/foo14 { deny change_profile /onexec -> "/bin/ [^ab]", } /usr/bin/foo15 { deny change_profile /onexec -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_7.sd0000644000175000017500000000037212536656106024236 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} to a hat with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> "/bin/foo//bar", } /usr/bin/foo2 { audit deny change_profile @{var} -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/stacking_ok_2.sd0000644000175000017500000000015112673100443024034 0ustar jjjj# #=DESCRIPTION change_profile w/ stacking #=EXRESULT PASS # /usr/bin/foo { change_profile -> &bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_6.sd0000644000175000017500000000021412536656106024340 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_1.sd0000644000175000017500000000060312536656106025445 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> /bin/*, } /usr/bin/foo2 { allow change_profile @{var} -> /bin/**, } /usr/bin/foo3 { allow change_profile @{var} -> /bin/?, } /usr/bin/foo4 { allow change_profile @{var} -> /bin/[ab], } /usr/bin/foo5 { allow change_profile @{var} -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_7.sd0000644000175000017500000000175312534527473023332 0ustar jjjj# #=DESCRIPTION audit allow change_profile with just re, namespace #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> :ab:*, } /usr/bin/foo2 { audit allow change_profile -> :ab:**, } /usr/bin/foo3 { audit allow change_profile -> :ab:?, } /usr/bin/foo4 { audit allow change_profile -> :ab:[ab], } /usr/bin/foo5 { audit allow change_profile -> :ab:[^ab], } /usr/bin/foo6 { audit allow change_profile -> :*:ab, } /usr/bin/foo7 { audit allow change_profile -> :**:ab, } /usr/bin/foo8 { audit allow change_profile -> :?:ab, } /usr/bin/foo9 { audit allow change_profile -> :[ab]:ab, } /usr/bin/foo10 { audit allow change_profile -> :[^ab]:ab, } /usr/bin/foo11 { audit allow change_profile -> :*:*, } /usr/bin/foo12 { audit allow change_profile -> :**:**, } /usr/bin/foo13 { audit allow change_profile -> :?:?, } /usr/bin/foo14 { audit allow change_profile -> :[ab]:[ab], } /usr/bin/foo15 { audit allow change_profile -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_8.sd0000644000175000017500000000022012536656106023505 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_2.sd0000644000175000017500000000206712534527473023163 0ustar jjjj# #=DESCRIPTION audit change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> /bin/foo//bar, } /usr/bin/foo2 { audit change_profile -> /bin/foo//ba*, } /usr/bin/foo3 { audit change_profile -> /bin/foo//ba**, } /usr/bin/foo4 { audit change_profile -> /bin/foo//ba?, } /usr/bin/foo5 { audit change_profile -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit change_profile -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit change_profile -> /bin/fo*//bar, } /usr/bin/foo8 { audit change_profile -> /bin/fo**//bar, } /usr/bin/foo9 { audit change_profile -> /bin/fo?//bar, } /usr/bin/foo10 { audit change_profile -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit change_profile -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit change_profile -> /bin/fo*//ba*, } /usr/bin/foo13 { audit change_profile -> /bin/fo**//ba**, } /usr/bin/foo14 { audit change_profile -> /bin/fo?//ba?, } /usr/bin/foo15 { audit change_profile -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit change_profile -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_8.sd0000644000175000017500000000021512536656106025036 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo5 { deny audit change_profile @{var} -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_4.sd0000644000175000017500000000024612536656106023511 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { owner change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/safe_ok_1.sd0000644000175000017500000000017712723373114023161 0ustar jjjj# #=DESCRIPTION change_profile w/ safe modifier #=EXRESULT PASS # /usr/bin/foo { change_profile safe /usr/bin/bar -> baz, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_5.sd0000644000175000017500000000054012534527473023324 0ustar jjjj# #=DESCRIPTION audit deny change_profile with just res #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> *, } /usr/bin/foo2 { audit deny change_profile -> **, } /usr/bin/foo3 { audit deny change_profile -> ?, } /usr/bin/foo4 { audit deny change_profile -> [ab], } /usr/bin/foo5 { audit deny change_profile -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_5.sd0000644000175000017500000000034012536656106024216 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { owner change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_3.sd0000644000175000017500000000225712536656106024563 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> :foo:/bin/foo, } /usr/bin/foo2 { deny change_profile @{var} -> :foo:/bin/fo*, } /usr/bin/foo3 { deny change_profile @{var} -> :foo:/bin/fo**, } /usr/bin/foo4 { deny change_profile @{var} -> :foo:/bin/fo?, } /usr/bin/foo5 { deny change_profile @{var} -> :foo:/bin/fo[ab], } /usr/bin/foo6 { deny change_profile @{var} -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { deny change_profile @{var} -> :fo*:/bin/foo, } /usr/bin/foo8 { deny change_profile @{var} -> :fo**:/bin/foo, } /usr/bin/foo9 { deny change_profile @{var} -> :fo?:/bin/foo, } /usr/bin/foo10 { deny change_profile @{var} -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { deny change_profile @{var} -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { deny change_profile @{var} -> :fo*:/bin/fo*, } /usr/bin/foo13 { deny change_profile @{var} -> :fo**:/bin/fo**, } /usr/bin/foo14 { deny change_profile @{var} -> :fo?:/bin/fo?, } /usr/bin/foo15 { deny change_profile @{var} -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { deny change_profile @{var} -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_5.sd0000644000175000017500000000032412536656106023507 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { owner change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_8.sd0000644000175000017500000000036712536656106023532 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with name space with quotes #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> ":foo:/bin/foo", } /usr/bin/foo2 { audit deny change_profile /onexec -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_3.sd0000644000175000017500000000022212536656106024245 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aao_bad_6.sd0000644000175000017500000000021212534527473023124 0ustar jjjj# #=DESCRIPTION owner not allowed on change_profile #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_6.sd0000644000175000017500000000024411232151655022161 0ustar jjjj# #=DESCRIPTION change_profile with quotes #=EXRESULT PASS # /usr/bin/foo { change_profile -> "/bin/foo", } /usr/bin/foo2 { change_profile -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_bare_ok_1.sd0000644000175000017500000000014112534527473023454 0ustar jjjj# #=DESCRIPTION audit change_profile #=EXRESULT PASS # /usr/bin/foo { audit change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_1.sd0000644000175000017500000000053712536656106024255 0ustar jjjj# #=DESCRIPTION change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> /bin/*, } /usr/bin/foo2 { change_profile @{var} -> /bin/**, } /usr/bin/foo3 { change_profile @{var} -> /bin/?, } /usr/bin/foo4 { change_profile @{var} -> /bin/[ab], } /usr/bin/foo5 { change_profile @{var} -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_8.sd0000644000175000017500000000125712536656106024264 0ustar jjjj# #=DESCRIPTION change_profile @{var} re with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo5 { change_profile @{var} -> "/bin/*", } /usr/bin/foo6 { change_profile @{var} -> "/bin/**", } /usr/bin/foo7 { change_profile @{var} -> "/bin/[ab]", } /usr/bin/foo8 { change_profile @{var} -> "/bin/[^ab]", } /usr/bin/foo10 { change_profile @{var} -> "/bin/?ab", } /usr/bin/foo11 { change_profile @{var} -> "/bin/ *", } /usr/bin/foo12 { change_profile @{var} -> "/bin/ **", } /usr/bin/foo13 { change_profile @{var} -> "/bin/ [ab]", } /usr/bin/foo14 { change_profile @{var} -> "/bin/ [^ab]", } /usr/bin/foo15 { change_profile @{var} -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_6.sd0000644000175000017500000000026612534527473023376 0ustar jjjj# #=DESCRIPTION allow change_profile with quotes #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> "/bin/foo", } /usr/bin/foo2 { allow change_profile -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_3.sd0000644000175000017500000000222112534527473023320 0ustar jjjj# #=DESCRIPTION audit deny change_profile with name space #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> :foo:/bin/foo, } /usr/bin/foo2 { audit deny change_profile -> :foo:/bin/fo*, } /usr/bin/foo3 { audit deny change_profile -> :foo:/bin/fo**, } /usr/bin/foo4 { audit deny change_profile -> :foo:/bin/fo?, } /usr/bin/foo5 { audit deny change_profile -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit deny change_profile -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit deny change_profile -> :fo*:/bin/foo, } /usr/bin/foo8 { audit deny change_profile -> :fo**:/bin/foo, } /usr/bin/foo9 { audit deny change_profile -> :fo?:/bin/foo, } /usr/bin/foo10 { audit deny change_profile -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit deny change_profile -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit deny change_profile -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit deny change_profile -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit deny change_profile -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit deny change_profile -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit deny change_profile -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_6.sd0000644000175000017500000000173012534527473023327 0ustar jjjj# #=DESCRIPTION audit deny change_profile with just res, child profile #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> *//ab, } /usr/bin/foo2 { audit deny change_profile -> **//ab, } /usr/bin/foo3 { audit deny change_profile -> ?//ab, } /usr/bin/foo4 { audit deny change_profile -> [ab]//ab, } /usr/bin/foo5 { audit deny change_profile -> [^ab]//ab, } /usr/bin/foo6 { audit deny change_profile -> ab//*, } /usr/bin/foo7 { audit deny change_profile -> ab//**, } /usr/bin/foo8 { audit deny change_profile -> ab//?, } /usr/bin/foo9 { audit deny change_profile -> ab//[ab], } /usr/bin/foo10 { audit deny change_profile -> ab//[^ab], } /usr/bin/foo11 { audit deny change_profile -> *//*, } /usr/bin/foo12 { audit deny change_profile -> **//*, } /usr/bin/foo13 { audit deny change_profile -> ?//*, } /usr/bin/foo14 { audit deny change_profile -> [ab]//*, } /usr/bin/foo15 { audit deny change_profile -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_1.sd0000644000175000017500000000064012536656106024200 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> /bin/*, } /usr/bin/foo2 { audit allow change_profile /onexec -> /bin/**, } /usr/bin/foo3 { audit allow change_profile /onexec -> /bin/?, } /usr/bin/foo4 { audit allow change_profile /onexec -> /bin/[ab], } /usr/bin/foo5 { audit allow change_profile /onexec -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_5.sd0000644000175000017500000000052512536656106024256 0ustar jjjj# #=DESCRIPTION change_profile @{var} with just res #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> *, } /usr/bin/foo2 { change_profile @{var} -> **, } /usr/bin/foo3 { change_profile @{var} -> ?, } /usr/bin/foo4 { change_profile @{var} -> [ab], } /usr/bin/foo5 { change_profile @{var} -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_3.sd0000644000175000017500000000172611232151655022652 0ustar jjjj# #=DESCRIPTION change_profile with name space #=EXRESULT PASS # /usr/bin/foo { change_profile -> :foo:/bin/foo, } /usr/bin/foo2 { change_profile -> :foo:/bin/fo*, } /usr/bin/foo3 { change_profile -> :foo:/bin/fo**, } /usr/bin/foo4 { change_profile -> :foo:/bin/fo?, } /usr/bin/foo5 { change_profile -> :foo:/bin/fo[ab], } /usr/bin/foo6 { change_profile -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { change_profile -> :fo*:/bin/foo, } /usr/bin/foo8 { change_profile -> :fo**:/bin/foo, } /usr/bin/foo9 { change_profile -> :fo?:/bin/foo, } /usr/bin/foo10 { change_profile -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { change_profile -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { change_profile -> :fo*:/bin/fo*, } /usr/bin/foo13 { change_profile -> :fo**:/bin/fo**, } /usr/bin/foo14 { change_profile -> :fo?:/bin/fo?, } /usr/bin/foo15 { change_profile -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { change_profile -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_4.sd0000644000175000017500000000026412534527473022635 0ustar jjjj# #=DESCRIPTION audit allow change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit allow change_profile -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_1.sd0000644000175000017500000000021712536656106023645 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_1.sd0000644000175000017500000000021612536656106023647 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_bare_ok_1.sd0000644000175000017500000000015312534527473023623 0ustar jjjj# #=DESCRIPTION audit deny change_profile #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_5.sd0000644000175000017500000000022512536656106025047 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_8.sd0000644000175000017500000000033712534527473022645 0ustar jjjj# #=DESCRIPTION audit deny change_profile with name space with quotes #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> ":foo:/bin/foo", } /usr/bin/foo2 { audit deny change_profile -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_5.sd0000644000175000017500000000031611232012201022137 0ustar jjjj# #=DESCRIPTION change_profile with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_8.sd0000644000175000017500000000122612534527473024063 0ustar jjjj# #=DESCRIPTION allow change_profile re with quotes #=EXRESULT PASS # /usr/bin/foo5 { allow change_profile -> "/bin/*", } /usr/bin/foo6 { allow change_profile -> "/bin/**", } /usr/bin/foo7 { allow change_profile -> "/bin/[ab]", } /usr/bin/foo8 { allow change_profile -> "/bin/[^ab]", } /usr/bin/foo10 { allow change_profile -> "/bin/?ab", } /usr/bin/foo11 { allow change_profile -> "/bin/ *", } /usr/bin/foo12 { allow change_profile -> "/bin/ **", } /usr/bin/foo13 { allow change_profile -> "/bin/ [ab]", } /usr/bin/foo14 { allow change_profile -> "/bin/ [^ab]", } /usr/bin/foo15 { allow change_profile -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_2.sd0000644000175000017500000000024012536656106024223 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_8.sd0000644000175000017500000000134612536656106024566 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} re with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo5 { deny change_profile @{var} -> "/bin/*", } /usr/bin/foo6 { deny change_profile @{var} -> "/bin/**", } /usr/bin/foo7 { deny change_profile @{var} -> "/bin/[ab]", } /usr/bin/foo8 { deny change_profile @{var} -> "/bin/[^ab]", } /usr/bin/foo10 { deny change_profile @{var} -> "/bin/?ab", } /usr/bin/foo11 { deny change_profile @{var} -> "/bin/ *", } /usr/bin/foo12 { deny change_profile @{var} -> "/bin/ **", } /usr/bin/foo13 { deny change_profile @{var} -> "/bin/ [ab]", } /usr/bin/foo14 { deny change_profile @{var} -> "/bin/ [^ab]", } /usr/bin/foo15 { deny change_profile @{var} -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_6.sd0000644000175000017500000000021612536656106023636 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_1.sd0000644000175000017500000000023612536656106025211 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_3.sd0000644000175000017500000000224212534527473023320 0ustar jjjj# #=DESCRIPTION audit allow change_profile with name space #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> :foo:/bin/foo, } /usr/bin/foo2 { audit allow change_profile -> :foo:/bin/fo*, } /usr/bin/foo3 { audit allow change_profile -> :foo:/bin/fo**, } /usr/bin/foo4 { audit allow change_profile -> :foo:/bin/fo?, } /usr/bin/foo5 { audit allow change_profile -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit allow change_profile -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit allow change_profile -> :fo*:/bin/foo, } /usr/bin/foo8 { audit allow change_profile -> :fo**:/bin/foo, } /usr/bin/foo9 { audit allow change_profile -> :fo?:/bin/foo, } /usr/bin/foo10 { audit allow change_profile -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit allow change_profile -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit allow change_profile -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit allow change_profile -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit allow change_profile -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit allow change_profile -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit allow change_profile -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_4.sd0000644000175000017500000000155212536656106024256 0ustar jjjj# #=DESCRIPTION change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { change_profile @{var} -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { change_profile @{var} -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { change_profile @{var} -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { change_profile @{var} -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { change_profile @{var} -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { change_profile @{var} -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { change_profile @{var} -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { change_profile @{var} -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { change_profile @{var} -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { change_profile @{var} -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { change_profile @{var} -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_1.sd0000644000175000017500000000060312536656106024547 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> /bin/*, } /usr/bin/foo2 { audit change_profile @{var} -> /bin/**, } /usr/bin/foo3 { audit change_profile @{var} -> /bin/?, } /usr/bin/foo4 { audit change_profile @{var} -> /bin/[ab], } /usr/bin/foo5 { audit change_profile @{var} -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_bare_ok_1.sd0000644000175000017500000000015712536656106024350 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_3.sd0000644000175000017500000000021612534527473022631 0ustar jjjj# #=DESCRIPTION audit allow change_profile with name space #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_4.sd0000644000175000017500000000027012536656106024251 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { allow change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_5.sd0000644000175000017500000000036512536656106024770 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { allow change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_5.sd0000644000175000017500000000035412536656106024525 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_7.sd0000644000175000017500000000031712536656106023060 0ustar jjjj# #=DESCRIPTION change_profile /onexec to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> "/bin/foo//bar", } /usr/bin/foo2 { change_profile /onexec -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_3.sd0000644000175000017500000000024612536656106025211 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_3.sd0000644000175000017500000000023212536656106024214 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_2.sd0000644000175000017500000000204612534527473023163 0ustar jjjj# #=DESCRIPTION deny change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> /bin/foo//bar, } /usr/bin/foo2 { deny change_profile -> /bin/foo//ba*, } /usr/bin/foo3 { deny change_profile -> /bin/foo//ba**, } /usr/bin/foo4 { deny change_profile -> /bin/foo//ba?, } /usr/bin/foo5 { deny change_profile -> /bin/foo//ba[ab], } /usr/bin/foo6 { deny change_profile -> /bin/foo//ba[^ab], } /usr/bin/foo7 { deny change_profile -> /bin/fo*//bar, } /usr/bin/foo8 { deny change_profile -> /bin/fo**//bar, } /usr/bin/foo9 { deny change_profile -> /bin/fo?//bar, } /usr/bin/foo10 { deny change_profile -> /bin/fo[ab]//bar, } /usr/bin/foo11 { deny change_profile -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { deny change_profile -> /bin/fo*//ba*, } /usr/bin/foo13 { deny change_profile -> /bin/fo**//ba**, } /usr/bin/foo14 { deny change_profile -> /bin/fo?//ba?, } /usr/bin/foo15 { deny change_profile -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { deny change_profile -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_6.sd0000644000175000017500000000031612536656106023356 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with quotes #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> "/bin/foo", } /usr/bin/foo2 { audit change_profile /onexec -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_2.sd0000644000175000017500000000022312536656106024334 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/safe_ok_2.sd0000644000175000017500000000017012723373114023153 0ustar jjjj# #=DESCRIPTION change_profile w/ safe modifier #=EXRESULT PASS # /usr/bin/foo { change_profile safe /usr/bin/bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_8.sd0000644000175000017500000000024712536656106024534 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_7.sd0000644000175000017500000000022412536656106024500 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_3.sd0000644000175000017500000000230412536656106024040 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> :foo:/bin/foo, } /usr/bin/foo2 { audit change_profile /onexec -> :foo:/bin/fo*, } /usr/bin/foo3 { audit change_profile /onexec -> :foo:/bin/fo**, } /usr/bin/foo4 { audit change_profile /onexec -> :foo:/bin/fo?, } /usr/bin/foo5 { audit change_profile /onexec -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit change_profile /onexec -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit change_profile /onexec -> :fo*:/bin/foo, } /usr/bin/foo8 { audit change_profile /onexec -> :fo**:/bin/foo, } /usr/bin/foo9 { audit change_profile /onexec -> :fo?:/bin/foo, } /usr/bin/foo10 { audit change_profile /onexec -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit change_profile /onexec -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit change_profile /onexec -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit change_profile /onexec -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit change_profile /onexec -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit change_profile /onexec -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit change_profile /onexec -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_4.sd0000644000175000017500000000164512536656106024053 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { deny change_profile /onexec -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { deny change_profile /onexec -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { deny change_profile /onexec -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { deny change_profile /onexec -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { deny change_profile /onexec -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { deny change_profile /onexec -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { deny change_profile /onexec -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { deny change_profile /onexec -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { deny change_profile /onexec -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { deny change_profile /onexec -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { deny change_profile /onexec -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_7.sd0000644000175000017500000000022312536656106023635 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_3.sd0000644000175000017500000000022312536656106024335 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_7.sd0000644000175000017500000000034112536656106024253 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> "/bin/foo//bar", } /usr/bin/foo2 { allow change_profile /onexec -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_6.sd0000644000175000017500000000022212536656106024500 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_1.sd0000644000175000017500000000023712536656106025207 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_4.sd0000644000175000017500000000030112536656106024062 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { deny change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_6.sd0000644000175000017500000000023512536656106024363 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_7.sd0000644000175000017500000000035012536656106024071 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} to a hat with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> "/bin/foo//bar", } /usr/bin/foo2 { deny change_profile @{var} -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_4.sd0000644000175000017500000000030312536656106024061 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_1.sd0000644000175000017500000000064112536656106024715 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> /bin/*, } /usr/bin/foo2 { audit deny change_profile @{var} -> /bin/**, } /usr/bin/foo3 { audit deny change_profile @{var} -> /bin/?, } /usr/bin/foo4 { audit deny change_profile @{var} -> /bin/[ab], } /usr/bin/foo5 { audit deny change_profile @{var} -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_2.sd0000644000175000017500000000020412536656106024315 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_6.sd0000644000175000017500000000031312536656106023356 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with quotes #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> "/bin/foo", } /usr/bin/foo2 { deny change_profile /onexec -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_3.sd0000644000175000017500000000230012536656106025443 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> :foo:/bin/foo, } /usr/bin/foo2 { allow change_profile @{var} -> :foo:/bin/fo*, } /usr/bin/foo3 { allow change_profile @{var} -> :foo:/bin/fo**, } /usr/bin/foo4 { allow change_profile @{var} -> :foo:/bin/fo?, } /usr/bin/foo5 { allow change_profile @{var} -> :foo:/bin/fo[ab], } /usr/bin/foo6 { allow change_profile @{var} -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { allow change_profile @{var} -> :fo*:/bin/foo, } /usr/bin/foo8 { allow change_profile @{var} -> :fo**:/bin/foo, } /usr/bin/foo9 { allow change_profile @{var} -> :fo?:/bin/foo, } /usr/bin/foo10 { allow change_profile @{var} -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { allow change_profile @{var} -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { allow change_profile @{var} -> :fo*:/bin/fo*, } /usr/bin/foo13 { allow change_profile @{var} -> :fo**:/bin/fo**, } /usr/bin/foo14 { allow change_profile @{var} -> :fo?:/bin/fo?, } /usr/bin/foo15 { allow change_profile @{var} -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { allow change_profile @{var} -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_5.sd0000644000175000017500000000033712536656106024020 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { audit deny owner change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/unsafe_ok_3.sd0000644000175000017500000000023212723373114023516 0ustar jjjj# #=DESCRIPTION change_profile w/ unsafe modifier and "unsafe" target #=EXRESULT PASS # /usr/bin/foo { change_profile unsafe /usr/bin/bar -> unsafe, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_1.sd0000644000175000017500000000017512536656106024252 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/unsafe_ok_2.sd0000644000175000017500000000017412723373114023522 0ustar jjjj# #=DESCRIPTION change_profile w/ unsafe modifier #=EXRESULT PASS # /usr/bin/foo { change_profile unsafe /usr/bin/bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_1.sd0000644000175000017500000000050612534527473023161 0ustar jjjj# #=DESCRIPTION deny change_profile #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> /bin/*, } /usr/bin/foo2 { deny change_profile -> /bin/**, } /usr/bin/foo3 { deny change_profile -> /bin/?, } /usr/bin/foo4 { deny change_profile -> /bin/[ab], } /usr/bin/foo5 { deny change_profile -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_1.sd0000644000175000017500000000023212536656106024356 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_8.sd0000644000175000017500000000022512536656106023656 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/bad_outside_1.sd0000644000175000017500000000015112611240354024017 0ustar jjjj# #=DESCRIPTION change_profile rule outside of a profile #=EXRESULT FAIL # change_profile -> /bin/foo, apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_3.sd0000644000175000017500000000207412534527473023162 0ustar jjjj# #=DESCRIPTION audit change_profile with name space #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> :foo:/bin/foo, } /usr/bin/foo2 { audit change_profile -> :foo:/bin/fo*, } /usr/bin/foo3 { audit change_profile -> :foo:/bin/fo**, } /usr/bin/foo4 { audit change_profile -> :foo:/bin/fo?, } /usr/bin/foo5 { audit change_profile -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit change_profile -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit change_profile -> :fo*:/bin/foo, } /usr/bin/foo8 { audit change_profile -> :fo**:/bin/foo, } /usr/bin/foo9 { audit change_profile -> :fo?:/bin/foo, } /usr/bin/foo10 { audit change_profile -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit change_profile -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit change_profile -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit change_profile -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit change_profile -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit change_profile -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit change_profile -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/o_bad_1.sd0000644000175000017500000000017412534527473022624 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile #=EXRESULT FAIL # /usr/bin/foo { owner change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_3.sd0000644000175000017500000000021412534527473022632 0ustar jjjj# #=DESCRIPTION audit deny change_profile with name space #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_7.sd0000644000175000017500000000213312536656106024210 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with just re, namespace #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> :ab:*, } /usr/bin/foo2 { audit deny change_profile /onexec -> :ab:**, } /usr/bin/foo3 { audit deny change_profile /onexec -> :ab:?, } /usr/bin/foo4 { audit deny change_profile /onexec -> :ab:[ab], } /usr/bin/foo5 { audit deny change_profile /onexec -> :ab:[^ab], } /usr/bin/foo6 { audit deny change_profile /onexec -> :*:ab, } /usr/bin/foo7 { audit deny change_profile /onexec -> :**:ab, } /usr/bin/foo8 { audit deny change_profile /onexec -> :?:ab, } /usr/bin/foo9 { audit deny change_profile /onexec -> :[ab]:ab, } /usr/bin/foo10 { audit deny change_profile /onexec -> :[^ab]:ab, } /usr/bin/foo11 { audit deny change_profile /onexec -> :*:*, } /usr/bin/foo12 { audit deny change_profile /onexec -> :**:**, } /usr/bin/foo13 { audit deny change_profile /onexec -> :?:?, } /usr/bin/foo14 { audit deny change_profile /onexec -> :[ab]:[ab], } /usr/bin/foo15 { audit deny change_profile /onexec -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_2.sd0000644000175000017500000000021612536656106024172 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_3.sd0000644000175000017500000000023512536656106024064 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_8.sd0000644000175000017500000000023312536656106024016 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_2.sd0000644000175000017500000000022312536656106023646 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_5.sd0000644000175000017500000000017112536656106024323 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_7.sd0000644000175000017500000000023312536656106024015 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_4.sd0000644000175000017500000000166212536656106025456 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { allow change_profile @{var} -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { allow change_profile @{var} -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { allow change_profile @{var} -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { allow change_profile @{var} -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { allow change_profile @{var} -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { allow change_profile @{var} -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { allow change_profile @{var} -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { allow change_profile @{var} -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { allow change_profile @{var} -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { allow change_profile @{var} -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { allow change_profile @{var} -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_5.sd0000644000175000017500000000055412536656106024052 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with just res #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> *, } /usr/bin/foo2 { deny change_profile /onexec -> **, } /usr/bin/foo3 { deny change_profile /onexec -> ?, } /usr/bin/foo4 { deny change_profile /onexec -> [ab], } /usr/bin/foo5 { deny change_profile /onexec -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_6.sd0000644000175000017500000000201012536656106024035 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with just res, child profile #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> *//ab, } /usr/bin/foo2 { audit change_profile /onexec -> **//ab, } /usr/bin/foo3 { audit change_profile /onexec -> ?//ab, } /usr/bin/foo4 { audit change_profile /onexec -> [ab]//ab, } /usr/bin/foo5 { audit change_profile /onexec -> [^ab]//ab, } /usr/bin/foo6 { audit change_profile /onexec -> ab//*, } /usr/bin/foo7 { audit change_profile /onexec -> ab//**, } /usr/bin/foo8 { audit change_profile /onexec -> ab//?, } /usr/bin/foo9 { audit change_profile /onexec -> ab//[ab], } /usr/bin/foo10 { audit change_profile /onexec -> ab//[^ab], } /usr/bin/foo11 { audit change_profile /onexec -> *//*, } /usr/bin/foo12 { audit change_profile /onexec -> **//*, } /usr/bin/foo13 { audit change_profile /onexec -> ?//*, } /usr/bin/foo14 { audit change_profile /onexec -> [ab]//*, } /usr/bin/foo15 { audit change_profile /onexec -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_5.sd0000644000175000017500000000022212536656106025031 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_bare_ok_1.sd0000644000175000017500000000017212536656106025056 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_7.sd0000644000175000017500000000024012536656106025207 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_2.sd0000644000175000017500000000023512536656106024344 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_6.sd0000644000175000017500000000026312534527473022500 0ustar jjjj# #=DESCRIPTION deny change_profile with quotes #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> "/bin/foo", } /usr/bin/foo2 { deny change_profile -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_4.sd0000644000175000017500000000152112534527473023157 0ustar jjjj# #=DESCRIPTION audit change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit change_profile -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit change_profile -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit change_profile -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit change_profile -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit change_profile -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit change_profile -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit change_profile -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit change_profile -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit change_profile -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit change_profile -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit change_profile -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_1.sd0000644000175000017500000000063212536656106024204 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> /bin/*, } /usr/bin/foo2 { audit deny change_profile /onexec -> /bin/**, } /usr/bin/foo3 { audit deny change_profile /onexec -> /bin/?, } /usr/bin/foo4 { audit deny change_profile /onexec -> /bin/[ab], } /usr/bin/foo5 { audit deny change_profile /onexec -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_3.sd0000644000175000017500000000023112536656106024007 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_4.sd0000644000175000017500000000152112534527473024055 0ustar jjjj# #=DESCRIPTION allow change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { allow change_profile -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { allow change_profile -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { allow change_profile -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { allow change_profile -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { allow change_profile -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { allow change_profile -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { allow change_profile -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { allow change_profile -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { allow change_profile -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { allow change_profile -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { allow change_profile -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_4.sd0000644000175000017500000000025012534527473023365 0ustar jjjj# #=DESCRIPTION allow change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { allow change_profile -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_1.sd0000644000175000017500000000020712536656106024171 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_5.sd0000644000175000017500000000062612536656106024210 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with just res #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> *, } /usr/bin/foo2 { audit allow change_profile /onexec -> **, } /usr/bin/foo3 { audit allow change_profile /onexec -> ?, } /usr/bin/foo4 { audit allow change_profile /onexec -> [ab], } /usr/bin/foo5 { audit allow change_profile /onexec -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_7.sd0000644000175000017500000000213012536656106024716 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with just re, namespace #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> :ab:*, } /usr/bin/foo2 { audit deny change_profile @{var} -> :ab:**, } /usr/bin/foo3 { audit deny change_profile @{var} -> :ab:?, } /usr/bin/foo4 { audit deny change_profile @{var} -> :ab:[ab], } /usr/bin/foo5 { audit deny change_profile @{var} -> :ab:[^ab], } /usr/bin/foo6 { audit deny change_profile @{var} -> :*:ab, } /usr/bin/foo7 { audit deny change_profile @{var} -> :**:ab, } /usr/bin/foo8 { audit deny change_profile @{var} -> :?:ab, } /usr/bin/foo9 { audit deny change_profile @{var} -> :[ab]:ab, } /usr/bin/foo10 { audit deny change_profile @{var} -> :[^ab]:ab, } /usr/bin/foo11 { audit deny change_profile @{var} -> :*:*, } /usr/bin/foo12 { audit deny change_profile @{var} -> :**:**, } /usr/bin/foo13 { audit deny change_profile @{var} -> :?:?, } /usr/bin/foo14 { audit deny change_profile @{var} -> :[ab]:[ab], } /usr/bin/foo15 { audit deny change_profile @{var} -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_4.sd0000644000175000017500000000026112536656106024013 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { audit deny owner change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_6.sd0000644000175000017500000000031012534527473022627 0ustar jjjj# #=DESCRIPTION audit allow change_profile with quotes #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> "/bin/foo", } /usr/bin/foo2 { audit allow change_profile -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_6.sd0000644000175000017500000000030612536656106023566 0ustar jjjj# #=DESCRIPTION change_profile @{var} with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> "/bin/foo", } /usr/bin/foo2 { change_profile @{var} -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_2.sd0000644000175000017500000000022612536656106024761 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_7.sd0000644000175000017500000000022612536656106023653 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_5.sd0000644000175000017500000000037712536656106024241 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_6.sd0000644000175000017500000000022112536656106023645 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_4.sd0000644000175000017500000000164612536656106024565 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { deny change_profile @{var} -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { deny change_profile @{var} -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { deny change_profile @{var} -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { deny change_profile @{var} -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { deny change_profile @{var} -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { deny change_profile @{var} -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { deny change_profile @{var} -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { deny change_profile @{var} -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { deny change_profile @{var} -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { deny change_profile @{var} -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { deny change_profile @{var} -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_6.sd0000644000175000017500000000024312536656106024523 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_2.sd0000644000175000017500000000022712536656106023514 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_1.sd0000644000175000017500000000022512536656106024214 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_8.sd0000644000175000017500000000144512536656106024216 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec re with quotes #=EXRESULT PASS # /usr/bin/foo5 { audit deny change_profile /onexec -> "/bin/*", } /usr/bin/foo6 { audit deny change_profile /onexec -> "/bin/**", } /usr/bin/foo7 { audit deny change_profile /onexec -> "/bin/[ab]", } /usr/bin/foo8 { audit deny change_profile /onexec -> "/bin/[^ab]", } /usr/bin/foo10 { audit deny change_profile /onexec -> "/bin/?ab", } /usr/bin/foo11 { audit deny change_profile /onexec -> "/bin/ *", } /usr/bin/foo12 { audit deny change_profile /onexec -> "/bin/ **", } /usr/bin/foo13 { audit deny change_profile /onexec -> "/bin/ [ab]", } /usr/bin/foo14 { audit deny change_profile /onexec -> "/bin/ [^ab]", } /usr/bin/foo15 { audit deny change_profile /onexec -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_6.sd0000644000175000017500000000176512536656106024571 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with just res, child profile #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> *//ab, } /usr/bin/foo2 { deny change_profile @{var} -> **//ab, } /usr/bin/foo3 { deny change_profile @{var} -> ?//ab, } /usr/bin/foo4 { deny change_profile @{var} -> [ab]//ab, } /usr/bin/foo5 { deny change_profile @{var} -> [^ab]//ab, } /usr/bin/foo6 { deny change_profile @{var} -> ab//*, } /usr/bin/foo7 { deny change_profile @{var} -> ab//**, } /usr/bin/foo8 { deny change_profile @{var} -> ab//?, } /usr/bin/foo9 { deny change_profile @{var} -> ab//[ab], } /usr/bin/foo10 { deny change_profile @{var} -> ab//[^ab], } /usr/bin/foo11 { deny change_profile @{var} -> *//*, } /usr/bin/foo12 { deny change_profile @{var} -> **//*, } /usr/bin/foo13 { deny change_profile @{var} -> ?//*, } /usr/bin/foo14 { deny change_profile @{var} -> [ab]//*, } /usr/bin/foo15 { deny change_profile @{var} -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_3.sd0000644000175000017500000000024612536656106024523 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_7.sd0000644000175000017500000000145311232151655022653 0ustar jjjj# #=DESCRIPTION change_profile with just re, namespace #=EXRESULT PASS # /usr/bin/foo { change_profile -> :ab:*, } /usr/bin/foo2 { change_profile -> :ab:**, } /usr/bin/foo3 { change_profile -> :ab:?, } /usr/bin/foo4 { change_profile -> :ab:[ab], } /usr/bin/foo5 { change_profile -> :ab:[^ab], } /usr/bin/foo6 { change_profile -> :*:ab, } /usr/bin/foo7 { change_profile -> :**:ab, } /usr/bin/foo8 { change_profile -> :?:ab, } /usr/bin/foo9 { change_profile -> :[ab]:ab, } /usr/bin/foo10 { change_profile -> :[^ab]:ab, } /usr/bin/foo11 { change_profile -> :*:*, } /usr/bin/foo12 { change_profile -> :**:**, } /usr/bin/foo13 { change_profile -> :?:?, } /usr/bin/foo14 { change_profile -> :[ab]:[ab], } /usr/bin/foo15 { change_profile -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_7.sd0000644000175000017500000000023712536656106025220 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_3.sd0000644000175000017500000000020212534527473023361 0ustar jjjj# #=DESCRIPTION allow change_profile with name space #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_conflict_unsafe2.sd0000644000175000017500000000027612724212206025435 0ustar jjjj# #=DESCRIPTION test for conflict safe and unsafe exec condition #=EXRESULT FAIL # /usr/bin/foo { change_profile safe /onexec -> /bin/foo, change_profile unsafe /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_2.sd0000644000175000017500000000227712536656106024050 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> /bin/foo//bar, } /usr/bin/foo2 { audit change_profile /onexec -> /bin/foo//ba*, } /usr/bin/foo3 { audit change_profile /onexec -> /bin/foo//ba**, } /usr/bin/foo4 { audit change_profile /onexec -> /bin/foo//ba?, } /usr/bin/foo5 { audit change_profile /onexec -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit change_profile /onexec -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit change_profile /onexec -> /bin/fo*//bar, } /usr/bin/foo8 { audit change_profile /onexec -> /bin/fo**//bar, } /usr/bin/foo9 { audit change_profile /onexec -> /bin/fo?//bar, } /usr/bin/foo10 { audit change_profile /onexec -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit change_profile /onexec -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit change_profile /onexec -> /bin/fo*//ba*, } /usr/bin/foo13 { audit change_profile /onexec -> /bin/fo**//ba**, } /usr/bin/foo14 { audit change_profile /onexec -> /bin/fo?//ba?, } /usr/bin/foo15 { audit change_profile /onexec -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit change_profile /onexec -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_2.sd0000644000175000017500000000242412536656106024206 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> /bin/foo//bar, } /usr/bin/foo2 { audit deny change_profile /onexec -> /bin/foo//ba*, } /usr/bin/foo3 { audit deny change_profile /onexec -> /bin/foo//ba**, } /usr/bin/foo4 { audit deny change_profile /onexec -> /bin/foo//ba?, } /usr/bin/foo5 { audit deny change_profile /onexec -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit deny change_profile /onexec -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit deny change_profile /onexec -> /bin/fo*//bar, } /usr/bin/foo8 { audit deny change_profile /onexec -> /bin/fo**//bar, } /usr/bin/foo9 { audit deny change_profile /onexec -> /bin/fo?//bar, } /usr/bin/foo10 { audit deny change_profile /onexec -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit deny change_profile /onexec -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit deny change_profile /onexec -> /bin/fo*//ba*, } /usr/bin/foo13 { audit deny change_profile /onexec -> /bin/fo**//ba**, } /usr/bin/foo14 { audit deny change_profile /onexec -> /bin/fo?//ba?, } /usr/bin/foo15 { audit deny change_profile /onexec -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit deny change_profile /onexec -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_3.sd0000644000175000017500000000226312536656106024047 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> :foo:/bin/foo, } /usr/bin/foo2 { deny change_profile /onexec -> :foo:/bin/fo*, } /usr/bin/foo3 { deny change_profile /onexec -> :foo:/bin/fo**, } /usr/bin/foo4 { deny change_profile /onexec -> :foo:/bin/fo?, } /usr/bin/foo5 { deny change_profile /onexec -> :foo:/bin/fo[ab], } /usr/bin/foo6 { deny change_profile /onexec -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { deny change_profile /onexec -> :fo*:/bin/foo, } /usr/bin/foo8 { deny change_profile /onexec -> :fo**:/bin/foo, } /usr/bin/foo9 { deny change_profile /onexec -> :fo?:/bin/foo, } /usr/bin/foo10 { deny change_profile /onexec -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { deny change_profile /onexec -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { deny change_profile /onexec -> :fo*:/bin/fo*, } /usr/bin/foo13 { deny change_profile /onexec -> :fo**:/bin/fo**, } /usr/bin/foo14 { deny change_profile /onexec -> :fo?:/bin/fo?, } /usr/bin/foo15 { deny change_profile /onexec -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { deny change_profile /onexec -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_1.sd0000644000175000017500000000020612536656106024063 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_7.sd0000644000175000017500000000036012536656106023522 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> "/bin/foo//bar", } /usr/bin/foo2 { audit deny change_profile /onexec -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_2.sd0000644000175000017500000000227312536656106025453 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> /bin/foo//bar, } /usr/bin/foo2 { allow change_profile @{var} -> /bin/foo//ba*, } /usr/bin/foo3 { allow change_profile @{var} -> /bin/foo//ba**, } /usr/bin/foo4 { allow change_profile @{var} -> /bin/foo//ba?, } /usr/bin/foo5 { allow change_profile @{var} -> /bin/foo//ba[ab], } /usr/bin/foo6 { allow change_profile @{var} -> /bin/foo//ba[^ab], } /usr/bin/foo7 { allow change_profile @{var} -> /bin/fo*//bar, } /usr/bin/foo8 { allow change_profile @{var} -> /bin/fo**//bar, } /usr/bin/foo9 { allow change_profile @{var} -> /bin/fo?//bar, } /usr/bin/foo10 { allow change_profile @{var} -> /bin/fo[ab]//bar, } /usr/bin/foo11 { allow change_profile @{var} -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { allow change_profile @{var} -> /bin/fo*//ba*, } /usr/bin/foo13 { allow change_profile @{var} -> /bin/fo**//ba**, } /usr/bin/foo14 { allow change_profile @{var} -> /bin/fo?//ba?, } /usr/bin/foo15 { allow change_profile @{var} -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { allow change_profile @{var} -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_1.sd0000644000175000017500000000021412536656106023627 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_8.sd0000644000175000017500000000022712536656106024504 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { audit allow owner change_profile /onexec -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_1.sd0000644000175000017500000000051412534527473024053 0ustar jjjj# #=DESCRIPTION allow change_profile #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> /bin/*, } /usr/bin/foo2 { allow change_profile -> /bin/**, } /usr/bin/foo3 { allow change_profile -> /bin/?, } /usr/bin/foo4 { allow change_profile -> /bin/[ab], } /usr/bin/foo5 { allow change_profile -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_conflict_unsafe1.sd0000644000175000017500000000027112724212206025427 0ustar jjjj# #=DESCRIPTION test for conflict safe and unsafe exec condition #=EXRESULT FAIL # /usr/bin/foo { change_profile /onexec -> /bin/foo, change_profile unsafe /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_bare_ok_1.sd0000644000175000017500000000017312536656106024507 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_2.sd0000644000175000017500000000212512536656106024251 0ustar jjjj# #=DESCRIPTION change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> /bin/foo//bar, } /usr/bin/foo2 { change_profile @{var} -> /bin/foo//ba*, } /usr/bin/foo3 { change_profile @{var} -> /bin/foo//ba**, } /usr/bin/foo4 { change_profile @{var} -> /bin/foo//ba?, } /usr/bin/foo5 { change_profile @{var} -> /bin/foo//ba[ab], } /usr/bin/foo6 { change_profile @{var} -> /bin/foo//ba[^ab], } /usr/bin/foo7 { change_profile @{var} -> /bin/fo*//bar, } /usr/bin/foo8 { change_profile @{var} -> /bin/fo**//bar, } /usr/bin/foo9 { change_profile @{var} -> /bin/fo?//bar, } /usr/bin/foo10 { change_profile @{var} -> /bin/fo[ab]//bar, } /usr/bin/foo11 { change_profile @{var} -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { change_profile @{var} -> /bin/fo*//ba*, } /usr/bin/foo13 { change_profile @{var} -> /bin/fo**//ba**, } /usr/bin/foo14 { change_profile @{var} -> /bin/fo?//ba?, } /usr/bin/foo15 { change_profile @{var} -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { change_profile @{var} -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_4.sd0000644000175000017500000000030412536656106024336 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { deny owner change_profile /onexec -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_7.sd0000644000175000017500000000033312534527473022635 0ustar jjjj# #=DESCRIPTION audit allow change_profile to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> "/bin/foo//bar", } /usr/bin/foo2 { audit allow change_profile -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_2.sd0000644000175000017500000000024612536656106024522 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_6.sd0000644000175000017500000000157012534527473023170 0ustar jjjj# #=DESCRIPTION deny change_profile with just res, child profile #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> *//ab, } /usr/bin/foo2 { deny change_profile -> **//ab, } /usr/bin/foo3 { deny change_profile -> ?//ab, } /usr/bin/foo4 { deny change_profile -> [ab]//ab, } /usr/bin/foo5 { deny change_profile -> [^ab]//ab, } /usr/bin/foo6 { deny change_profile -> ab//*, } /usr/bin/foo7 { deny change_profile -> ab//**, } /usr/bin/foo8 { deny change_profile -> ab//?, } /usr/bin/foo9 { deny change_profile -> ab//[ab], } /usr/bin/foo10 { deny change_profile -> ab//[^ab], } /usr/bin/foo11 { deny change_profile -> *//*, } /usr/bin/foo12 { deny change_profile -> **//*, } /usr/bin/foo13 { deny change_profile -> ?//*, } /usr/bin/foo14 { deny change_profile -> [ab]//*, } /usr/bin/foo15 { deny change_profile -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_1.sd0000644000175000017500000000017512536656106023354 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_4.sd0000644000175000017500000000030512536656106024334 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit owner change_profile /onexec -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_4.sd0000644000175000017500000000141111232151655022642 0ustar jjjj# #=DESCRIPTION change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { change_profile -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { change_profile -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { change_profile -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { change_profile -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { change_profile -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { change_profile -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { change_profile -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { change_profile -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { change_profile -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { change_profile -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { change_profile -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_2.sd0000644000175000017500000000023212536656106024472 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_8.sd0000644000175000017500000000021312536656106024175 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { owner change_profile /onexec -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_8.sd0000644000175000017500000000022112536656106024335 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { audit owner change_profile /onexec -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_2.sd0000644000175000017500000000242012536656106024713 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> /bin/foo//bar, } /usr/bin/foo2 { audit deny change_profile @{var} -> /bin/foo//ba*, } /usr/bin/foo3 { audit deny change_profile @{var} -> /bin/foo//ba**, } /usr/bin/foo4 { audit deny change_profile @{var} -> /bin/foo//ba?, } /usr/bin/foo5 { audit deny change_profile @{var} -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit deny change_profile @{var} -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit deny change_profile @{var} -> /bin/fo*//bar, } /usr/bin/foo8 { audit deny change_profile @{var} -> /bin/fo**//bar, } /usr/bin/foo9 { audit deny change_profile @{var} -> /bin/fo?//bar, } /usr/bin/foo10 { audit deny change_profile @{var} -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit deny change_profile @{var} -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit deny change_profile @{var} -> /bin/fo*//ba*, } /usr/bin/foo13 { audit deny change_profile @{var} -> /bin/fo**//ba**, } /usr/bin/foo14 { audit deny change_profile @{var} -> /bin/fo?//ba?, } /usr/bin/foo15 { audit deny change_profile @{var} -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit deny change_profile @{var} -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_6.sd0000644000175000017500000000033012536656106024063 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> "/bin/foo", } /usr/bin/foo2 { audit change_profile @{var} -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_8.sd0000644000175000017500000000112411232151655022647 0ustar jjjj# #=DESCRIPTION change_profile re with quotes #=EXRESULT PASS # /usr/bin/foo5 { change_profile -> "/bin/*", } /usr/bin/foo6 { change_profile -> "/bin/**", } /usr/bin/foo7 { change_profile -> "/bin/[ab]", } /usr/bin/foo8 { change_profile -> "/bin/[^ab]", } /usr/bin/foo10 { change_profile -> "/bin/?ab", } /usr/bin/foo11 { change_profile -> "/bin/ *", } /usr/bin/foo12 { change_profile -> "/bin/ **", } /usr/bin/foo13 { change_profile -> "/bin/ [ab]", } /usr/bin/foo14 { change_profile -> "/bin/ [^ab]", } /usr/bin/foo15 { change_profile -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_4.sd0000644000175000017500000000031312536656106024474 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit allow owner change_profile /onexec -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_4.sd0000644000175000017500000000024612534527473022477 0ustar jjjj# #=DESCRIPTION deny change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { deny change_profile -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_7.sd0000644000175000017500000000024712536656106024533 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_3.sd0000644000175000017500000000023112536656106024475 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_5.sd0000644000175000017500000000021612536656106024502 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_1.sd0000644000175000017500000000022212536656106024473 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bare_bad_1.sd0000644000175000017500000000016312536656106024623 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/bare_ok_1.sd0000644000175000017500000000012512534527453023154 0ustar jjjj# #=DESCRIPTION change_profile #=EXRESULT PASS # /usr/bin/foo { change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_5.sd0000644000175000017500000000050212534527473023156 0ustar jjjj# #=DESCRIPTION audit change_profile with just res #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> *, } /usr/bin/foo2 { audit change_profile -> **, } /usr/bin/foo3 { audit change_profile -> ?, } /usr/bin/foo4 { audit change_profile -> [ab], } /usr/bin/foo5 { audit change_profile -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_7.sd0000644000175000017500000000165012536656106024260 0ustar jjjj# #=DESCRIPTION change_profile @{var} with just re, namespace #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> :ab:*, } /usr/bin/foo2 { change_profile @{var} -> :ab:**, } /usr/bin/foo3 { change_profile @{var} -> :ab:?, } /usr/bin/foo4 { change_profile @{var} -> :ab:[ab], } /usr/bin/foo5 { change_profile @{var} -> :ab:[^ab], } /usr/bin/foo6 { change_profile @{var} -> :*:ab, } /usr/bin/foo7 { change_profile @{var} -> :**:ab, } /usr/bin/foo8 { change_profile @{var} -> :?:ab, } /usr/bin/foo9 { change_profile @{var} -> :[ab]:ab, } /usr/bin/foo10 { change_profile @{var} -> :[^ab]:ab, } /usr/bin/foo11 { change_profile @{var} -> :*:*, } /usr/bin/foo12 { change_profile @{var} -> :**:**, } /usr/bin/foo13 { change_profile @{var} -> :?:?, } /usr/bin/foo14 { change_profile @{var} -> :[ab]:[ab], } /usr/bin/foo15 { change_profile @{var} -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/safe_bad_1.sd0000644000175000017500000000020112723373114023262 0ustar jjjj# #=DESCRIPTION change_profile w/ safe modifier but no exec condition #=EXRESULT FAIL # /usr/bin/foo { change_profile safe, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_5.sd0000644000175000017500000000033212534527473023367 0ustar jjjj# #=DESCRIPTION allow change_profile with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { allow change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_1.sd0000644000175000017500000000057512536656106024562 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> /bin/*, } /usr/bin/foo2 { deny change_profile @{var} -> /bin/**, } /usr/bin/foo3 { deny change_profile @{var} -> /bin/?, } /usr/bin/foo4 { deny change_profile @{var} -> /bin/[ab], } /usr/bin/foo5 { deny change_profile @{var} -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/unsafe_bad_1.sd0000644000175000017500000000020512723373114023631 0ustar jjjj# #=DESCRIPTION change_profile w/ unsafe modifier but no exec condition #=EXRESULT FAIL # /usr/bin/foo { change_profile unsafe, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_8.sd0000644000175000017500000000034512536656106023365 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with name space with quotes #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> ":foo:/bin/foo", } /usr/bin/foo2 { deny change_profile /onexec -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_2.sd0000644000175000017500000000227312536656106024555 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> /bin/foo//bar, } /usr/bin/foo2 { audit change_profile @{var} -> /bin/foo//ba*, } /usr/bin/foo3 { audit change_profile @{var} -> /bin/foo//ba**, } /usr/bin/foo4 { audit change_profile @{var} -> /bin/foo//ba?, } /usr/bin/foo5 { audit change_profile @{var} -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit change_profile @{var} -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit change_profile @{var} -> /bin/fo*//bar, } /usr/bin/foo8 { audit change_profile @{var} -> /bin/fo**//bar, } /usr/bin/foo9 { audit change_profile @{var} -> /bin/fo?//bar, } /usr/bin/foo10 { audit change_profile @{var} -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit change_profile @{var} -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit change_profile @{var} -> /bin/fo*//ba*, } /usr/bin/foo13 { audit change_profile @{var} -> /bin/fo**//ba**, } /usr/bin/foo14 { audit change_profile @{var} -> /bin/fo?//ba?, } /usr/bin/foo15 { audit change_profile @{var} -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit change_profile @{var} -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_2.sd0000644000175000017500000000023212536656106024701 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_1.sd0000644000175000017500000000015312534527473022471 0ustar jjjj# #=DESCRIPTION deny change_profile #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_8.sd0000644000175000017500000000023512536656106024015 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_4.sd0000644000175000017500000000023411232012201022135 0ustar jjjj# #=DESCRIPTION change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { change_profile -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_6.sd0000644000175000017500000000031612536656106024254 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with quotes #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> "/bin/foo", } /usr/bin/foo2 { allow change_profile /onexec -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_1.sd0000644000175000017500000000023112536656106025040 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_5.sd0000644000175000017500000000034012536656106024007 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { audit allow owner change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_6.sd0000644000175000017500000000023012536656106025047 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_7.sd0000644000175000017500000000023712536656106024353 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allowo_bad_1.sd0000644000175000017500000000020012534527473023651 0ustar jjjj# #=DESCRIPTION owner not allow in change_profile #=EXRESULT FAIL # /usr/bin/foo { allow owner change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_8.sd0000644000175000017500000000032012534527473023367 0ustar jjjj# #=DESCRIPTION allow change_profile with name space with quotes #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> ":foo:/bin/foo", } /usr/bin/foo2 { allow change_profile -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/safe_ok_3.sd0000644000175000017500000000022212723373114023152 0ustar jjjj# #=DESCRIPTION change_profile w/ safe modifier and "safe" target #=EXRESULT PASS # /usr/bin/foo { change_profile safe /usr/bin/bar -> safe, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_6.sd0000644000175000017500000000026612534527473022500 0ustar jjjj# #=DESCRIPTION audit change_profile with quotes #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> "/bin/foo", } /usr/bin/foo2 { audit change_profile -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_1.sd0000644000175000017500000000022212536656106024222 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_5.sd0000644000175000017500000000056312536656106024563 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with just res #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> *, } /usr/bin/foo2 { deny change_profile @{var} -> **, } /usr/bin/foo3 { deny change_profile @{var} -> ?, } /usr/bin/foo4 { deny change_profile @{var} -> [ab], } /usr/bin/foo5 { deny change_profile @{var} -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_4.sd0000644000175000017500000000025012534527473022467 0ustar jjjj# #=DESCRIPTION audit change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit change_profile -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_2.sd0000644000175000017500000000021112536656106023347 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_3.sd0000644000175000017500000000023512536656106024345 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_2.sd0000644000175000017500000000225612536656106024050 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> /bin/foo//bar, } /usr/bin/foo2 { deny change_profile /onexec -> /bin/foo//ba*, } /usr/bin/foo3 { deny change_profile /onexec -> /bin/foo//ba**, } /usr/bin/foo4 { deny change_profile /onexec -> /bin/foo//ba?, } /usr/bin/foo5 { deny change_profile /onexec -> /bin/foo//ba[ab], } /usr/bin/foo6 { deny change_profile /onexec -> /bin/foo//ba[^ab], } /usr/bin/foo7 { deny change_profile /onexec -> /bin/fo*//bar, } /usr/bin/foo8 { deny change_profile /onexec -> /bin/fo**//bar, } /usr/bin/foo9 { deny change_profile /onexec -> /bin/fo?//bar, } /usr/bin/foo10 { deny change_profile /onexec -> /bin/fo[ab]//bar, } /usr/bin/foo11 { deny change_profile /onexec -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { deny change_profile /onexec -> /bin/fo*//ba*, } /usr/bin/foo13 { deny change_profile /onexec -> /bin/fo**//ba**, } /usr/bin/foo14 { deny change_profile /onexec -> /bin/fo?//ba?, } /usr/bin/foo15 { deny change_profile /onexec -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { deny change_profile /onexec -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_8.sd0000644000175000017500000000024212536656106024363 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_4.sd0000644000175000017500000000032712536656106025212 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_4.sd0000644000175000017500000000025112536656106023633 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { deny audit change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bare_bad_1.sd0000644000175000017500000000021012536656106024773 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_6.sd0000644000175000017500000000022612536656106025036 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_6.sd0000644000175000017500000000021512536656106024336 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_4.sd0000644000175000017500000000031312536656106024703 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { owner change_profile @{var} -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_8.sd0000644000175000017500000000131512534527473023330 0ustar jjjj# #=DESCRIPTION audit deny change_profile re with quotes #=EXRESULT PASS # /usr/bin/foo5 { audit deny change_profile -> "/bin/*", } /usr/bin/foo6 { audit deny change_profile -> "/bin/**", } /usr/bin/foo7 { audit deny change_profile -> "/bin/[ab]", } /usr/bin/foo8 { audit deny change_profile -> "/bin/[^ab]", } /usr/bin/foo10 { audit deny change_profile -> "/bin/?ab", } /usr/bin/foo11 { audit deny change_profile -> "/bin/ *", } /usr/bin/foo12 { audit deny change_profile -> "/bin/ **", } /usr/bin/foo13 { audit deny change_profile -> "/bin/ [ab]", } /usr/bin/foo14 { audit deny change_profile -> "/bin/ [^ab]", } /usr/bin/foo15 { audit deny change_profile -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_7.sd0000644000175000017500000000022312536656106024502 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_2.sd0000644000175000017500000000023112536656106024006 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_7.sd0000644000175000017500000000201312536656106024041 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with just re, namespace #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> :ab:*, } /usr/bin/foo2 { audit change_profile /onexec -> :ab:**, } /usr/bin/foo3 { audit change_profile /onexec -> :ab:?, } /usr/bin/foo4 { audit change_profile /onexec -> :ab:[ab], } /usr/bin/foo5 { audit change_profile /onexec -> :ab:[^ab], } /usr/bin/foo6 { audit change_profile /onexec -> :*:ab, } /usr/bin/foo7 { audit change_profile /onexec -> :**:ab, } /usr/bin/foo8 { audit change_profile /onexec -> :?:ab, } /usr/bin/foo9 { audit change_profile /onexec -> :[ab]:ab, } /usr/bin/foo10 { audit change_profile /onexec -> :[^ab]:ab, } /usr/bin/foo11 { audit change_profile /onexec -> :*:*, } /usr/bin/foo12 { audit change_profile /onexec -> :**:**, } /usr/bin/foo13 { audit change_profile /onexec -> :?:?, } /usr/bin/foo14 { audit change_profile /onexec -> :[ab]:[ab], } /usr/bin/foo15 { audit change_profile /onexec -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_8.sd0000644000175000017500000000035012536656106023356 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with name space with quotes #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> ":foo:/bin/foo", } /usr/bin/foo2 { audit change_profile /onexec -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_4.sd0000644000175000017500000000031212536656106024476 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit deny owner change_profile /onexec -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_8.sd0000644000175000017500000000135612536656106024751 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec re with quotes #=EXRESULT PASS # /usr/bin/foo5 { allow change_profile /onexec -> "/bin/*", } /usr/bin/foo6 { allow change_profile /onexec -> "/bin/**", } /usr/bin/foo7 { allow change_profile /onexec -> "/bin/[ab]", } /usr/bin/foo8 { allow change_profile /onexec -> "/bin/[^ab]", } /usr/bin/foo10 { allow change_profile /onexec -> "/bin/?ab", } /usr/bin/foo11 { allow change_profile /onexec -> "/bin/ *", } /usr/bin/foo12 { allow change_profile /onexec -> "/bin/ **", } /usr/bin/foo13 { allow change_profile /onexec -> "/bin/ [ab]", } /usr/bin/foo14 { allow change_profile /onexec -> "/bin/ [^ab]", } /usr/bin/foo15 { allow change_profile /onexec -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_5.sd0000644000175000017500000000057112536656106025455 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with just res #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> *, } /usr/bin/foo2 { allow change_profile @{var} -> **, } /usr/bin/foo3 { allow change_profile @{var} -> ?, } /usr/bin/foo4 { allow change_profile @{var} -> [ab], } /usr/bin/foo5 { allow change_profile @{var} -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_1.sd0000644000175000017500000000015512534527473022470 0ustar jjjj# #=DESCRIPTION audit change_profile #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_3.sd0000644000175000017500000000020012534527473022464 0ustar jjjj# #=DESCRIPTION deny change_profile with name space #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_ok_2.sd0000644000175000017500000000017312534527473023367 0ustar jjjj# #=DESCRIPTION allow change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_3.sd0000644000175000017500000000023712536656106024365 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_5.sd0000644000175000017500000000056212536656106024744 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with just res #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> *, } /usr/bin/foo2 { allow change_profile /onexec -> **, } /usr/bin/foo3 { allow change_profile /onexec -> ?, } /usr/bin/foo4 { allow change_profile /onexec -> [ab], } /usr/bin/foo5 { allow change_profile /onexec -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_8.sd0000644000175000017500000000031512534527473022500 0ustar jjjj# #=DESCRIPTION deny change_profile with name space with quotes #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> ":foo:/bin/foo", } /usr/bin/foo2 { deny change_profile -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_2.sd0000644000175000017500000000225212536656106024555 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> /bin/foo//bar, } /usr/bin/foo2 { deny change_profile @{var} -> /bin/foo//ba*, } /usr/bin/foo3 { deny change_profile @{var} -> /bin/foo//ba**, } /usr/bin/foo4 { deny change_profile @{var} -> /bin/foo//ba?, } /usr/bin/foo5 { deny change_profile @{var} -> /bin/foo//ba[ab], } /usr/bin/foo6 { deny change_profile @{var} -> /bin/foo//ba[^ab], } /usr/bin/foo7 { deny change_profile @{var} -> /bin/fo*//bar, } /usr/bin/foo8 { deny change_profile @{var} -> /bin/fo**//bar, } /usr/bin/foo9 { deny change_profile @{var} -> /bin/fo?//bar, } /usr/bin/foo10 { deny change_profile @{var} -> /bin/fo[ab]//bar, } /usr/bin/foo11 { deny change_profile @{var} -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { deny change_profile @{var} -> /bin/fo*//ba*, } /usr/bin/foo13 { deny change_profile @{var} -> /bin/fo**//ba**, } /usr/bin/foo14 { deny change_profile @{var} -> /bin/fo?//ba?, } /usr/bin/foo15 { deny change_profile @{var} -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { deny change_profile @{var} -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_8.sd0000644000175000017500000000022012536656106025045 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { audit owner change_profile @{var} -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_4.sd0000644000175000017500000000026212534527473022636 0ustar jjjj# #=DESCRIPTION audit deny change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit deny change_profile -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_3.sd0000644000175000017500000000023512536656106025033 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_2.sd0000644000175000017500000000023212536656106024213 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_1.sd0000644000175000017500000000020712536656106023514 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_3.sd0000644000175000017500000000230012536656106024545 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> :foo:/bin/foo, } /usr/bin/foo2 { audit change_profile @{var} -> :foo:/bin/fo*, } /usr/bin/foo3 { audit change_profile @{var} -> :foo:/bin/fo**, } /usr/bin/foo4 { audit change_profile @{var} -> :foo:/bin/fo?, } /usr/bin/foo5 { audit change_profile @{var} -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit change_profile @{var} -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit change_profile @{var} -> :fo*:/bin/foo, } /usr/bin/foo8 { audit change_profile @{var} -> :fo**:/bin/foo, } /usr/bin/foo9 { audit change_profile @{var} -> :fo?:/bin/foo, } /usr/bin/foo10 { audit change_profile @{var} -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit change_profile @{var} -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit change_profile @{var} -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit change_profile @{var} -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit change_profile @{var} -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit change_profile @{var} -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit change_profile @{var} -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_5.sd0000644000175000017500000000033212536656106023647 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { audit owner change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_5.sd0000644000175000017500000000022012536656106024472 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_8.sd0000644000175000017500000000040112536656106024230 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with name space with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> ":foo:/bin/foo", } /usr/bin/foo2 { audit deny change_profile @{var} -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_5.sd0000644000175000017500000000051612536656106023545 0ustar jjjj# #=DESCRIPTION change_profile /onexec with just res #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> *, } /usr/bin/foo2 { change_profile /onexec -> **, } /usr/bin/foo3 { change_profile /onexec -> ?, } /usr/bin/foo4 { change_profile /onexec -> [ab], } /usr/bin/foo5 { change_profile /onexec -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_3.sd0000644000175000017500000000024512536656106024525 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_5.sd0000644000175000017500000000023312536656106025207 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_5.sd0000644000175000017500000000033012534527473022472 0ustar jjjj# #=DESCRIPTION deny change_profile with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { deny change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_4.sd0000644000175000017500000000032112536656106025043 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_2.sd0000644000175000017500000000023712536656106025052 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/stacking_ok_3.sd0000644000175000017500000000016212673100443024037 0ustar jjjj# #=DESCRIPTION change_profile w/ stacking #=EXRESULT PASS # /usr/bin/foo { change_profile /bin/foo -> &bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_3.sd0000644000175000017500000000024712536656106024233 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_6.sd0000644000175000017500000000017512536656106024330 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_1.sd0000644000175000017500000000016112536656106023047 0ustar jjjj# #=DESCRIPTION change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_1.sd0000644000175000017500000000021012536656106024053 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_4.sd0000644000175000017500000000027712536656106024203 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { owner change_profile /onexec -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_5.sd0000644000175000017500000000043611232151655022651 0ustar jjjj# #=DESCRIPTION change_profile with just res #=EXRESULT PASS # /usr/bin/foo { change_profile -> *, } /usr/bin/foo2 { change_profile -> **, } /usr/bin/foo3 { change_profile -> ?, } /usr/bin/foo4 { change_profile -> [ab], } /usr/bin/foo5 { change_profile -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_1.sd0000644000175000017500000000022512536656106024005 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_5.sd0000644000175000017500000000034412534527473022640 0ustar jjjj# #=DESCRIPTION audit deny change_profile with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit deny change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_7.sd0000644000175000017500000000021012536656106024171 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_4.sd0000644000175000017500000000026212536656106024220 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { owner change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_6.sd0000644000175000017500000000023012536656106024006 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_4.sd0000644000175000017500000000175512536656106024216 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit deny change_profile /onexec -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit deny change_profile /onexec -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit deny change_profile /onexec -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit deny change_profile /onexec -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit deny change_profile /onexec -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit deny change_profile /onexec -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit deny change_profile /onexec -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit deny change_profile /onexec -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit deny change_profile /onexec -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit deny change_profile /onexec -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit deny change_profile /onexec -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_4.sd0000644000175000017500000000025412536656106023055 0ustar jjjj# #=DESCRIPTION change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_8.sd0000644000175000017500000000024112536656106024365 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_2.sd0000644000175000017500000000020712534527473022630 0ustar jjjj# #=DESCRIPTION audit allow change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_2.sd0000644000175000017500000000022412536656106024332 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_1.sd0000644000175000017500000000021012536656106024751 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_4.sd0000644000175000017500000000166112536656106024744 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { allow change_profile /onexec -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { allow change_profile /onexec -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { allow change_profile /onexec -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { allow change_profile /onexec -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { allow change_profile /onexec -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { allow change_profile /onexec -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { allow change_profile /onexec -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { allow change_profile /onexec -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { allow change_profile /onexec -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { allow change_profile /onexec -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { allow change_profile /onexec -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_2.sd0000644000175000017500000000206712534527473024061 0ustar jjjj# #=DESCRIPTION allow change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> /bin/foo//bar, } /usr/bin/foo2 { allow change_profile -> /bin/foo//ba*, } /usr/bin/foo3 { allow change_profile -> /bin/foo//ba**, } /usr/bin/foo4 { allow change_profile -> /bin/foo//ba?, } /usr/bin/foo5 { allow change_profile -> /bin/foo//ba[ab], } /usr/bin/foo6 { allow change_profile -> /bin/foo//ba[^ab], } /usr/bin/foo7 { allow change_profile -> /bin/fo*//bar, } /usr/bin/foo8 { allow change_profile -> /bin/fo**//bar, } /usr/bin/foo9 { allow change_profile -> /bin/fo?//bar, } /usr/bin/foo10 { allow change_profile -> /bin/fo[ab]//bar, } /usr/bin/foo11 { allow change_profile -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { allow change_profile -> /bin/fo*//ba*, } /usr/bin/foo13 { allow change_profile -> /bin/fo**//ba**, } /usr/bin/foo14 { allow change_profile -> /bin/fo?//ba?, } /usr/bin/foo15 { allow change_profile -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { allow change_profile -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_6.sd0000644000175000017500000000161012534527473023160 0ustar jjjj# #=DESCRIPTION audit change_profile with just res, child profile #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> *//ab, } /usr/bin/foo2 { audit change_profile -> **//ab, } /usr/bin/foo3 { audit change_profile -> ?//ab, } /usr/bin/foo4 { audit change_profile -> [ab]//ab, } /usr/bin/foo5 { audit change_profile -> [^ab]//ab, } /usr/bin/foo6 { audit change_profile -> ab//*, } /usr/bin/foo7 { audit change_profile -> ab//**, } /usr/bin/foo8 { audit change_profile -> ab//?, } /usr/bin/foo9 { audit change_profile -> ab//[ab], } /usr/bin/foo10 { audit change_profile -> ab//[^ab], } /usr/bin/foo11 { audit change_profile -> *//*, } /usr/bin/foo12 { audit change_profile -> **//*, } /usr/bin/foo13 { audit change_profile -> ?//*, } /usr/bin/foo14 { audit change_profile -> [ab]//*, } /usr/bin/foo15 { audit change_profile -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_7.sd0000644000175000017500000000201312536656106024737 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with just re, namespace #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> :ab:*, } /usr/bin/foo2 { allow change_profile /onexec -> :ab:**, } /usr/bin/foo3 { allow change_profile /onexec -> :ab:?, } /usr/bin/foo4 { allow change_profile /onexec -> :ab:[ab], } /usr/bin/foo5 { allow change_profile /onexec -> :ab:[^ab], } /usr/bin/foo6 { allow change_profile /onexec -> :*:ab, } /usr/bin/foo7 { allow change_profile /onexec -> :**:ab, } /usr/bin/foo8 { allow change_profile /onexec -> :?:ab, } /usr/bin/foo9 { allow change_profile /onexec -> :[ab]:ab, } /usr/bin/foo10 { allow change_profile /onexec -> :[^ab]:ab, } /usr/bin/foo11 { allow change_profile /onexec -> :*:*, } /usr/bin/foo12 { allow change_profile /onexec -> :**:**, } /usr/bin/foo13 { allow change_profile /onexec -> :?:?, } /usr/bin/foo14 { allow change_profile /onexec -> :[ab]:[ab], } /usr/bin/foo15 { allow change_profile /onexec -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_5.sd0000644000175000017500000000047412534527473023171 0ustar jjjj# #=DESCRIPTION deny change_profile with just res #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> *, } /usr/bin/foo2 { deny change_profile -> **, } /usr/bin/foo3 { deny change_profile -> ?, } /usr/bin/foo4 { deny change_profile -> [ab], } /usr/bin/foo5 { deny change_profile -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_no_conflict_safe2.sd0000644000175000017500000000033112724212206025556 0ustar jjjj# #=DESCRIPTION 'safe' and 'unsafe' for the same exec condition, but different exec targets #=EXRESULT PASS # /usr/bin/foo { change_profile safe /onexec -> /bin/foo, change_profile unsafe /onexec -> /bin/bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_2.sd0000644000175000017500000000021312536656106024244 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_5.sd0000644000175000017500000000054612534527473023327 0ustar jjjj# #=DESCRIPTION audit allow change_profile with just res #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> *, } /usr/bin/foo2 { audit allow change_profile -> **, } /usr/bin/foo3 { audit allow change_profile -> ?, } /usr/bin/foo4 { audit allow change_profile -> [ab], } /usr/bin/foo5 { audit allow change_profile -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_1.sd0000644000175000017500000000021512536656106024331 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_3.sd0000644000175000017500000000023512536656106024762 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_2.sd0000644000175000017500000000017312534527473022471 0ustar jjjj# #=DESCRIPTION audit change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_4.sd0000644000175000017500000000032612536656106025214 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_2.sd0000644000175000017500000000024512536656106025212 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_4.sd0000644000175000017500000000027012536656106023353 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_7.sd0000644000175000017500000000021512536656106024342 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_1.sd0000644000175000017500000000056612536656106024051 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> /bin/*, } /usr/bin/foo2 { deny change_profile /onexec -> /bin/**, } /usr/bin/foo3 { deny change_profile /onexec -> /bin/?, } /usr/bin/foo4 { deny change_profile /onexec -> /bin/[ab], } /usr/bin/foo5 { deny change_profile /onexec -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_8.sd0000644000175000017500000000022312536656106023636 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_6.sd0000644000175000017500000000023212536656106024345 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_6.sd0000644000175000017500000000024212536656106024525 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_1.sd0000644000175000017500000000051412534527473023155 0ustar jjjj# #=DESCRIPTION audit change_profile #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> /bin/*, } /usr/bin/foo2 { audit change_profile -> /bin/**, } /usr/bin/foo3 { audit change_profile -> /bin/?, } /usr/bin/foo4 { audit change_profile -> /bin/[ab], } /usr/bin/foo5 { audit change_profile -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_6.sd0000644000175000017500000000032512536656106024072 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> "/bin/foo", } /usr/bin/foo2 { deny change_profile @{var} -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_6.sd0000644000175000017500000000201012536656106024733 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with just res, child profile #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> *//ab, } /usr/bin/foo2 { allow change_profile /onexec -> **//ab, } /usr/bin/foo3 { allow change_profile /onexec -> ?//ab, } /usr/bin/foo4 { allow change_profile /onexec -> [ab]//ab, } /usr/bin/foo5 { allow change_profile /onexec -> [^ab]//ab, } /usr/bin/foo6 { allow change_profile /onexec -> ab//*, } /usr/bin/foo7 { allow change_profile /onexec -> ab//**, } /usr/bin/foo8 { allow change_profile /onexec -> ab//?, } /usr/bin/foo9 { allow change_profile /onexec -> ab//[ab], } /usr/bin/foo10 { allow change_profile /onexec -> ab//[^ab], } /usr/bin/foo11 { allow change_profile /onexec -> *//*, } /usr/bin/foo12 { allow change_profile /onexec -> **//*, } /usr/bin/foo13 { allow change_profile /onexec -> ?//*, } /usr/bin/foo14 { allow change_profile /onexec -> [ab]//*, } /usr/bin/foo15 { allow change_profile /onexec -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_3.sd0000644000175000017500000000024512536656106025213 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_7.sd0000644000175000017500000000033012534527473022635 0ustar jjjj# #=DESCRIPTION audit deny change_profile to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> "/bin/foo//bar", } /usr/bin/foo2 { audit deny change_profile -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_7.sd0000644000175000017500000000201012536656106025445 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with just re, namespace #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> :ab:*, } /usr/bin/foo2 { allow change_profile @{var} -> :ab:**, } /usr/bin/foo3 { allow change_profile @{var} -> :ab:?, } /usr/bin/foo4 { allow change_profile @{var} -> :ab:[ab], } /usr/bin/foo5 { allow change_profile @{var} -> :ab:[^ab], } /usr/bin/foo6 { allow change_profile @{var} -> :*:ab, } /usr/bin/foo7 { allow change_profile @{var} -> :**:ab, } /usr/bin/foo8 { allow change_profile @{var} -> :?:ab, } /usr/bin/foo9 { allow change_profile @{var} -> :[ab]:ab, } /usr/bin/foo10 { allow change_profile @{var} -> :[^ab]:ab, } /usr/bin/foo11 { allow change_profile @{var} -> :*:*, } /usr/bin/foo12 { allow change_profile @{var} -> :**:**, } /usr/bin/foo13 { allow change_profile @{var} -> :?:?, } /usr/bin/foo14 { allow change_profile @{var} -> :[ab]:[ab], } /usr/bin/foo15 { allow change_profile @{var} -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_4.sd0000644000175000017500000000155112536656106023544 0ustar jjjj# #=DESCRIPTION change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { change_profile /onexec -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { change_profile /onexec -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { change_profile /onexec -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { change_profile /onexec -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { change_profile /onexec -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { change_profile /onexec -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { change_profile /onexec -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { change_profile /onexec -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { change_profile /onexec -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { change_profile /onexec -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { change_profile /onexec -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_3.sd0000644000175000017500000000024012536656106024354 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_2.sd0000644000175000017500000000024012536656106025041 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_8.sd0000644000175000017500000000036212536656106024072 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with name space with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> ":foo:/bin/foo", } /usr/bin/foo2 { audit change_profile @{var} -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bare_bad_1.sd0000644000175000017500000000022412536656106025511 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_re_ok_6.sd0000644000175000017500000000200512536656106025450 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with just res, child profile #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> *//ab, } /usr/bin/foo2 { allow change_profile @{var} -> **//ab, } /usr/bin/foo3 { allow change_profile @{var} -> ?//ab, } /usr/bin/foo4 { allow change_profile @{var} -> [ab]//ab, } /usr/bin/foo5 { allow change_profile @{var} -> [^ab]//ab, } /usr/bin/foo6 { allow change_profile @{var} -> ab//*, } /usr/bin/foo7 { allow change_profile @{var} -> ab//**, } /usr/bin/foo8 { allow change_profile @{var} -> ab//?, } /usr/bin/foo9 { allow change_profile @{var} -> ab//[ab], } /usr/bin/foo10 { allow change_profile @{var} -> ab//[^ab], } /usr/bin/foo11 { allow change_profile @{var} -> *//*, } /usr/bin/foo12 { allow change_profile @{var} -> **//*, } /usr/bin/foo13 { allow change_profile @{var} -> ?//*, } /usr/bin/foo14 { allow change_profile @{var} -> [ab]//*, } /usr/bin/foo15 { allow change_profile @{var} -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/stacking_ok_1.sd0000644000175000017500000000015612673100443024040 0ustar jjjj# #=DESCRIPTION change_profile w/ stacking #=EXRESULT PASS # /usr/bin/foo { change_profile -> &/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_4.sd0000644000175000017500000000161512534527473023327 0ustar jjjj# #=DESCRIPTION audit deny change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit deny change_profile -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit deny change_profile -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit deny change_profile -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit deny change_profile -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit deny change_profile -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit deny change_profile -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit deny change_profile -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit deny change_profile -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit deny change_profile -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit deny change_profile -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit deny change_profile -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_re_ok_2.sd0000644000175000017500000000221412534527473023321 0ustar jjjj# #=DESCRIPTION audit deny change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> /bin/foo//bar, } /usr/bin/foo2 { audit deny change_profile -> /bin/foo//ba*, } /usr/bin/foo3 { audit deny change_profile -> /bin/foo//ba**, } /usr/bin/foo4 { audit deny change_profile -> /bin/foo//ba?, } /usr/bin/foo5 { audit deny change_profile -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit deny change_profile -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit deny change_profile -> /bin/fo*//bar, } /usr/bin/foo8 { audit deny change_profile -> /bin/fo**//bar, } /usr/bin/foo9 { audit deny change_profile -> /bin/fo?//bar, } /usr/bin/foo10 { audit deny change_profile -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit deny change_profile -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit deny change_profile -> /bin/fo*//ba*, } /usr/bin/foo13 { audit deny change_profile -> /bin/fo**//ba**, } /usr/bin/foo14 { audit deny change_profile -> /bin/fo?//ba?, } /usr/bin/foo15 { audit deny change_profile -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit deny change_profile -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_re_ok_5.sd0000644000175000017500000000057112536656106024557 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} with just res #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> *, } /usr/bin/foo2 { audit change_profile @{var} -> **, } /usr/bin/foo3 { audit change_profile @{var} -> ?, } /usr/bin/foo4 { audit change_profile @{var} -> [ab], } /usr/bin/foo5 { audit change_profile @{var} -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_3.sd0000644000175000017500000000023712536656106025053 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_1.sd0000644000175000017500000000057412536656106024045 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> /bin/*, } /usr/bin/foo2 { audit change_profile /onexec -> /bin/**, } /usr/bin/foo3 { audit change_profile /onexec -> /bin/?, } /usr/bin/foo4 { audit change_profile /onexec -> /bin/[ab], } /usr/bin/foo5 { audit change_profile /onexec -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_8.sd0000644000175000017500000000122612534527473023165 0ustar jjjj# #=DESCRIPTION audit change_profile re with quotes #=EXRESULT PASS # /usr/bin/foo5 { audit change_profile -> "/bin/*", } /usr/bin/foo6 { audit change_profile -> "/bin/**", } /usr/bin/foo7 { audit change_profile -> "/bin/[ab]", } /usr/bin/foo8 { audit change_profile -> "/bin/[^ab]", } /usr/bin/foo10 { audit change_profile -> "/bin/?ab", } /usr/bin/foo11 { audit change_profile -> "/bin/ *", } /usr/bin/foo12 { audit change_profile -> "/bin/ **", } /usr/bin/foo13 { audit change_profile -> "/bin/ [ab]", } /usr/bin/foo14 { audit change_profile -> "/bin/ [^ab]", } /usr/bin/foo15 { audit change_profile -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_ok_2.sd0000644000175000017500000000017112534527473022472 0ustar jjjj# #=DESCRIPTION deny change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_bad_5.sd0000644000175000017500000000032712536656106023640 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { deny audit change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_5.sd0000644000175000017500000000021012536656106024333 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_3.sd0000644000175000017500000000023612536656106023515 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_4.sd0000644000175000017500000000150512534527473023164 0ustar jjjj# #=DESCRIPTION deny change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { deny change_profile -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { deny change_profile -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { deny change_profile -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { deny change_profile -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { deny change_profile -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { deny change_profile -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { deny change_profile -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { deny change_profile -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { deny change_profile -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { deny change_profile -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { deny change_profile -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_4.sd0000644000175000017500000000032012536656106025045 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_3.sd0000644000175000017500000000245212536656106024205 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> :foo:/bin/foo, } /usr/bin/foo2 { audit allow change_profile /onexec -> :foo:/bin/fo*, } /usr/bin/foo3 { audit allow change_profile /onexec -> :foo:/bin/fo**, } /usr/bin/foo4 { audit allow change_profile /onexec -> :foo:/bin/fo?, } /usr/bin/foo5 { audit allow change_profile /onexec -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit allow change_profile /onexec -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit allow change_profile /onexec -> :fo*:/bin/foo, } /usr/bin/foo8 { audit allow change_profile /onexec -> :fo**:/bin/foo, } /usr/bin/foo9 { audit allow change_profile /onexec -> :fo?:/bin/foo, } /usr/bin/foo10 { audit allow change_profile /onexec -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit allow change_profile /onexec -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit allow change_profile /onexec -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit allow change_profile /onexec -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit allow change_profile /onexec -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit allow change_profile /onexec -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit allow change_profile /onexec -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_5.sd0000644000175000017500000000036312536656106024073 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { deny change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bare_bad_1.sd0000644000175000017500000000021612536656106025351 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_7.sd0000644000175000017500000000024212536656106024362 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_5.sd0000644000175000017500000000036412536656106023524 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit deny change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_bare_ok_1.sd0000644000175000017500000000016012536656106024550 0ustar jjjj# #=DESCRIPTION change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_7.sd0000644000175000017500000000215312536656106024207 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with just re, namespace #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> :ab:*, } /usr/bin/foo2 { audit allow change_profile /onexec -> :ab:**, } /usr/bin/foo3 { audit allow change_profile /onexec -> :ab:?, } /usr/bin/foo4 { audit allow change_profile /onexec -> :ab:[ab], } /usr/bin/foo5 { audit allow change_profile /onexec -> :ab:[^ab], } /usr/bin/foo6 { audit allow change_profile /onexec -> :*:ab, } /usr/bin/foo7 { audit allow change_profile /onexec -> :**:ab, } /usr/bin/foo8 { audit allow change_profile /onexec -> :?:ab, } /usr/bin/foo9 { audit allow change_profile /onexec -> :[ab]:ab, } /usr/bin/foo10 { audit allow change_profile /onexec -> :[^ab]:ab, } /usr/bin/foo11 { audit allow change_profile /onexec -> :*:*, } /usr/bin/foo12 { audit allow change_profile /onexec -> :**:**, } /usr/bin/foo13 { audit allow change_profile /onexec -> :?:?, } /usr/bin/foo14 { audit allow change_profile /onexec -> :[ab]:[ab], } /usr/bin/foo15 { audit allow change_profile /onexec -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_bare_ok_1.sd0000644000175000017500000000013712534527473023464 0ustar jjjj# #=DESCRIPTION deny change_profile #=EXRESULT PASS # /usr/bin/foo { deny change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_3.sd0000644000175000017500000000024012536656106025042 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_8.sd0000644000175000017500000000145012536656106024723 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} re with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo5 { audit deny change_profile @{var} -> "/bin/*", } /usr/bin/foo6 { audit deny change_profile @{var} -> "/bin/**", } /usr/bin/foo7 { audit deny change_profile @{var} -> "/bin/[ab]", } /usr/bin/foo8 { audit deny change_profile @{var} -> "/bin/[^ab]", } /usr/bin/foo10 { audit deny change_profile @{var} -> "/bin/?ab", } /usr/bin/foo11 { audit deny change_profile @{var} -> "/bin/ *", } /usr/bin/foo12 { audit deny change_profile @{var} -> "/bin/ **", } /usr/bin/foo13 { audit deny change_profile @{var} -> "/bin/ [ab]", } /usr/bin/foo14 { audit deny change_profile @{var} -> "/bin/ [^ab]", } /usr/bin/foo15 { audit deny change_profile @{var} -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_2.sd0000644000175000017500000000020512534527473022631 0ustar jjjj# #=DESCRIPTION audit deny change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_4.sd0000644000175000017500000000166112536656106024046 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit change_profile /onexec -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit change_profile /onexec -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit change_profile /onexec -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit change_profile /onexec -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit change_profile /onexec -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit change_profile /onexec -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit change_profile /onexec -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit change_profile /onexec -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit change_profile /onexec -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit change_profile /onexec -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit change_profile /onexec -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_2.sd0000644000175000017500000000223512534527473023321 0ustar jjjj# #=DESCRIPTION audit allow change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> /bin/foo//bar, } /usr/bin/foo2 { audit allow change_profile -> /bin/foo//ba*, } /usr/bin/foo3 { audit allow change_profile -> /bin/foo//ba**, } /usr/bin/foo4 { audit allow change_profile -> /bin/foo//ba?, } /usr/bin/foo5 { audit allow change_profile -> /bin/foo//ba[ab], } /usr/bin/foo6 { audit allow change_profile -> /bin/foo//ba[^ab], } /usr/bin/foo7 { audit allow change_profile -> /bin/fo*//bar, } /usr/bin/foo8 { audit allow change_profile -> /bin/fo**//bar, } /usr/bin/foo9 { audit allow change_profile -> /bin/fo?//bar, } /usr/bin/foo10 { audit allow change_profile -> /bin/fo[ab]//bar, } /usr/bin/foo11 { audit allow change_profile -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { audit allow change_profile -> /bin/fo*//ba*, } /usr/bin/foo13 { audit allow change_profile -> /bin/fo**//ba**, } /usr/bin/foo14 { audit allow change_profile -> /bin/fo?//ba?, } /usr/bin/foo15 { audit allow change_profile -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { audit allow change_profile -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_7.sd0000644000175000017500000000033612536656106023364 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> "/bin/foo//bar", } /usr/bin/foo2 { deny change_profile /onexec -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_8.sd0000644000175000017500000000032012534527473022471 0ustar jjjj# #=DESCRIPTION audit change_profile with name space with quotes #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> ":foo:/bin/foo", } /usr/bin/foo2 { audit change_profile -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_4.sd0000644000175000017500000000026512536656106024326 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { deny audit change_profile /onexec -> @{LIBVIRT}-fo*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_8.sd0000644000175000017500000000034012536656106023566 0ustar jjjj# #=DESCRIPTION change_profile @{var} with name space with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> ":foo:/bin/foo", } /usr/bin/foo2 { change_profile @{var} -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_re_bad_2.sd0000644000175000017500000000023112536656106024474 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_2.sd0000644000175000017500000000023712536656106024364 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_7.sd0000644000175000017500000000022412536656106024707 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_7.sd0000644000175000017500000000022012536656106023504 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_7.sd0000644000175000017500000000024112536656106024364 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_bad_4.sd0000644000175000017500000000027612536656106024527 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_8.sd0000644000175000017500000000022612536656106025214 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { audit allow owner change_profile @{var} -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_3.sd0000644000175000017500000000023212536656106024473 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_2.sd0000644000175000017500000000023212536656106024004 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_6.sd0000644000175000017500000000177012536656106024054 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with just res, child profile #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> *//ab, } /usr/bin/foo2 { deny change_profile /onexec -> **//ab, } /usr/bin/foo3 { deny change_profile /onexec -> ?//ab, } /usr/bin/foo4 { deny change_profile /onexec -> [ab]//ab, } /usr/bin/foo5 { deny change_profile /onexec -> [^ab]//ab, } /usr/bin/foo6 { deny change_profile /onexec -> ab//*, } /usr/bin/foo7 { deny change_profile /onexec -> ab//**, } /usr/bin/foo8 { deny change_profile /onexec -> ab//?, } /usr/bin/foo9 { deny change_profile /onexec -> ab//[ab], } /usr/bin/foo10 { deny change_profile /onexec -> ab//[^ab], } /usr/bin/foo11 { deny change_profile /onexec -> *//*, } /usr/bin/foo12 { deny change_profile /onexec -> **//*, } /usr/bin/foo13 { deny change_profile /onexec -> ?//*, } /usr/bin/foo14 { deny change_profile /onexec -> [ab]//*, } /usr/bin/foo15 { deny change_profile /onexec -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_bare_ok_1.sd0000644000175000017500000000017412536656106025055 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_re_bad_5.sd0000644000175000017500000000021712536656106024707 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_re_ok_4.sd0000644000175000017500000000163112534527473023322 0ustar jjjj# #=DESCRIPTION audit allow change_profile with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit allow change_profile -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit allow change_profile -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit allow change_profile -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit allow change_profile -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit allow change_profile -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit allow change_profile -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit allow change_profile -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit allow change_profile -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit allow change_profile -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit allow change_profile -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit allow change_profile -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bare_bad_1.sd0000644000175000017500000000020212536656106024633 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_6.sd0000644000175000017500000000023712536656106025214 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_re_bad_2.sd0000644000175000017500000000023512536656106025032 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_6.sd0000644000175000017500000000033012536656106024761 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> "/bin/foo", } /usr/bin/foo2 { allow change_profile @{var} -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_2.sd0000644000175000017500000000022612536656106024063 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_re_bad_6.sd0000644000175000017500000000023112536656106025045 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_4.sd0000644000175000017500000000027012536656106024360 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/unsafe_ok_1.sd0000644000175000017500000000020312723373114023512 0ustar jjjj# #=DESCRIPTION change_profile w/ unsafe modifier #=EXRESULT PASS # /usr/bin/foo { change_profile unsafe /usr/bin/bar -> baz, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_8.sd0000644000175000017500000000020112536656106024320 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo5 { deny audit change_profile /onexec -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_1.sd0000644000175000017500000000023312536656106024354 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_3.sd0000644000175000017500000000023412536656106023516 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_4.sd0000644000175000017500000000030312536656106024757 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { allow change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_6.sd0000644000175000017500000000022712536656106024223 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_6.sd0000644000175000017500000000212512536656106024721 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with just res, child profile #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> *//ab, } /usr/bin/foo2 { audit deny change_profile @{var} -> **//ab, } /usr/bin/foo3 { audit deny change_profile @{var} -> ?//ab, } /usr/bin/foo4 { audit deny change_profile @{var} -> [ab]//ab, } /usr/bin/foo5 { audit deny change_profile @{var} -> [^ab]//ab, } /usr/bin/foo6 { audit deny change_profile @{var} -> ab//*, } /usr/bin/foo7 { audit deny change_profile @{var} -> ab//**, } /usr/bin/foo8 { audit deny change_profile @{var} -> ab//?, } /usr/bin/foo9 { audit deny change_profile @{var} -> ab//[ab], } /usr/bin/foo10 { audit deny change_profile @{var} -> ab//[^ab], } /usr/bin/foo11 { audit deny change_profile @{var} -> *//*, } /usr/bin/foo12 { audit deny change_profile @{var} -> **//*, } /usr/bin/foo13 { audit deny change_profile @{var} -> ?//*, } /usr/bin/foo14 { audit deny change_profile @{var} -> [ab]//*, } /usr/bin/foo15 { audit deny change_profile @{var} -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_5.sd0000644000175000017500000000022412536656106025051 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> *, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_6.sd0000644000175000017500000000022312536656106024476 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/safe_bad_2.sd0000644000175000017500000000021012723373114023263 0ustar jjjj# #=DESCRIPTION change_profile w/ safe modifier but no exec condition #=EXRESULT FAIL # /usr/bin/foo { change_profile safe -> baz, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/allow_re_ok_3.sd0000644000175000017500000000207412534527473024060 0ustar jjjj# #=DESCRIPTION allow change_profile with name space #=EXRESULT PASS # /usr/bin/foo { allow change_profile -> :foo:/bin/foo, } /usr/bin/foo2 { allow change_profile -> :foo:/bin/fo*, } /usr/bin/foo3 { allow change_profile -> :foo:/bin/fo**, } /usr/bin/foo4 { allow change_profile -> :foo:/bin/fo?, } /usr/bin/foo5 { allow change_profile -> :foo:/bin/fo[ab], } /usr/bin/foo6 { allow change_profile -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { allow change_profile -> :fo*:/bin/foo, } /usr/bin/foo8 { allow change_profile -> :fo**:/bin/foo, } /usr/bin/foo9 { allow change_profile -> :fo?:/bin/foo, } /usr/bin/foo10 { allow change_profile -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { allow change_profile -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { allow change_profile -> :fo*:/bin/fo*, } /usr/bin/foo13 { allow change_profile -> :fo**:/bin/fo**, } /usr/bin/foo14 { allow change_profile -> :fo?:/bin/fo?, } /usr/bin/foo15 { allow change_profile -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { allow change_profile -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_8.sd0000644000175000017500000000035712536656106024101 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with name space with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> ":foo:/bin/foo", } /usr/bin/foo2 { deny change_profile @{var} -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_ok_4.sd0000644000175000017500000000030212536656106023513 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit deny change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_5.sd0000644000175000017500000000033212534527473022471 0ustar jjjj# #=DESCRIPTION audit change_profile with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_bad_7.sd0000644000175000017500000000022512536656106023655 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile /onexec -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/unsafe_bad_2.sd0000644000175000017500000000021412723373114023632 0ustar jjjj# #=DESCRIPTION change_profile w/ unsafe modifier but no exec condition #=EXRESULT FAIL # /usr/bin/foo { change_profile unsafe -> baz, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_2.sd0000644000175000017500000000172111232151655022644 0ustar jjjj# #=DESCRIPTION change_profile to a hat #=EXRESULT PASS # /usr/bin/foo { change_profile -> /bin/foo//bar, } /usr/bin/foo2 { change_profile -> /bin/foo//ba*, } /usr/bin/foo3 { change_profile -> /bin/foo//ba**, } /usr/bin/foo4 { change_profile -> /bin/foo//ba?, } /usr/bin/foo5 { change_profile -> /bin/foo//ba[ab], } /usr/bin/foo6 { change_profile -> /bin/foo//ba[^ab], } /usr/bin/foo7 { change_profile -> /bin/fo*//bar, } /usr/bin/foo8 { change_profile -> /bin/fo**//bar, } /usr/bin/foo9 { change_profile -> /bin/fo?//bar, } /usr/bin/foo10 { change_profile -> /bin/fo[ab]//bar, } /usr/bin/foo11 { change_profile -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { change_profile -> /bin/fo*//ba*, } /usr/bin/foo13 { change_profile -> /bin/fo**//ba**, } /usr/bin/foo14 { change_profile -> /bin/fo?//ba?, } /usr/bin/foo15 { change_profile -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { change_profile -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_2.sd0000644000175000017500000000021212536656106023556 0ustar jjjj# #=DESCRIPTION change_profile @{var} to a hat #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_2.sd0000644000175000017500000000022412536656106023644 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ado_bare_bad_1.sd0000644000175000017500000000017312534527473024121 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_ok_3.sd0000644000175000017500000000023312536656106024065 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_bare_ok_1.sd0000644000175000017500000000016112536656106024340 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_6.sd0000644000175000017500000000022612536656106024016 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/d_re_ok_3.sd0000644000175000017500000000205312534527473023162 0ustar jjjj# #=DESCRIPTION deny change_profile with name space #=EXRESULT PASS # /usr/bin/foo { deny change_profile -> :foo:/bin/foo, } /usr/bin/foo2 { deny change_profile -> :foo:/bin/fo*, } /usr/bin/foo3 { deny change_profile -> :foo:/bin/fo**, } /usr/bin/foo4 { deny change_profile -> :foo:/bin/fo?, } /usr/bin/foo5 { deny change_profile -> :foo:/bin/fo[ab], } /usr/bin/foo6 { deny change_profile -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { deny change_profile -> :fo*:/bin/foo, } /usr/bin/foo8 { deny change_profile -> :fo**:/bin/foo, } /usr/bin/foo9 { deny change_profile -> :fo?:/bin/foo, } /usr/bin/foo10 { deny change_profile -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { deny change_profile -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { deny change_profile -> :fo*:/bin/fo*, } /usr/bin/foo13 { deny change_profile -> :fo**:/bin/fo**, } /usr/bin/foo14 { deny change_profile -> :fo?:/bin/fo?, } /usr/bin/foo15 { deny change_profile -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { deny change_profile -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_ok_7.sd0000644000175000017500000000034112536656106023355 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> "/bin/foo//bar", } /usr/bin/foo2 { audit change_profile /onexec -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bare_bad_1.sd0000644000175000017500000000017712536656106025341 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_a_ok_7.sd0000644000175000017500000000035312536656106024071 0ustar jjjj# #=DESCRIPTION audit change_profile @{var} to a hat with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit change_profile @{var} -> "/bin/foo//bar", } /usr/bin/foo2 { audit change_profile @{var} -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_1.sd0000644000175000017500000000021112536656106023504 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_8.sd0000644000175000017500000000032612536656106023061 0ustar jjjj# #=DESCRIPTION change_profile /onexec with name space with quotes #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> ":foo:/bin/foo", } /usr/bin/foo2 { change_profile /onexec -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ok_2.sd0000644000175000017500000000017712536656106023057 0ustar jjjj# #=DESCRIPTION change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bare_bad_1.sd0000644000175000017500000000021112536656106025200 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bare_bad_1.sd0000644000175000017500000000020312536656106024631 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_da_re_bad_7.sd0000644000175000017500000000017612536656106024332 0ustar jjjj# #=DESCRIPTION deny audit in wrong order #=EXRESULT FAIL # /usr/bin/foo { deny audit change_profile /onexec -> :ab:*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_8.sd0000644000175000017500000000125412536656106023550 0ustar jjjj# #=DESCRIPTION change_profile /onexec re with quotes #=EXRESULT PASS # /usr/bin/foo5 { change_profile /onexec -> "/bin/*", } /usr/bin/foo6 { change_profile /onexec -> "/bin/**", } /usr/bin/foo7 { change_profile /onexec -> "/bin/[ab]", } /usr/bin/foo8 { change_profile /onexec -> "/bin/[^ab]", } /usr/bin/foo10 { change_profile /onexec -> "/bin/?ab", } /usr/bin/foo11 { change_profile /onexec -> "/bin/ *", } /usr/bin/foo12 { change_profile /onexec -> "/bin/ **", } /usr/bin/foo13 { change_profile /onexec -> "/bin/ [ab]", } /usr/bin/foo14 { change_profile /onexec -> "/bin/ [^ab]", } /usr/bin/foo15 { change_profile /onexec -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_o_bad_7.sd0000644000175000017500000000023412536656106024222 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { owner change_profile @{var} -> "/bin/foo//bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_4.sd0000644000175000017500000000026212536656106024011 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { audit allow owner change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_re_bad_1.sd0000644000175000017500000000022312536656106024471 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_re_bad_1.sd0000644000175000017500000000023012536656106025042 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> /bin/*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_4.sd0000644000175000017500000000026712536656106023572 0ustar jjjj# #=DESCRIPTION change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ad_ok_6.sd0000644000175000017500000000030512534527473022636 0ustar jjjj# #=DESCRIPTION audit deny change_profile with quotes #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile -> "/bin/foo", } /usr/bin/foo2 { audit deny change_profile -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_8.sd0000644000175000017500000000022612536656106023654 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_re_bad_6.sd0000644000175000017500000000023612536656106025216 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_d_re_ok_7.sd0000644000175000017500000000177012536656106024566 0ustar jjjj# #=DESCRIPTION deny change_profile @{var} with just re, namespace #=EXRESULT PASS # @{var}=/test /usr/bin/foo { deny change_profile @{var} -> :ab:*, } /usr/bin/foo2 { deny change_profile @{var} -> :ab:**, } /usr/bin/foo3 { deny change_profile @{var} -> :ab:?, } /usr/bin/foo4 { deny change_profile @{var} -> :ab:[ab], } /usr/bin/foo5 { deny change_profile @{var} -> :ab:[^ab], } /usr/bin/foo6 { deny change_profile @{var} -> :*:ab, } /usr/bin/foo7 { deny change_profile @{var} -> :**:ab, } /usr/bin/foo8 { deny change_profile @{var} -> :?:ab, } /usr/bin/foo9 { deny change_profile @{var} -> :[ab]:ab, } /usr/bin/foo10 { deny change_profile @{var} -> :[^ab]:ab, } /usr/bin/foo11 { deny change_profile @{var} -> :*:*, } /usr/bin/foo12 { deny change_profile @{var} -> :**:**, } /usr/bin/foo13 { deny change_profile @{var} -> :?:?, } /usr/bin/foo14 { deny change_profile @{var} -> :[ab]:[ab], } /usr/bin/foo15 { deny change_profile @{var} -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_8.sd0000644000175000017500000000135612536656106024053 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec re with quotes #=EXRESULT PASS # /usr/bin/foo5 { audit change_profile /onexec -> "/bin/*", } /usr/bin/foo6 { audit change_profile /onexec -> "/bin/**", } /usr/bin/foo7 { audit change_profile /onexec -> "/bin/[ab]", } /usr/bin/foo8 { audit change_profile /onexec -> "/bin/[^ab]", } /usr/bin/foo10 { audit change_profile /onexec -> "/bin/?ab", } /usr/bin/foo11 { audit change_profile /onexec -> "/bin/ *", } /usr/bin/foo12 { audit change_profile /onexec -> "/bin/ **", } /usr/bin/foo13 { audit change_profile /onexec -> "/bin/ [ab]", } /usr/bin/foo14 { audit change_profile /onexec -> "/bin/ [^ab]", } /usr/bin/foo15 { audit change_profile /onexec -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ad_re_ok_3.sd0000644000175000017500000000243112536656106024205 0ustar jjjj# #=DESCRIPTION audit deny change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { audit deny change_profile /onexec -> :foo:/bin/foo, } /usr/bin/foo2 { audit deny change_profile /onexec -> :foo:/bin/fo*, } /usr/bin/foo3 { audit deny change_profile /onexec -> :foo:/bin/fo**, } /usr/bin/foo4 { audit deny change_profile /onexec -> :foo:/bin/fo?, } /usr/bin/foo5 { audit deny change_profile /onexec -> :foo:/bin/fo[ab], } /usr/bin/foo6 { audit deny change_profile /onexec -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { audit deny change_profile /onexec -> :fo*:/bin/foo, } /usr/bin/foo8 { audit deny change_profile /onexec -> :fo**:/bin/foo, } /usr/bin/foo9 { audit deny change_profile /onexec -> :fo?:/bin/foo, } /usr/bin/foo10 { audit deny change_profile /onexec -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { audit deny change_profile /onexec -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { audit deny change_profile /onexec -> :fo*:/bin/fo*, } /usr/bin/foo13 { audit deny change_profile /onexec -> :fo**:/bin/fo**, } /usr/bin/foo14 { audit deny change_profile /onexec -> :fo?:/bin/fo?, } /usr/bin/foo15 { audit deny change_profile /onexec -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { audit deny change_profile /onexec -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_1.sd0000644000175000017500000000014111232012201022127 0ustar jjjj# #=DESCRIPTION change_profile #=EXRESULT PASS # /usr/bin/foo { change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_aao_re_bad_2.sd0000644000175000017500000000024612536656106025210 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit allow owner change_profile @{var} -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_2.sd0000644000175000017500000000021612536656106023504 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> /bin/foo//bar, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_8.sd0000644000175000017500000000146012536656106024210 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec re with quotes #=EXRESULT PASS # /usr/bin/foo5 { audit allow change_profile /onexec -> "/bin/*", } /usr/bin/foo6 { audit allow change_profile /onexec -> "/bin/**", } /usr/bin/foo7 { audit allow change_profile /onexec -> "/bin/[ab]", } /usr/bin/foo8 { audit allow change_profile /onexec -> "/bin/[^ab]", } /usr/bin/foo10 { audit allow change_profile /onexec -> "/bin/?ab", } /usr/bin/foo11 { audit allow change_profile /onexec -> "/bin/ *", } /usr/bin/foo12 { audit allow change_profile /onexec -> "/bin/ **", } /usr/bin/foo13 { audit allow change_profile /onexec -> "/bin/ [ab]", } /usr/bin/foo14 { audit allow change_profile /onexec -> "/bin/ [^ab]", } /usr/bin/foo15 { audit allow change_profile /onexec -> "/bin/ ?ab", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aao_bad_3.sd0000644000175000017500000000023212536656106024005 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit allow owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/do_bare_bad_1.sd0000644000175000017500000000016512534527473023761 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile #=EXRESULT FAIL # /usr/bin/foo { deny owner change_profile, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_5.sd0000644000175000017500000000036612536656106023523 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit allow change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_4.sd0000644000175000017500000000025412536656106023651 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" /usr/bin/foo { audit owner change_profile /onexec -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_do_bad_6.sd0000644000175000017500000000023412536656106024365 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny owner change_profile @{var} -> "/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_6.sd0000644000175000017500000000145011232151655022647 0ustar jjjj# #=DESCRIPTION change_profile with just res, child profile #=EXRESULT PASS # /usr/bin/foo { change_profile -> *//ab, } /usr/bin/foo2 { change_profile -> **//ab, } /usr/bin/foo3 { change_profile -> ?//ab, } /usr/bin/foo4 { change_profile -> [ab]//ab, } /usr/bin/foo5 { change_profile -> [^ab]//ab, } /usr/bin/foo6 { change_profile -> ab//*, } /usr/bin/foo7 { change_profile -> ab//**, } /usr/bin/foo8 { change_profile -> ab//?, } /usr/bin/foo9 { change_profile -> ab//[ab], } /usr/bin/foo10 { change_profile -> ab//[^ab], } /usr/bin/foo11 { change_profile -> *//*, } /usr/bin/foo12 { change_profile -> **//*, } /usr/bin/foo13 { change_profile -> ?//*, } /usr/bin/foo14 { change_profile -> [ab]//*, } /usr/bin/foo15 { change_profile -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_re_ok_5.sd0000644000175000017500000000062712536656106024725 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with just res #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> *, } /usr/bin/foo2 { audit deny change_profile @{var} -> **, } /usr/bin/foo3 { audit deny change_profile @{var} -> ?, } /usr/bin/foo4 { audit deny change_profile @{var} -> [ab], } /usr/bin/foo5 { audit deny change_profile @{var} -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bad_5.sd0000644000175000017500000000034612536656106024365 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit owner change_profile @{var} -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_7.sd0000644000175000017500000000033112536656106023565 0ustar jjjj# #=DESCRIPTION change_profile @{var} to a hat with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> "/bin/foo//bar", } /usr/bin/foo2 { change_profile @{var} -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_re_bad_6.sd0000644000175000017500000000020712536656106024176 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> *//ab, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_re_ok_2.sd0000644000175000017500000000227712536656106024746 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec to a hat #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> /bin/foo//bar, } /usr/bin/foo2 { allow change_profile /onexec -> /bin/foo//ba*, } /usr/bin/foo3 { allow change_profile /onexec -> /bin/foo//ba**, } /usr/bin/foo4 { allow change_profile /onexec -> /bin/foo//ba?, } /usr/bin/foo5 { allow change_profile /onexec -> /bin/foo//ba[ab], } /usr/bin/foo6 { allow change_profile /onexec -> /bin/foo//ba[^ab], } /usr/bin/foo7 { allow change_profile /onexec -> /bin/fo*//bar, } /usr/bin/foo8 { allow change_profile /onexec -> /bin/fo**//bar, } /usr/bin/foo9 { allow change_profile /onexec -> /bin/fo?//bar, } /usr/bin/foo10 { allow change_profile /onexec -> /bin/fo[ab]//bar, } /usr/bin/foo11 { allow change_profile /onexec -> /bin/fo[^ab]//bar, } /usr/bin/foo12 { allow change_profile /onexec -> /bin/fo*//ba*, } /usr/bin/foo13 { allow change_profile /onexec -> /bin/fo**//ba**, } /usr/bin/foo14 { allow change_profile /onexec -> /bin/fo?//ba?, } /usr/bin/foo15 { allow change_profile /onexec -> /bin/fo[ab]//ba[ab], } /usr/bin/foo16 { allow change_profile /onexec -> /bin/fo[^ab]//ba[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_6.sd0000644000175000017500000000215012536656106024203 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with just res, child profile #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> *//ab, } /usr/bin/foo2 { audit allow change_profile /onexec -> **//ab, } /usr/bin/foo3 { audit allow change_profile /onexec -> ?//ab, } /usr/bin/foo4 { audit allow change_profile /onexec -> [ab]//ab, } /usr/bin/foo5 { audit allow change_profile /onexec -> [^ab]//ab, } /usr/bin/foo6 { audit allow change_profile /onexec -> ab//*, } /usr/bin/foo7 { audit allow change_profile /onexec -> ab//**, } /usr/bin/foo8 { audit allow change_profile /onexec -> ab//?, } /usr/bin/foo9 { audit allow change_profile /onexec -> ab//[ab], } /usr/bin/foo10 { audit allow change_profile /onexec -> ab//[^ab], } /usr/bin/foo11 { audit allow change_profile /onexec -> *//*, } /usr/bin/foo12 { audit allow change_profile /onexec -> **//*, } /usr/bin/foo13 { audit allow change_profile /onexec -> ?//*, } /usr/bin/foo14 { audit allow change_profile /onexec -> [ab]//*, } /usr/bin/foo15 { audit allow change_profile /onexec -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_re_bad_3.sd0000644000175000017500000000022412536656106024333 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_o_bad_1.sd0000644000175000017500000000021112536656106023476 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { owner change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_re_ok_7.sd0000644000175000017500000000177312536656106024060 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with just re, namespace #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> :ab:*, } /usr/bin/foo2 { deny change_profile /onexec -> :ab:**, } /usr/bin/foo3 { deny change_profile /onexec -> :ab:?, } /usr/bin/foo4 { deny change_profile /onexec -> :ab:[ab], } /usr/bin/foo5 { deny change_profile /onexec -> :ab:[^ab], } /usr/bin/foo6 { deny change_profile /onexec -> :*:ab, } /usr/bin/foo7 { deny change_profile /onexec -> :**:ab, } /usr/bin/foo8 { deny change_profile /onexec -> :?:ab, } /usr/bin/foo9 { deny change_profile /onexec -> :[ab]:ab, } /usr/bin/foo10 { deny change_profile /onexec -> :[^ab]:ab, } /usr/bin/foo11 { deny change_profile /onexec -> :*:*, } /usr/bin/foo12 { deny change_profile /onexec -> :**:**, } /usr/bin/foo13 { deny change_profile /onexec -> :?:?, } /usr/bin/foo14 { deny change_profile /onexec -> :[ab]:[ab], } /usr/bin/foo15 { deny change_profile /onexec -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_ok_3.sd0000644000175000017500000000020212534527473022463 0ustar jjjj# #=DESCRIPTION audit change_profile with name space #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_1.sd0000644000175000017500000000017312536656106023355 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec #=EXRESULT PASS # /usr/bin/foo { deny change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_re_ok_3.sd0000644000175000017500000000213212536656106024250 0ustar jjjj# #=DESCRIPTION change_profile @{var} with name space #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> :foo:/bin/foo, } /usr/bin/foo2 { change_profile @{var} -> :foo:/bin/fo*, } /usr/bin/foo3 { change_profile @{var} -> :foo:/bin/fo**, } /usr/bin/foo4 { change_profile @{var} -> :foo:/bin/fo?, } /usr/bin/foo5 { change_profile @{var} -> :foo:/bin/fo[ab], } /usr/bin/foo6 { change_profile @{var} -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { change_profile @{var} -> :fo*:/bin/foo, } /usr/bin/foo8 { change_profile @{var} -> :fo**:/bin/foo, } /usr/bin/foo9 { change_profile @{var} -> :fo?:/bin/foo, } /usr/bin/foo10 { change_profile @{var} -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { change_profile @{var} -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { change_profile @{var} -> :fo*:/bin/fo*, } /usr/bin/foo13 { change_profile @{var} -> :fo**:/bin/fo**, } /usr/bin/foo14 { change_profile @{var} -> :fo?:/bin/fo?, } /usr/bin/foo15 { change_profile @{var} -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { change_profile @{var} -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_da_bad_8.sd0000644000175000017500000000023712536656106024354 0ustar jjjj# #=DESCRIPTION deny audit is wrong order for prefixes #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { deny audit change_profile @{var} -> ":foo:/bin/foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_4.sd0000644000175000017500000000031512536656106024230 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ado_bad_1.sd0000644000175000017500000000022412536656106024007 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit deny owner change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_7.sd0000644000175000017500000000036312536656106023522 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> "/bin/foo//bar", } /usr/bin/foo2 { audit allow change_profile /onexec -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_a_re_ok_5.sd0000644000175000017500000000056212536656106024046 0ustar jjjj# #=DESCRIPTION audit change_profile /onexec with just res #=EXRESULT PASS # /usr/bin/foo { audit change_profile /onexec -> *, } /usr/bin/foo2 { audit change_profile /onexec -> **, } /usr/bin/foo3 { audit change_profile /onexec -> ?, } /usr/bin/foo4 { audit change_profile /onexec -> [ab], } /usr/bin/foo5 { audit change_profile /onexec -> [^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_do_re_bad_8.sd0000644000175000017500000000022012536656106024337 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo5 { deny owner change_profile /onexec -> "/bin/*", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_6.sd0000644000175000017500000000165012536656106023546 0ustar jjjj# #=DESCRIPTION change_profile /onexec with just res, child profile #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> *//ab, } /usr/bin/foo2 { change_profile /onexec -> **//ab, } /usr/bin/foo3 { change_profile /onexec -> ?//ab, } /usr/bin/foo4 { change_profile /onexec -> [ab]//ab, } /usr/bin/foo5 { change_profile /onexec -> [^ab]//ab, } /usr/bin/foo6 { change_profile /onexec -> ab//*, } /usr/bin/foo7 { change_profile /onexec -> ab//**, } /usr/bin/foo8 { change_profile /onexec -> ab//?, } /usr/bin/foo9 { change_profile /onexec -> ab//[ab], } /usr/bin/foo10 { change_profile /onexec -> ab//[^ab], } /usr/bin/foo11 { change_profile /onexec -> *//*, } /usr/bin/foo12 { change_profile /onexec -> **//*, } /usr/bin/foo13 { change_profile /onexec -> ?//*, } /usr/bin/foo14 { change_profile /onexec -> [ab]//*, } /usr/bin/foo15 { change_profile /onexec -> [^ab]//*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_ok_8.sd0000644000175000017500000000037212536656106023523 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with name space with quotes #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile /onexec -> ":foo:/bin/foo", } /usr/bin/foo2 { audit allow change_profile /onexec -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_1.sd0000644000175000017500000000017112534527473022627 0ustar jjjj# #=DESCRIPTION audit allow change_profile #=EXRESULT PASS # /usr/bin/foo { audit allow change_profile -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_ao_bad_3.sd0000644000175000017500000000022412536656106023645 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # /usr/bin/foo { audit owner change_profile /onexec -> :foo:/bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_allow_ok_7.sd0000644000175000017500000000035312536656106024767 0ustar jjjj# #=DESCRIPTION allow change_profile @{var} to a hat with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { allow change_profile @{var} -> "/bin/foo//bar", } /usr/bin/foo2 { allow change_profile @{var} -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_re_ok_3.sd0000644000175000017500000000213612536656106023543 0ustar jjjj# #=DESCRIPTION change_profile /onexec with name space #=EXRESULT PASS # /usr/bin/foo { change_profile /onexec -> :foo:/bin/foo, } /usr/bin/foo2 { change_profile /onexec -> :foo:/bin/fo*, } /usr/bin/foo3 { change_profile /onexec -> :foo:/bin/fo**, } /usr/bin/foo4 { change_profile /onexec -> :foo:/bin/fo?, } /usr/bin/foo5 { change_profile /onexec -> :foo:/bin/fo[ab], } /usr/bin/foo6 { change_profile /onexec -> :foo:/bin/fo[^ab], } /usr/bin/foo7 { change_profile /onexec -> :fo*:/bin/foo, } /usr/bin/foo8 { change_profile /onexec -> :fo**:/bin/foo, } /usr/bin/foo9 { change_profile /onexec -> :fo?:/bin/foo, } /usr/bin/foo10 { change_profile /onexec -> :fo[ab]:/bin/foo, } /usr/bin/foo11 { change_profile /onexec -> :fo[^ab]:/bin/foo, } /usr/bin/foo12 { change_profile /onexec -> :fo*:/bin/fo*, } /usr/bin/foo13 { change_profile /onexec -> :fo**:/bin/fo**, } /usr/bin/foo14 { change_profile /onexec -> :fo?:/bin/fo?, } /usr/bin/foo15 { change_profile /onexec -> :fo[ab]:/bin/fo[ab], } /usr/bin/foo16 { change_profile /onexec -> :fo[^ab]:/bin/fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/re_ok_1.sd0000644000175000017500000000045011232151655022641 0ustar jjjj# #=DESCRIPTION change_profile #=EXRESULT PASS # /usr/bin/foo { change_profile -> /bin/*, } /usr/bin/foo2 { change_profile -> /bin/**, } /usr/bin/foo3 { change_profile -> /bin/?, } /usr/bin/foo4 { change_profile -> /bin/[ab], } /usr/bin/foo5 { change_profile -> /bin/[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_1.sd0000644000175000017500000000024012536656106024516 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_5.sd0000644000175000017500000000035212536656106024253 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { allow change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_allow_ok_8.sd0000644000175000017500000000035012536656106024254 0ustar jjjj# #=DESCRIPTION allow change_profile /onexec with name space with quotes #=EXRESULT PASS # /usr/bin/foo { allow change_profile /onexec -> ":foo:/bin/foo", } /usr/bin/foo2 { allow change_profile /onexec -> ":foo:/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_aa_re_ok_4.sd0000644000175000017500000000177112536656106024211 0ustar jjjj# #=DESCRIPTION audit allow change_profile /onexec with a variable (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" @{LIBVIRT_RE}="libvirt*" /usr/bin/foo { audit allow change_profile /onexec -> @{LIBVIRT}-fo*, } /usr/bin/foo2 { audit allow change_profile /onexec -> @{LIBVIRT}-fo**, } /usr/bin/foo3 { audit allow change_profile /onexec -> @{LIBVIRT}-fo[ab], } /usr/bin/foo4 { audit allow change_profile /onexec -> @{LIBVIRT}-fo[^ab], } /usr/bin/foo5 { audit allow change_profile /onexec -> @{LIBVIRT}-fo?, } /usr/bin/foo6 { audit allow change_profile /onexec -> @{LIBVIRT_RE}-foo, } /usr/bin/foo7 { audit allow change_profile /onexec -> @{LIBVIRT_RE}-fo*, } /usr/bin/foo8 { audit allow change_profile /onexec -> @{LIBVIRT_RE}-fo**, } /usr/bin/foo9 { audit allow change_profile /onexec -> @{LIBVIRT_RE}-fo?, } /usr/bin/foo10 { audit allow change_profile /onexec -> @{LIBVIRT_RE}-fo[ab], } /usr/bin/foo11 { audit allow change_profile /onexec -> @{LIBVIRT_RE}-fo[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ado_bad_4.sd0000644000175000017500000000027512536656106024531 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{LIBVIRT}="libvirt" @{var}=/test /usr/bin/foo { audit deny owner change_profile @{var} -> @{LIBVIRT}-foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_no_conflict_safe1.sd0000644000175000017500000000033512724212206025561 0ustar jjjj# #=DESCRIPTION 'safe' and unspecified exec condition shouldn't conflict because 'safe' is the default #=EXRESULT PASS # /usr/bin/foo { change_profile safe /onexec -> /bin/foo, change_profile /onexec -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onx_d_ok_5.sd0000644000175000017500000000035012536656106023356 0ustar jjjj# #=DESCRIPTION deny change_profile /onexec with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { deny change_profile /onexec -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/ok_7.sd0000644000175000017500000000026711232151655022167 0ustar jjjj# #=DESCRIPTION change_profile to a hat with quotes #=EXRESULT PASS # /usr/bin/foo { change_profile -> "/bin/foo//bar", } /usr/bin/foo2 { change_profile -> "/bin/foo// bar", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ok_1.sd0000644000175000017500000000017412536656106023564 0ustar jjjj# #=DESCRIPTION change_profile @{var} #=EXRESULT PASS # @{var}=/test /usr/bin/foo { change_profile @{var} -> /bin/foo, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ad_ok_6.sd0000644000175000017500000000034712536656106024237 0ustar jjjj# #=DESCRIPTION audit deny change_profile @{var} with quotes #=EXRESULT PASS # @{var}=/test /usr/bin/foo { audit deny change_profile @{var} -> "/bin/foo", } /usr/bin/foo2 { audit deny change_profile @{var} -> "/bin/ foo", } apparmor-2.11.0/parser/tst/simple_tests/change_profile/aa_ok_5.sd0000644000175000017500000000034612534527473022637 0ustar jjjj# #=DESCRIPTION audit allow change_profile with variable+regex (LP: #390810) #=EXRESULT PASS # @{LIBVIRT}="libvirt" /usr/bin/foo { audit allow change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/change_profile/a_re_ok_7.sd0000644000175000017500000000161312534527473023164 0ustar jjjj# #=DESCRIPTION audit change_profile with just re, namespace #=EXRESULT PASS # /usr/bin/foo { audit change_profile -> :ab:*, } /usr/bin/foo2 { audit change_profile -> :ab:**, } /usr/bin/foo3 { audit change_profile -> :ab:?, } /usr/bin/foo4 { audit change_profile -> :ab:[ab], } /usr/bin/foo5 { audit change_profile -> :ab:[^ab], } /usr/bin/foo6 { audit change_profile -> :*:ab, } /usr/bin/foo7 { audit change_profile -> :**:ab, } /usr/bin/foo8 { audit change_profile -> :?:ab, } /usr/bin/foo9 { audit change_profile -> :[ab]:ab, } /usr/bin/foo10 { audit change_profile -> :[^ab]:ab, } /usr/bin/foo11 { audit change_profile -> :*:*, } /usr/bin/foo12 { audit change_profile -> :**:**, } /usr/bin/foo13 { audit change_profile -> :?:?, } /usr/bin/foo14 { audit change_profile -> :[ab]:[ab], } /usr/bin/foo15 { audit change_profile -> :[^ab]:[^ab], } apparmor-2.11.0/parser/tst/simple_tests/change_profile/onxvar_ao_bare_bad_1.sd0000644000175000017500000000021712536656106025347 0ustar jjjj# #=DESCRIPTION owner not allowed in change_profile rule #=EXRESULT FAIL # @{var}=/test /usr/bin/foo { audit owner change_profile @{var}, } apparmor-2.11.0/parser/tst/simple_tests/capability/0000755000175000017500000000000013034613166020151 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow1.sd0000644000175000017500000000220012217051110022346 0ustar jjjj# #=DESCRIPTION validate uses of allow/capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { allow capability chown, allow capability dac_override, allow capability dac_read_search, allow capability fowner, allow capability fsetid, allow capability kill, allow capability setgid, allow capability setuid, allow capability setpcap, allow capability linux_immutable, allow capability net_bind_service, allow capability net_broadcast, allow capability net_admin, allow capability net_raw, allow capability ipc_lock, allow capability ipc_owner, allow capability sys_module, allow capability sys_rawio, allow capability sys_chroot, allow capability sys_ptrace, allow capability sys_pacct, allow capability sys_admin, allow capability sys_boot, allow capability sys_nice, allow capability sys_resource, allow capability sys_time, allow capability sys_tty_config, allow capability mknod, allow capability lease, allow capability audit_write, allow capability audit_control, allow capability setfcap, allow capability mac_override, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_dup_allow4.sd0000644000175000017500000000154212217051110023231 0ustar jjjj# #=DESCRIPTION validate audit allow of duplicate multiple capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exit102 { audit allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, audit allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow9.sd0000644000175000017500000000030212217051110022357 0ustar jjjj# #=DESCRIPTION validate audit allow with bare capability keyword. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { audit allow capability, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_outside1.sd0000644000175000017500000000012512611240354023035 0ustar jjjj# #=DESCRIPTION capability rule outside of a profile #=EXRESULT FAIL # capability, apparmor-2.11.0/parser/tst/simple_tests/capability/ok_dup_allow1.sd0000644000175000017500000000035512217051110023227 0ustar jjjj# #=DESCRIPTION validate allow of duplicate capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # # Test for duplicates? /does/not/exist3 { allow capability mknod, allow capability mknod, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_dup_allow6.sd0000644000175000017500000000052612217051110023234 0ustar jjjj# #=DESCRIPTION validate duplicate capability entries. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # # Test for duplicates? /does/not/exist3 { capability mknod, audit allow capability mknod, deny capability mknod, audit allow capability mknod, deny capability mknod, allow capability mknod, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_1.sd0000644000175000017500000000024411503736226021451 0ustar jjjj# #=DESCRIPTION fail CAP_XXX syntax. #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { capability CAP_CHOWN, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_dup_allow2.sd0000644000175000017500000000037712217051110023234 0ustar jjjj# #=DESCRIPTION validate audit allow of duplicate capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # # Test for duplicates? /does/not/exist3 { audit allow capability mknod, audit allow capability mknod, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok1.sd0000644000175000017500000000672011503736226021202 0ustar jjjj# #=DESCRIPTION validate some uses of capabilties. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { capability chown, capability dac_override, capability dac_read_search, capability fowner, capability fsetid, capability kill, capability setgid, capability setuid, capability setpcap, capability linux_immutable, capability net_bind_service, capability net_broadcast, capability net_admin, capability net_raw, capability ipc_lock, capability ipc_owner, capability sys_module, capability sys_rawio, capability sys_chroot, capability sys_ptrace, capability sys_pacct, capability sys_admin, capability sys_boot, capability sys_nice, capability sys_resource, capability sys_time, capability sys_tty_config, capability mknod, capability lease, capability audit_write, capability audit_control, capability setfcap, capability mac_override, } /does/not/exist2 { ^chown { capability chown, } ^dac_override { capability dac_override, } ^dac_read_search { capability dac_read_search, } ^fowner { capability fowner, } ^fsetid { capability fsetid, } ^kill { capability kill, } ^setgid { capability setgid, } ^setuid { capability setuid, } ^setpcap { capability setpcap, } ^linux_immutable { capability linux_immutable, } ^net_bind_service { capability net_bind_service, } ^net_broadcast { capability net_broadcast, } ^net_admin { capability net_admin, } ^net_raw { capability net_raw, } ^ipc_lock { capability ipc_lock, } ^ipc_owner { capability ipc_owner, } ^sys_module { capability sys_module, } ^sys_rawio { capability sys_rawio, } ^sys_chroot { capability sys_chroot, } ^sys_ptrace { capability sys_ptrace, } ^sys_pacct { capability sys_pacct, } ^sys_admin { capability sys_admin, } ^sys_boot { capability sys_boot, } ^sys_nice { capability sys_nice, } ^sys_resource { capability sys_resource, } ^sys_time { capability sys_time, } ^sys_tty_config { capability sys_tty_config, } ^mknod { capability mknod, } ^lease { capability lease, } ^audit_write { capability audit_write, } ^audit_control { capability audit_control, } } # Test for duplicates? /does/not/exist3 { capability mknod, capability mknod, } /does/not/exit101 { capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } /does/not/exit102 { capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow8.sd0000644000175000017500000000031512217051110022362 0ustar jjjj# #=DESCRIPTION validate allow with bare capability in hat. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { ^capability { allow capability, } } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow3.sd0000644000175000017500000000077412217051110022366 0ustar jjjj# #=DESCRIPTION validate allow w/multiple capabilities in a line. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exit101 { allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_3.sd0000644000175000017500000000025211717224153021450 0ustar jjjj# #=DESCRIPTION fail CAP_XXX syntax. #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { capability chown CAP_CHOWN, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_4.sd0000644000175000017500000000024711717224153021455 0ustar jjjj# #=DESCRIPTION fail unknown keyword #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { capability chown foobar, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow7.sd0000644000175000017500000000026612217051110022366 0ustar jjjj# #=DESCRIPTION validate allow with bare capability keyword. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { allow capability, } apparmor-2.11.0/parser/tst/simple_tests/capability/set/0000755000175000017500000000000013034613165020743 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/capability/set/ok1.sd0000644000175000017500000000721611717224364022000 0ustar jjjj# #=DESCRIPTION validate some uses of capabilties. #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { set capability chown, set capability dac_override, set capability dac_read_search, set capability fowner, set capability fsetid, set capability kill, set capability setgid, set capability setuid, set capability setpcap, set capability linux_immutable, set capability net_bind_service, set capability net_broadcast, set capability net_admin, set capability net_raw, set capability ipc_lock, set capability ipc_owner, set capability sys_module, set capability sys_rawio, set capability sys_chroot, set capability sys_ptrace, set capability sys_pacct, set capability sys_admin, set capability sys_boot, set capability sys_nice, set capability sys_resource, set capability sys_time, set capability sys_tty_config, set capability mknod, set capability lease, set capability audit_write, set capability audit_control, } /does/not/exist2 { ^chown { set capability chown, } ^dac_override { set capability dac_override, } ^dac_read_search { set capability dac_read_search, } ^fowner { set capability fowner, } ^fsetid { set capability fsetid, } ^kill { set capability kill, } ^setgid { set capability setgid, } ^setuid { set capability setuid, } ^setpcap { set capability setpcap, } ^linux_immutable { set capability linux_immutable, } ^net_bind_service { set capability net_bind_service, } ^net_broadcast { set capability net_broadcast, } ^net_admin { set capability net_admin, } ^net_raw { set capability net_raw, } ^ipc_lock { set capability ipc_lock, } ^ipc_owner { set capability ipc_owner, } ^sys_module { set capability sys_module, } ^sys_rawio { set capability sys_rawio, } ^sys_chroot { set capability sys_chroot, } ^sys_ptrace { set capability sys_ptrace, } ^sys_pacct { set capability sys_pacct, } ^sys_admin { set capability sys_admin, } ^sys_boot { set capability sys_boot, } ^sys_nice { set capability sys_nice, } ^sys_resource { set capability sys_resource, } ^sys_time { set capability sys_time, } ^sys_tty_config { set capability sys_tty_config, } ^mknod { set capability mknod, } ^lease { set capability lease, } ^audit_write { set capability audit_write, } ^audit_control { set capability audit_control, } } # Test for duplicates? /does/not/exist3 { set capability mknod, set capability mknod, } /does/not/exit101 { set capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } /does/not/exit102 { set capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, set capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_dup_allow5.sd0000644000175000017500000000301012217051110023222 0ustar jjjj# #=DESCRIPTION validate duplicate multiple capabilities w/differing perm mods. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exit102 { allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, audit allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, audit deny capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, deny capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow10.sd0000644000175000017500000000033112217051110022431 0ustar jjjj# #=DESCRIPTION validate audit allow with bare capability in hat. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { ^capability { audit allow capability, } } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow5.sd0000644000175000017500000000363012217051110022362 0ustar jjjj# #=DESCRIPTION validate audit allow w/capabilities in hats. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist2 { ^chown { audit allow capability chown, } ^dac_override { audit allow capability dac_override, } ^dac_read_search { audit allow capability dac_read_search, } ^fowner { audit allow capability fowner, } ^fsetid { audit allow capability fsetid, } ^kill { audit allow capability kill, } ^setgid { audit allow capability setgid, } ^setuid { audit allow capability setuid, } ^setpcap { audit allow capability setpcap, } ^linux_immutable { audit allow capability linux_immutable, } ^net_bind_service { audit allow capability net_bind_service, } ^net_broadcast { audit allow capability net_broadcast, } ^net_admin { audit allow capability net_admin, } ^net_raw { audit allow capability net_raw, } ^ipc_lock { audit allow capability ipc_lock, } ^ipc_owner { audit allow capability ipc_owner, } ^sys_module { audit allow capability sys_module, } ^sys_rawio { audit allow capability sys_rawio, } ^sys_chroot { audit allow capability sys_chroot, } ^sys_ptrace { audit allow capability sys_ptrace, } ^sys_pacct { audit allow capability sys_pacct, } ^sys_admin { audit allow capability sys_admin, } ^sys_boot { audit allow capability sys_boot, } ^sys_nice { audit allow capability sys_nice, } ^sys_resource { audit allow capability sys_resource, } ^sys_time { audit allow capability sys_time, } ^sys_tty_config { audit allow capability sys_tty_config, } ^mknod { audit allow capability mknod, } ^lease { audit allow capability lease, } ^audit_write { audit allow capability audit_write, } ^audit_control { audit allow capability audit_control, } } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow2.sd0000644000175000017500000000333412217051110022360 0ustar jjjj# #=DESCRIPTION validate uses of allow/capabilities in hats #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist2 { ^chown { allow capability chown, } ^dac_override { allow capability dac_override, } ^dac_read_search { allow capability dac_read_search, } ^fowner { allow capability fowner, } ^fsetid { allow capability fsetid, } ^kill { allow capability kill, } ^setgid { allow capability setgid, } ^setuid { allow capability setuid, } ^setpcap { allow capability setpcap, } ^linux_immutable { allow capability linux_immutable, } ^net_bind_service { allow capability net_bind_service, } ^net_broadcast { allow capability net_broadcast, } ^net_admin { allow capability net_admin, } ^net_raw { allow capability net_raw, } ^ipc_lock { allow capability ipc_lock, } ^ipc_owner { allow capability ipc_owner, } ^sys_module { allow capability sys_module, } ^sys_rawio { allow capability sys_rawio, } ^sys_chroot { allow capability sys_chroot, } ^sys_ptrace { allow capability sys_ptrace, } ^sys_pacct { allow capability sys_pacct, } ^sys_admin { allow capability sys_admin, } ^sys_boot { allow capability sys_boot, } ^sys_nice { allow capability sys_nice, } ^sys_resource { allow capability sys_resource, } ^sys_time { allow capability sys_time, } ^sys_tty_config { allow capability sys_tty_config, } ^mknod { allow capability mknod, } ^lease { allow capability lease, } ^audit_write { allow capability audit_write, } ^audit_control { allow capability audit_control, } } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow4.sd0000644000175000017500000000250612217051110022362 0ustar jjjj# #=DESCRIPTION validate audit allow w/capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { audit allow capability chown, audit allow capability dac_override, audit allow capability dac_read_search, audit allow capability fowner, audit allow capability fsetid, audit allow capability kill, audit allow capability setgid, audit allow capability setuid, audit allow capability setpcap, audit allow capability linux_immutable, audit allow capability net_bind_service, audit allow capability net_broadcast, audit allow capability net_admin, audit allow capability net_raw, audit allow capability ipc_lock, audit allow capability ipc_owner, audit allow capability sys_module, audit allow capability sys_rawio, audit allow capability sys_chroot, audit allow capability sys_ptrace, audit allow capability sys_pacct, audit allow capability sys_admin, audit allow capability sys_boot, audit allow capability sys_nice, audit allow capability sys_resource, audit allow capability sys_time, audit allow capability sys_tty_config, audit allow capability mknod, audit allow capability lease, audit allow capability audit_write, audit allow capability audit_control, audit allow capability setfcap, audit allow capability mac_override, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_allow6.sd0000644000175000017500000000077612217051110022373 0ustar jjjj# #=DESCRIPTION validate audit allow w/multiple capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exit101 { audit allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok_dup_allow3.sd0000644000175000017500000000152012217051110023224 0ustar jjjj# #=DESCRIPTION validate allow of duplicate multiple capabilities. #=EXRESULT PASS # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exit102 { allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, allow capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_5.sd0000644000175000017500000000027112217051110021436 0ustar jjjj# #=DESCRIPTION fail conflicting perm mod same line #=EXRESULT FAIL # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { allow deny capability chown, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok2.sd0000644000175000017500000000761211503736226021204 0ustar jjjj# #=DESCRIPTION validate some uses of capabilties. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { audit capability chown, audit capability dac_override, audit capability dac_read_search, audit capability fowner, audit capability fsetid, audit capability kill, audit capability setgid, audit capability setuid, audit capability setpcap, audit capability linux_immutable, audit capability net_bind_service, audit capability net_broadcast, audit capability net_admin, audit capability net_raw, audit capability ipc_lock, audit capability ipc_owner, audit capability sys_module, audit capability sys_rawio, audit capability sys_chroot, audit capability sys_ptrace, audit capability sys_pacct, audit capability sys_admin, audit capability sys_boot, audit capability sys_nice, audit capability sys_resource, audit capability sys_time, audit capability sys_tty_config, audit capability mknod, audit capability lease, audit capability audit_write, audit capability audit_control, audit capability setfcap, audit capability mac_override, } /does/not/exist2 { ^chown { deny capability chown, } ^dac_override { deny capability dac_override, } ^dac_read_search { deny capability dac_read_search, } ^fowner { deny capability fowner, } ^fsetid { deny capability fsetid, } ^kill { deny capability kill, } ^setgid { deny capability setgid, } ^setuid { deny capability setuid, } ^setpcap { deny capability setpcap, } ^linux_immutable { deny capability linux_immutable, } ^net_bind_service { deny capability net_bind_service, } ^net_broadcast { deny capability net_broadcast, } ^net_admin { deny capability net_admin, } ^net_raw { deny capability net_raw, } ^ipc_lock { deny capability ipc_lock, } ^ipc_owner { deny capability ipc_owner, } ^sys_module { deny capability sys_module, } ^sys_rawio { deny capability sys_rawio, } ^sys_chroot { deny capability sys_chroot, } ^sys_ptrace { deny capability sys_ptrace, } ^sys_pacct { deny capability sys_pacct, } ^sys_admin { deny capability sys_admin, } ^sys_boot { deny capability sys_boot, } ^sys_nice { deny capability sys_nice, } ^sys_resource { deny capability sys_resource, } ^sys_time { deny capability sys_time, } ^sys_tty_config { deny capability sys_tty_config, } ^mknod { deny capability mknod, } ^lease { deny capability lease, } ^audit_write { deny capability audit_write, } ^audit_control { deny capability audit_control, } } # Test for duplicates? /does/not/exist3 { capability mknod, audit capability mknod, deny capability mknod, audit capability mknod, deny capability mknod, capability mknod, } /does/not/exit101 { capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } /does/not/exit102 { audit deny capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, deny capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_6.sd0000644000175000017500000000027712217051110021445 0ustar jjjj# #=DESCRIPTION fail conflicting perm mod same line #=EXRESULT FAIL # vim:syntax=apparmor # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { audit allow deny capability chown, } apparmor-2.11.0/parser/tst/simple_tests/capability/ok3.sd0000644000175000017500000000024711717224153021200 0ustar jjjj# #=DESCRIPTION validate some uses of capabilties. #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { capability, } apparmor-2.11.0/parser/tst/simple_tests/capability/bad_2.sd0000644000175000017500000000024111503736226021447 0ustar jjjj# #=DESCRIPTION fail unknown keyword #=EXRESULT FAIL # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { capability foobar, } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/0000755000175000017500000000000013034613161021661 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix_2/0000755000175000017500000000000013034613160025114 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix_2/good.dpkg-new.include0000644000175000017500000000013312550272167031133 0ustar jjjj#=DESCRIPTION Valid include # # if parsed stand-alone, #=EXRESULT PASS @{FOO} = /foo /bar apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ok_2.sd0000644000175000017500000000037612547337055023066 0ustar jjjj# #=DESCRIPTION includes testing - test some "odd" locations of includes #=EXRESULT PASS # /does/not/exist { /does/not/exist mr, #include /bin/true Px, include #include } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ok_3.sd0000644000175000017500000000026012547337055023057 0ustar jjjj# #=DESCRIPTION includes testing - basic include of a directory #=EXRESULT PASS # /does/not/exist { include include include } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/bad_1.sd0000644000175000017500000000022412547337055023172 0ustar jjjj# #=DESCRIPTION includes testing - non-existent include should fail #=EXRESULT FAIL # /does/not/exist { include } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix_2.sd0000644000175000017500000000024612547337055025464 0ustar jjjj# #=DESCRIPTION includes testing - verify that only suffixes are ignored #=EXRESULT PASS # include /does/not/exist { @{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix_1.sd0000644000175000017500000000024712547337055025464 0ustar jjjj# #=DESCRIPTION includes testing - verify that ignored suffixes are ignored #=EXRESULT PASS # include /does/not/exist { @{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/recursive.sd0000644000175000017500000000021612547337055024234 0ustar jjjj# #=DESCRIPTION includes testing - recursive include should fail #=EXRESULT FAIL # /does/not/exist { include } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/bad_3.sd0000644000175000017500000000025612547337055023201 0ustar jjjj# #=DESCRIPTION includes testing - non-existent include should fail #=EXRESULT FAIL # /does/not/exist { include include } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/bad_4.sd0000644000175000017500000000025612547337055023202 0ustar jjjj# #=DESCRIPTION includes testing - non-existent include should fail #=EXRESULT FAIL # /does/not/exist { include include } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/0000755000175000017500000000000013034613160024673 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/good-include0000644000175000017500000000013312550272167027176 0ustar jjjj#=DESCRIPTION Valid include # # if parsed stand-alone, #=EXRESULT PASS @{FOO} = /foo /bar apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include.dpkg-old0000644000175000017500000000002512547337055030500 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include.rpmnew0000644000175000017500000000002512547337055030307 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include.dpkg-bak0000644000175000017500000000002512547337055030457 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include~0000644000175000017500000000002512547337055027176 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include.rpmsave0000644000175000017500000000002512547337055030454 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include.dpkg-dist0000644000175000017500000000002512547337055030665 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ignored_suffix/bad-include.dpkg-new0000644000175000017500000000002512547337055030513 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/includes_okay_helper.include0000644000175000017500000000020312550272167027422 0ustar jjjj# #=DESCRIPTION A helper for includes_okay.sd # # if parsed standalone, #=EXRESULT FAIL # include /tmp/** r, apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/bad_2.sd0000644000175000017500000000022112547337055023170 0ustar jjjj# #=DESCRIPTION includes testing - mis-parsing include should fail #=EXRESULT FAIL # /does/not/exist { include does-not-exist/does-not-exist } apparmor-2.11.0/parser/tst/simple_tests/bare_include_tests/ok_1.sd0000644000175000017500000000034112547337055023055 0ustar jjjj# #=DESCRIPTION includes testing - basic include of global and local include #=EXRESULT PASS # /does/not/exist { #include #include #include } apparmor-2.11.0/parser/tst/simple_tests/dbus/0000755000175000017500000000000013034613166016765 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/dbus/bad_peer_1.sd0000644000175000017500000000015212326635231021274 0ustar jjjj# #=Description dbus rule with bad 'peer' #=EXRESULT FAIL # profile foo { dbus send peer(label=wat), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_regex_03.sd0000644000175000017500000000021212413103046021521 0ustar jjjj# #=DESCRIPTION dbus rule with a bad peer regex expansion #=EXRESULT FAIL # profile foo { dbus send bus=session peer=(label=spl{at), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_06.sd0000644000175000017500000000023312413103046021412 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\(), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_05.sd0000644000175000017500000000023312413103046021411 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\,), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_07.sd0000644000175000017500000000023312413103046021413 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\)), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_modifier_4.sd0000644000175000017500000000017612326635231022150 0ustar jjjj# #=DESCRIPTION dbus entry with a bad multivalue modifier #=EXRESULT FAIL profile foo { dbus send bus=(session, system), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_outside_1.sd0000644000175000017500000000013112611240354022005 0ustar jjjj# #=DESCRIPTION dbus rule outside of a profile #=EXRESULT FAIL dbus name=(SomeService), apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_modifier_3.sd0000644000175000017500000000017212326635231022143 0ustar jjjj# #=DESCRIPTION dbus entry with a bad 'in' keyword #=EXRESULT FAIL profile foo { dbus send bus in (session, system), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_bind_2.sd0000644000175000017500000000022312643564474021154 0ustar jjjj# #=DESCRIPTION simple dbus implicit bind acceptance test with deny keyword #=EXRESULT PASS profile a_profile { deny dbus name=(SomeService), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_regex_05.sd0000644000175000017500000000022112326635231021534 0ustar jjjj# #=DESCRIPTION dbus rule with a bad iface regex expansion #=EXRESULT FAIL # profile foo { dbus send interface=Get,Set} peer=(label=splat), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_bind_2.sd0000644000175000017500000000020712266425523021263 0ustar jjjj# #=DESCRIPTION dbus bind with non-bind interface modifier #=EXRESULT FAIL # profile foo { dbus bind bus=session interface=blort, } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_eavesdrop_1.sd0000644000175000017500000000020712266425523022336 0ustar jjjj# #=DESCRIPTION dbus eavesdrop cannot contain non bus modifiers #=EXRESULT FAIL profile dbus_fail { dbus eavesdrop interface=wat, } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_02.sd0000644000175000017500000000023312413103046021406 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\ ), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_08.sd0000644000175000017500000000022712413103046021417 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that are quoted #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label="splat"), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_09.sd0000644000175000017500000000025412413103046021420 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that are quoted with escaped quote #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label="splat\""), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_regex_02.sd0000644000175000017500000000015512326635231021537 0ustar jjjj# #=DESCRIPTION dbus rule with a bad expansion #=EXRESULT FAIL # profile foo { dbus bind name=abcd]efg, } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_eavesdrop_1.sd0000644000175000017500000000017312266425523022223 0ustar jjjj# #=DESCRIPTION simple dbus eavesdrop acceptance test #=EXRESULT PASS profile a_profile { dbus eavesdrop bus=session, } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_regex_06.sd0000644000175000017500000000022712326635231021543 0ustar jjjj# #=DESCRIPTION dbus rule with a bad member regex expansion #=EXRESULT FAIL # profile foo { dbus send member=s{{ession,ystem} peer=(label=splat), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_modifier_2.sd0000644000175000017500000000017112326635231022141 0ustar jjjj# #=DESCRIPTION dbus entry with a repeated modifier #=EXRESULT FAIL profile foo { dbus send bus=session bus=system, } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_regex_01.sd0000644000175000017500000000021712326635231021535 0ustar jjjj# #=DESCRIPTION dbus rule with a bad bus regex expansion #=EXRESULT FAIL # profile foo { dbus send bus=s{ession,ystem peer=(label=splat), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_bind_1.sd0000644000175000017500000000020112266425523021254 0ustar jjjj# #=DESCRIPTION dbus bind with non-bind member modifier #=EXRESULT FAIL # profile foo { dbus bind bus=session member=blort, } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_regex_04.sd0000644000175000017500000000022512326635231021537 0ustar jjjj# #=DESCRIPTION dbus rule with a bad path regex expansion #=EXRESULT FAIL # profile foo { dbus send path=/some/random/{path peer=(label=splat), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_bind_1.sd0000644000175000017500000000017412326635231021144 0ustar jjjj# #=DESCRIPTION simple dbus implicit bind acceptance test #=EXRESULT PASS profile a_profile { dbus name=(SomeService), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_03.sd0000644000175000017500000000023312413103046021407 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\"), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_01.sd0000644000175000017500000000023312413103046021405 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\ ), } apparmor-2.11.0/parser/tst/simple_tests/dbus/ok_regex_04.sd0000644000175000017500000000023312413103046021410 0ustar jjjj# #=DESCRIPTION dbus rule with a peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { dbus send bus=session peer=(label=splat\!), } apparmor-2.11.0/parser/tst/simple_tests/dbus/bad_modifier_1.sd0000644000175000017500000000016612266425523022150 0ustar jjjj# #=DESCRIPTION dbus entry with a bad modifier #=EXRESULT FAIL profile foo { dbus send bus=session modifier=foo, } apparmor-2.11.0/parser/tst/simple_tests/file/0000755000175000017500000000000013034613166016747 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/file/var2_ok_deny_link.sd0000644000175000017500000000020012534527434022674 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { deny link /foo@{var} -> /foo@{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_deny_3.sd0000644000175000017500000000021312226157421021144 0ustar jjjj# #=DESCRIPTION an overlapping deny rule #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { /usr/bin/** r, deny /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/0000755000175000017500000000000013034613166020101 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/file/owner/ok_alternations_2.sd0000644000175000017500000000027412247474211024052 0ustar jjjj# #=Description basic file rule w/nested alternations #=EXRESULT PASS # /usr/bin/foo { owner /a/b/c/**{cache,data,download,/ext,file{admin,s},images,joomla,moodledata/sessions}/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_7.sd0000644000175000017500000000016611232012201021365 0ustar jjjj# #=DESCRIPTION owner not allowed after pathname in forward rule #=EXRESULT FAIL # /usr/bin/foo { rw /foo owner, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_1.sd0000644000175000017500000000017311232012201021355 0ustar jjjj# #=DESCRIPTION owner is not allowed on capability rules #=EXRESULT FAIL # /usr/bin/foo { owner capability sys_admin, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_8.sd0000644000175000017500000000015211232012201021361 0ustar jjjj# #=DESCRIPTION owner block needs } termination #=EXRESULT FAIL # /usr/bin/foo { owner { rw foo, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_3.sd0000644000175000017500000000014411232012201021355 0ustar jjjj# #=DESCRIPTION owner can not follow path name #=EXRESULT FAIL # /usr/bin/foo { /foo owner rw, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_4.sd0000644000175000017500000000014411232012201021356 0ustar jjjj# #=DESCRIPTION owner cannot follow permission #=EXRESULT FAIL # /usr/bin/foo { /foo rw owner, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/ok_alternations_1.sd0000644000175000017500000000026712247474211024053 0ustar jjjj# #=Description basic file rule w/alternations #=EXRESULT PASS # /usr/bin/foo { owner /a/b/c/**{cache,data,download,/ext,fileadmin,files,images,joomla,moodledata/sessions}/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_5.sd0000644000175000017500000000016611232012201021363 0ustar jjjj# #=DESCRIPTION owner rules must have comma termination #=EXRESULT FAIL # /usr/bin/foo { owner /foo rw /bar rw, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_6.sd0000644000175000017500000000015211232012201021357 0ustar jjjj# #=DESCRIPTION owner not allowed after forward perm #=EXRESULT FAIL # /usr/bin/foo { rw owner /foo, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/bad_2.sd0000644000175000017500000000015311232012201021354 0ustar jjjj# #=DESCRIPTION owner is not allowed on network rules #=EXRESULT FAIL # /usr/bin/foo { owner network, } apparmor-2.11.0/parser/tst/simple_tests/file/owner/ok_1.sd0000644000175000017500000000037111232012201021240 0ustar jjjj# #=DESCRIPTION test owner flag for file rules #=EXRESULT PASS # /usr/bin/foo { owner /foo rw, owner /foo/** rw, owner rw /bar, owner rw /bar/**, owner { /one rw, /one/** rw, rw /two, rw /two/**, } owner { } } apparmor-2.11.0/parser/tst/simple_tests/file/ok_embedded_spaces_4.sd0000644000175000017500000000014012413103046023264 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS /bin/foo { /abc\ def r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_ok_link_2.sd0000644000175000017500000000021312534527434022102 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link /foo@{var} -> /foo@{var}, /foo@{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_audit_deny_link.sd0000644000175000017500000000016712504055254023135 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # profile test { audit deny link /alpha/beta -> /tmp/**, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_deny_2.sd0000644000175000017500000000016412226157421021150 0ustar jjjj# #=DESCRIPTION A simple deny rule #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { deny /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_target_ok_link_2.sd0000644000175000017500000000020412534527434023447 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link /alpha/beta -> @{var}, @{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_ok_link_1.sd0000644000175000017500000000016712534527434022110 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { @{var} rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_bare_1.sd0000644000175000017500000000017112657202251021117 0ustar jjjj# #=Description bare file rule #=EXRESULT PASS #=TODO https://launchpad.net/bugs/1215637 # /usr/bin/foo { deny file, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_src_ok_deny_link.sd0000644000175000017500000000017112534527434023551 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { deny link @{var} -> /tmp/**, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_octal_1.sd0000644000175000017500000000013412266425523021314 0ustar jjjj# #=DESCRIPTION simple octal test #=EXRESULT PASS # profile ascii { /bin/\141bcde rix, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_carat_2.sd0000644000175000017500000000013611232012201021260 0ustar jjjj# #=DESCRIPTION trailing carat in pathname #=EXRESULT PASS # /usr/bin/foo { /foo/bar^ r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_2.sd0000644000175000017500000000020212266425523020127 0ustar jjjj# #=Description basic uppercase permission file rule (should emit warning) #=EXRESULT PASS # /usr/bin/foo { /usr/bin/foo RWM, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_alternations_2.sd0000644000175000017500000000026612247474211022721 0ustar jjjj# #=Description basic file rule w/nested alternations #=EXRESULT PASS # /usr/bin/foo { /a/b/c/**{cache,data,download,/ext,file{admin,s},images,joomla,moodledata/sessions}/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_deny_1.sd0000644000175000017500000000016412226157421021147 0ustar jjjj# #=DESCRIPTION A simple deny rule #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { deny /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_target_ok_link_2.sd0000644000175000017500000000021412534527434023451 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link /alpha/beta -> /foo@{var}, /foo@{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_other_2.sd0000644000175000017500000000014712270536103021330 0ustar jjjj# #=DESCRIPTION simple deny other flag test #=EXRESULT PASS profile test { deny other /tmp/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_append_2.sd0000644000175000017500000000016312266425523021601 0ustar jjjj# #=DESCRIPTION a and w conflict (reverse order from bad_append_1.sd) #=EXRESULT FAIL # /usr/bin/foo { /a aw, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_other_1.sd0000644000175000017500000000013512266425523021334 0ustar jjjj# #=DESCRIPTION simple other flag test #=EXRESULT PASS profile test { other /tmp/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_3.sd0000644000175000017500000000016711232012201020113 0ustar jjjj# #=DESCRIPTION A simple successful profile #=EXRESULT PASS # /usr/bin/foo { /usr/bin/foo r, /usr/bin/blah rix, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_target_ok_deny_link.sd0000644000175000017500000000017512534527434024254 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { deny link /alpha/beta -> @{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_other_3.sd0000644000175000017500000000014312270536103021325 0ustar jjjj# #=DESCRIPTION simple other flag test #=EXRESULT PASS profile test { audit other /tmp/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_ok_link_2.sd0000644000175000017500000000017712534527434022112 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link @{var} -> @{var}, @{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_embedded_0_2.sd0000644000175000017500000000023612467167244022311 0ustar jjjj# #=DESCRIPTION embedded \x00 in file path #=EXRESULT PASS # currently do NOT have semantic checks for \000 in file path # /usr/bin/foo { /foo\x00bar w, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_src_ok_link_3.sd0000644000175000017500000000021012534527434022746 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link subset @{var} -> /tmp/**, /tmp/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_target_ok_link_3.sd0000644000175000017500000000022312534527434023452 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link subset /alpha/beta -> /foo@{var}, /foo@{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/0000755000175000017500000000000013034613166020065 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_carat_2.sd0000644000175000017500000000017112217051110022403 0ustar jjjj# #=DESCRIPTION trailing carat in pathname #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /foo/bar^ r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_other_2.sd0000644000175000017500000000016512270536103022446 0ustar jjjj# #=DESCRIPTION simple audit allow other flag test #=EXRESULT PASS profile test { audit allow other /tmp/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_other_1.sd0000644000175000017500000000015112270536103022440 0ustar jjjj# #=DESCRIPTION simple allow other flag test #=EXRESULT PASS profile test { allow other /tmp/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_3.sd0000644000175000017500000000023112217051110021227 0ustar jjjj# #=DESCRIPTION A simple successful profile #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /usr/bin/foo r, allow /usr/bin/blah rix, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_embedded_spaces_1.sd0000644000175000017500000000017612217051110024404 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS # vim:syntax=apparmor /bin/foo { allow "/abc\ def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_append_1.sd0000644000175000017500000000035512217051110022563 0ustar jjjj# #=DESCRIPTION test append #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /bin/cat a, allow /bin/true ra, allow /bin/false ma, allow /lib/libc.so la, allow /bin/less ixa, allow /bin/more pxa, allow /a uxa, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_inv_char_class.sd0000644000175000017500000000016412217051110024050 0ustar jjjj# #=DESCRIPTION carat in pathname #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /foo[^me]bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_embedded_spaces_3.sd0000644000175000017500000000020012217051110024372 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS # vim:syntax=apparmor "/bin/fo o" { allow "/abc def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_lock_1.sd0000644000175000017500000000050012217051110022234 0ustar jjjj# #=DESCRIPTION k and other perms do not conflict #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /bin/a k, allow /bin/b rk, allow /bin/c wk, allow /bin/d ak, allow /bin/e lk, allow /bin/e mk, allow /bin/f pxk, allow /bin/g Pxk, allow /bin/h ixk, allow /bin/i uxk, allow /bin/j Uxk, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_comma_1.sd0000644000175000017500000000016012217051110022402 0ustar jjjj# #=DESCRIPTION comma in pathname #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /foo,bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_mmap_1.sd0000644000175000017500000000036612217051110022250 0ustar jjjj# #=DESCRIPTION m and [uUpPi]x do not conflict #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /bin/cat mix, allow /bin/true mpx, allow /bin/false mux, allow /lib/libc.so rwlm, allow /bin/less mUx, allow /bin/more mPx, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_comma_2.sd0000644000175000017500000000017012217051110022404 0ustar jjjj# #=DESCRIPTION comma at end of pathname #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow "/foobar," r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_carat_1.sd0000644000175000017500000000015712217051110022406 0ustar jjjj# #=DESCRIPTION carat in pathname #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /foo^bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_1.sd0000644000175000017500000000016112217051110021227 0ustar jjjj# #=Description basic file rule #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_mmap_2.sd0000644000175000017500000000045212217051110022245 0ustar jjjj# #=DESCRIPTION m and [upi]x do not conflict, seperate rules #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { allow /bin/cat rm, allow /bin/cat ix, allow /bin/true px, allow /bin/true m, allow /bin/false m, allow /bin/false ux, allow /lib/libc.so rwl, allow /lib/libc.so m, } apparmor-2.11.0/parser/tst/simple_tests/file/allow/ok_embedded_spaces_2.sd0000644000175000017500000000017512217051110024404 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS # vim:syntax=apparmor /bin/foo { allow "/abc def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_embedded_spaces_1.sd0000644000175000017500000000014211232012201023251 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS /bin/foo { "/abc\ def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_link_2.sd0000644000175000017500000000017112266425523021151 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # profile test { link /alpha/beta -> /tmp/**, /tmp/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_quoted_1.sd0000644000175000017500000000015312266425523021514 0ustar jjjj# #=DESCRIPTION simple quoted tab expansion #=EXRESULT PASS # profile test { "/bin/alpha\tbeta" rix, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_append_1.sd0000644000175000017500000000011611232012201021547 0ustar jjjj# #=DESCRIPTION w and a conflict #=EXRESULT FAIL # /usr/bin/foo { /a wa, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_append_1.sd0000644000175000017500000000025511232012201021436 0ustar jjjj# #=DESCRIPTION test append #=EXRESULT PASS # /usr/bin/foo { /bin/cat a, /bin/true ra, /bin/false ma, /lib/libc.so la, /bin/less ixa, /bin/more pxa, /a uxa, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_deny_link.sd0000644000175000017500000000016112504055254021741 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # profile test { deny link /alpha/beta -> /tmp/**, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_5.sd0000644000175000017500000000020712266425523020137 0ustar jjjj# #=Description basic unconfined uppercase exec permission (should emit warning) #=EXRESULT PASS # /usr/bin/foo { /usr/bin/foo UX, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_target_ok_audit_deny_link.sd0000644000175000017500000000020312534527434025432 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { audit deny link /alpha/beta -> @{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_bare_file_outside.sd0000644000175000017500000000011612611240354023542 0ustar jjjj# #=DESCRIPTION bare file rule outside of a profile #=EXRESULT FAIL # file, apparmor-2.11.0/parser/tst/simple_tests/file/front_perms_ok_1.sd0000644000175000017500000000047011232012201022524 0ustar jjjj# #=DESCRIPTION perms before pathname #=EXRESULT PASS # /usr/bin/foo { r /foo1, w /foo1, a /foo1, k /foo1, m /foo1, l /foo1, px /foo1, Px /foo2, ux /foo3, Ux /foo4, ix /foo5, unsafe px /foo6, unsafe Px /foo7, unsafe ux /foo8, unsafe Ux /foo9, unsafe ix /foo10, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_inv_char_class.sd0000644000175000017500000000013011232012201022715 0ustar jjjj# #=DESCRIPTION carat in pathname #=EXRESULT PASS # /usr/bin/foo { /foo[^me]bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_src_ok_audit_deny_link.sd0000644000175000017500000000020312534527434024734 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { audit deny link /foo@{var} -> /tmp/**, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_ok_link_3.sd0000644000175000017500000000022212534527434022103 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link subset /foo@{var} -> /foo@{var}, /foo@{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_ok_link_3.sd0000644000175000017500000000020612534527434022104 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link subset @{var} -> @{var}, @{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_quoted_5.sd0000644000175000017500000000016112266425523021517 0ustar jjjj# #=DESCRIPTION simple quoted backslash expansion #=EXRESULT PASS # profile test { "/bin/alpha\\beta" rix, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_target_ok_link_3.sd0000644000175000017500000000021312534527434023450 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link subset /alpha/beta -> @{var}, @{var} r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_ok_link_1.sd0000644000175000017500000000017312534527434022106 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { /foo@{var} rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_quoted_3.sd0000644000175000017500000000016712266425523021523 0ustar jjjj# #=DESCRIPTION simple quoted carriage return expansion #=EXRESULT PASS # profile test { "/bin/alpha\rbeta" rix, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_src_ok_link_3.sd0000644000175000017500000000021412534527434022753 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link subset /foo@{var} -> /tmp/**, /tmp/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_link_3.sd0000644000175000017500000000020012266425523021143 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # profile test { link subset /alpha/beta -> /tmp/**, /tmp/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_re_brace_1.sd0000644000175000017500000000016112247467612022075 0ustar jjjj# #=DESCRIPTION regex with empty character class (brace) #=EXRESULT FAIL # /usr/bin/foo { /alpha/[]beta rw, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_link_outside.sd0000644000175000017500000000014512611240354022571 0ustar jjjj# #=DESCRIPTION link rule outside of a profile #=EXRESULT FAIL # deny link /alpha/beta -> /tmp/**, apparmor-2.11.0/parser/tst/simple_tests/file/var1_target_ok_link_1.sd0000644000175000017500000000017412534527434023454 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { /alpha/beta rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_quoted_4.sd0000644000175000017500000000015512266425523021521 0ustar jjjj# #=DESCRIPTION simple quoted quote expansion #=EXRESULT PASS # profile test { "/bin/alpha\"beta" rix, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_src_ok_link_2.sd0000644000175000017500000000020512534527434022752 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link /foo@{var} -> /tmp/**, /tmp/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_src_ok_link_2.sd0000644000175000017500000000020112534527434022745 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { link @{var} -> /tmp/**, /tmp/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_re_brace_3.sd0000644000175000017500000000022012266425523022067 0ustar jjjj# #=DESCRIPTION alternation braces '{}' with only one entry should be an error #=EXRESULT FAIL # profile failure { /usr/bin/one{en}try rw, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_src_ok_audit_deny_link.sd0000644000175000017500000000017712534527434024745 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { audit deny link @{var} -> /tmp/**, } apparmor-2.11.0/parser/tst/simple_tests/file/file/0000755000175000017500000000000013034613166017666 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/file/file/owner/0000755000175000017500000000000013034613166021020 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/file/file/owner/bad_7.sd0000644000175000017500000000017311717224554022332 0ustar jjjj# #=DESCRIPTION owner not allowed after pathname in forward rule #=EXRESULT FAIL # /usr/bin/foo { file rw /foo owner, } apparmor-2.11.0/parser/tst/simple_tests/file/file/owner/bad_8.sd0000644000175000017500000000015711717224554022335 0ustar jjjj# #=DESCRIPTION owner block needs } termination #=EXRESULT FAIL # /usr/bin/foo { owner { file rw foo, } apparmor-2.11.0/parser/tst/simple_tests/file/file/owner/bad_3.sd0000644000175000017500000000015111717224554022322 0ustar jjjj# #=DESCRIPTION owner can not follow path name #=EXRESULT FAIL # /usr/bin/foo { file /foo owner rw, } apparmor-2.11.0/parser/tst/simple_tests/file/file/owner/bad_4.sd0000644000175000017500000000015111717224554022323 0ustar jjjj# #=DESCRIPTION owner cannot follow permission #=EXRESULT FAIL # /usr/bin/foo { file /foo rw owner, } apparmor-2.11.0/parser/tst/simple_tests/file/file/owner/bad_5.sd0000644000175000017500000000020011717224554022317 0ustar jjjj# #=DESCRIPTION owner rules must have comma termination #=EXRESULT FAIL # /usr/bin/foo { owner file /foo rw file /bar rw, } apparmor-2.11.0/parser/tst/simple_tests/file/file/owner/bad_6.sd0000644000175000017500000000015711717224554022333 0ustar jjjj# #=DESCRIPTION owner not allowed after forward perm #=EXRESULT FAIL # /usr/bin/foo { file rw owner /foo, } apparmor-2.11.0/parser/tst/simple_tests/file/file/owner/ok_1.sd0000644000175000017500000000044111717224554022205 0ustar jjjj# #=DESCRIPTION test owner flag for file rules #=EXRESULT PASS # /usr/bin/foo { owner file /foo rw, owner file /foo/** rw, owner file rw /bar, owner file rw /bar/**, owner { file /one rw, file /one/** rw, file rw /two, file rw /two/**, } owner { } } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_embedded_spaces_4.sd0000644000175000017500000000014512413103046024210 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS /bin/foo { file /abc\ def r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_carat_2.sd0000644000175000017500000000014311717224554022225 0ustar jjjj# #=DESCRIPTION trailing carat in pathname #=EXRESULT PASS # /usr/bin/foo { file /foo/bar^ r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_2.sd0000644000175000017500000000011311717224554021050 0ustar jjjj# #=Description basic file rule #=EXRESULT PASS # /usr/bin/foo { file, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_alternations_2.sd0000644000175000017500000000027312247474211023636 0ustar jjjj# #=Description basic file rule w/nested alternations #=EXRESULT PASS # /usr/bin/foo { file /a/b/c/**{cache,data,download,/ext,file{admin,s},images,joomla,moodledata/sessions}/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_3.sd0000644000175000017500000000020111717224554021047 0ustar jjjj# #=DESCRIPTION A simple successful profile #=EXRESULT PASS # /usr/bin/foo { file /usr/bin/foo r, file /usr/bin/blah rix, } apparmor-2.11.0/parser/tst/simple_tests/file/file/bad_1.sd0000644000175000017500000000011611717224554021167 0ustar jjjj# #=Description basic file rule #=EXRESULT FAIL # /usr/bin/foo { file rw, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_embedded_spaces_1.sd0000644000175000017500000000014711717224554024225 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS /bin/foo { file "/abc\ def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/bad_append_1.sd0000644000175000017500000000012311717224554022514 0ustar jjjj# #=DESCRIPTION w and a conflict #=EXRESULT FAIL # /usr/bin/foo { file /a wa, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_append_1.sd0000644000175000017500000000032011717224554022376 0ustar jjjj# #=DESCRIPTION test append #=EXRESULT PASS # /usr/bin/foo { file /bin/cat a, file /bin/true ra, file /bin/false ma, file /lib/libc.so la, file /bin/less ixa, file /bin/more pxa, file /a uxa, } apparmor-2.11.0/parser/tst/simple_tests/file/file/front_perms_ok_1.sd0000644000175000017500000000061111717224554023470 0ustar jjjj# #=DESCRIPTION perms before pathname #=EXRESULT PASS # /usr/bin/foo { file r /foo1, file w /foo1, file a /foo1, file k /foo1, file m /foo1, file l /foo1, file px /foo1, file Px /foo2, file ux /foo3, file Ux /foo4, file ix /foo5, file unsafe px /foo6, file unsafe Px /foo7, file unsafe ux /foo8, file unsafe Ux /foo9, file unsafe ix /foo10, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_inv_char_class.sd0000644000175000017500000000013511717224554023671 0ustar jjjj# #=DESCRIPTION carat in pathname #=EXRESULT PASS # /usr/bin/foo { file /foo[^me]bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/bad_comma_1.sd0000644000175000017500000000013211717224554022341 0ustar jjjjk# #=DESCRIPTION comma in pathname #=EXRESULT FAIL # /usr/bin/foo { file /foobar, r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_embedded_spaces_3.sd0000644000175000017500000000015111717224554024222 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS "/bin/fo o" { file "/abc def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_lock_1.sd0000644000175000017500000000043711717224554022070 0ustar jjjj# #=DESCRIPTION k and other perms do not conflict #=EXRESULT PASS # /usr/bin/foo { file /bin/a k, file /bin/b rk, file /bin/c wk, file /bin/d ak, file /bin/e lk, file /bin/e mk, file /bin/f pxk, file /bin/g Pxk, file /bin/h ixk, file /bin/i uxk, file /bin/j Uxk, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_comma_1.sd0000644000175000017500000000013111717224554022223 0ustar jjjj# #=DESCRIPTION comma in pathname #=EXRESULT PASS # /usr/bin/foo { file /foo,bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_mmap_1.sd0000644000175000017500000000033211717224554022064 0ustar jjjj# #=DESCRIPTION m and [uUpPi]x do not conflict #=EXRESULT PASS # /usr/bin/foo { file /bin/cat mix, file /bin/true mpx, file /bin/false mux, file /lib/libc.so rwlm, file /bin/less mUx, file /bin/more mPx, } apparmor-2.11.0/parser/tst/simple_tests/file/file/bad_embedded_spaces_1.sd0000644000175000017500000000014412413103046024321 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT FAIL /bin/foo { file /abc def r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_comma_2.sd0000644000175000017500000000014211717224554022226 0ustar jjjj# #=DESCRIPTION comma at end of pathname #=EXRESULT PASS # /usr/bin/foo { file "/foobar," r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/bad_lock_1.sd0000644000175000017500000000013111717224554022174 0ustar jjjj# #=DESCRIPTION k to be lower case #=EXRESULT FAIL # /usr/bin/foo { file /bin/ls K, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_alternations_1.sd0000644000175000017500000000026612247474211023637 0ustar jjjj# #=Description basic file rule w/alternations #=EXRESULT PASS # /usr/bin/foo { file /a/b/c/**{cache,data,download,/ext,fileadmin,files,images,joomla,moodledata/sessions}/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_carat_1.sd0000644000175000017500000000013111717224554022221 0ustar jjjj# #=DESCRIPTION carat in pathname #=EXRESULT PASS # /usr/bin/foo { file /foo^bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/dos_line_endings.sd0000644000175000017500000000256111717224554023532 0ustar jjjj# vim:syntax=subdomain # Last Modified: Wed Aug 31 11:14:09 2005 #=DESCRIPTION dos line endings #=EXRESULT PASS /usr/lib/RealPlayer10/realplay { #include #include file /bin/bash ix, file /bin/sed ixr, file /bin/true ixr, file /etc/opt/gnome/pango/pango.modules r, file /opt/gnome/lib/gtk-2.0/2.4.0/loaders/* r, file /opt/gnome/lib/lib*so* r, file /opt/gnome/lib/pango/1.4.0/modules/* r, file /opt/gnome/share/icons r, file /opt/gnome/share/icons/** r, file /opt/gnome/bin/nautilus rux, file /root r, file /root/.Xauthority r, file /root/.fonts.cache-1 r, file /root/.realplayerrc rw, file /home/*/ r, file /home/*/.Xauthority r, file /home/*/.fonts.cache-1 r, file /home/*/.realplayerrc rw, file /usr/X11R6/lib/Acrobat7/Resource/Font/* r, file /usr/X11R6/lib/Acrobat7/Resource/Font/PFM/* r, file /usr/lib/RealPlayer10/** r, file /usr/lib/RealPlayer10/realplay.bin ixr, file /usr/lib/jvm/java-1.4.2-sun-1.4.2.06/jre/lib/fonts/** r, file /usr/lib/ooo-2.0/share/fonts/** r, file /opt/MozillaFirefox/bin/firefox.sh pxr, file /opt/MozillaFirefox/lib/firefox-bin pxr, file /opt/MozillaFirefox/lib/init.d r, file /usr/bin/opera pxr, file /usr/share/icons r, file /usr/share/icons/** r, file /opt/gnome/share/pixmaps r, file /opt/gnome/share/pixmaps/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_1.sd0000644000175000017500000000013211717224554021050 0ustar jjjj# #=Description basic file rule #=EXRESULT PASS # /usr/bin/foo { file /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_mmap_2.sd0000644000175000017500000000041411717224554022066 0ustar jjjj# #=DESCRIPTION m and [upi]x do not conflict, seperate rules #=EXRESULT PASS # /usr/bin/foo { file /bin/cat rm, file /bin/cat ix, file /bin/true px, file /bin/true m, file /bin/false m, file /bin/false ux, file /lib/libc.so rwl, file /lib/libc.so m, } apparmor-2.11.0/parser/tst/simple_tests/file/file/ok_embedded_spaces_2.sd0000644000175000017500000000014611717224554024225 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS /bin/foo { file "/abc def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_link_1.sd0000644000175000017500000000015712266425523021154 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # profile test { /alpha/beta rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_comma_1.sd0000644000175000017500000000012511232012201021374 0ustar jjjjk# #=DESCRIPTION comma in pathname #=EXRESULT FAIL # /usr/bin/foo { /foobar, r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_4.sd0000644000175000017500000000020412266425523020133 0ustar jjjj# #=Description basic inherit uppercase exec permission (should emit warning) #=EXRESULT PASS # /usr/bin/foo { /usr/bin/foo iX, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_target_ok_deny_link.sd0000644000175000017500000000020112534527434024243 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { deny link /alpha/beta -> /foo@{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_embedded_spaces_3.sd0000644000175000017500000000014411232012201023255 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS "/bin/fo o" { "/abc def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_src_ok_link_1.sd0000644000175000017500000000016712534527434022757 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { @{var} rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_embedded_0_3.sd0000644000175000017500000000023612467167244022312 0ustar jjjj# #=DESCRIPTION embedded \d00 in file path #=EXRESULT PASS # currently do NOT have semantic checks for \000 in file path # /usr/bin/foo { /foo\d00bar w, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_ok_audit_deny_link.sd0000644000175000017500000000020612534527434024070 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { audit deny link /foo@{var} -> /foo@{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_src_ok_deny_link.sd0000644000175000017500000000017512534527434023556 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { deny link /foo@{var} -> /tmp/**, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_ok_deny_link.sd0000644000175000017500000000017012534527434022701 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { deny link @{var} -> @{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_target_ok_audit_deny_link.sd0000644000175000017500000000020712534527434025437 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { audit deny link /alpha/beta -> /foo@{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_re_brace_2.sd0000644000175000017500000000017712266425523022101 0ustar jjjj# #=DESCRIPTION empty alternation braces '{}' should be an error #=EXRESULT FAIL # profile failure { /usr/bin/{}snort rw, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_lock_1.sd0000644000175000017500000000035011232012201021113 0ustar jjjj# #=DESCRIPTION k and other perms do not conflict #=EXRESULT PASS # /usr/bin/foo { /bin/a k, /bin/b rk, /bin/c wk, /bin/d ak, /bin/e lk, /bin/e mk, /bin/f pxk, /bin/g Pxk, /bin/h ixk, /bin/i uxk, /bin/j Uxk, } apparmor-2.11.0/parser/tst/simple_tests/file/stacking_ok_1.sd0000644000175000017500000000016412673100443022011 0ustar jjjj# #=Description basic file exec rule with stacking target #=EXRESULT PASS # /usr/bin/foo { /bin/bar px -> &baz, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_comma_1.sd0000644000175000017500000000012411232012201021256 0ustar jjjj# #=DESCRIPTION comma in pathname #=EXRESULT PASS # /usr/bin/foo { /foo,bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/var1_ok_audit_deny_link.sd0000644000175000017500000000017612534527434024075 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { audit deny link @{var} -> @{var}, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_mmap_1.sd0000644000175000017500000000027411232012201021122 0ustar jjjj# #=DESCRIPTION m and [uUpPi]x do not conflict #=EXRESULT PASS # /usr/bin/foo { /bin/cat mix, /bin/true mpx, /bin/false mux, /lib/libc.so rwlm, /bin/less mUx, /bin/more mPx, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_embedded_spaces_1.sd0000644000175000017500000000013712413103046023404 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT FAIL /bin/foo { /abc def r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_comma_2.sd0000644000175000017500000000013511232012201021261 0ustar jjjj# #=DESCRIPTION comma at end of pathname #=EXRESULT PASS # /usr/bin/foo { "/foobar," r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_alternations_3.sd0000644000175000017500000001244412253542245022723 0ustar jjjj# #=Description basic file rule w/large number of alternations #=EXRESULT PASS # /usr/bin/foo { /{a/a,a/b,a/c,a/d,a/e,a/f,a/g,a/h,a/i,a/j,a/k,a/l,a/m,a/n,a/o,a/p,a/q,a/r,a/s,a/t,a/u,a/v,a/w,a/x,a/y,a/z,a/A,a/B,a/C,a/D,a/E,a/F,a/G,a/H,a/I,a/J,a/K,a/L,a/M,a/N,a/O,a/P,a/Q,a/R,a/S,a/T,a/U,a/V,a/W,a/X,a/Y,a/Z,b/a,b/b,b/c,b/d,b/e,b/f,b/g,b/h,b/i,b/j,b/k,b/l,b/m,b/n,b/o,b/p,b/q,b/r,b/s,b/t,b/u,b/v,b/w,b/x,b/y,b/z,b/A,b/B,b/C,b/D,b/E,b/F,b/G,b/H,b/I,b/J,b/K,b/L,b/M,b/N,b/O,b/P,b/Q,b/R,b/S,b/T,b/U,b/V,b/W,b/X,b/Y,b/Z,c/a,c/b,c/c,c/d,c/e,c/f,c/g,c/h,c/i,c/j,c/k,c/l,c/m,c/n,c/o,c/p,c/q,c/r,c/s,c/t,c/u,c/v,c/w,c/x,c/y,c/z,c/A,c/B,c/C,c/D,c/E,c/F,c/G,c/H,c/I,c/J,c/K,c/L,c/M,c/N,c/O,c/P,c/Q,c/R,c/S,c/T,c/U,c/V,c/W,c/X,c/Y,c/Z,d/a,d/b,d/c,d/d,d/e,d/f,d/g,d/h,d/i,d/j,d/k,d/l,d/m,d/n,d/o,d/p,d/q,d/r,d/s,d/t,d/u,d/v,d/w,d/x,d/y,d/z,d/A,d/B,d/C,d/D,d/E,d/F,d/G,d/H,d/I,d/J,d/K,d/L,d/M,d/N,d/O,d/P,d/Q,d/R,d/S,d/T,d/U,d/V,d/W,d/X,d/Y,d/Z,e/a,e/b,e/c,e/d,e/e,e/f,e/g,e/h,e/i,e/j,e/k,e/l,e/m,e/n,e/o,e/p,e/q,e/r,e/s,e/t,e/u,e/v,e/w,e/x,e/y,e/z,e/A,e/B,e/C,e/D,e/E,e/F,e/G,e/H,e/I,e/J,e/K,e/L,e/M,e/N,e/O,e/P,e/Q,e/R,e/S,e/T,e/U,e/V,e/W,e/X,e/Y,e/Z,f/a,f/b,f/c,f/d,f/e,f/f,f/g,f/h,f/i,f/j,f/k,f/l,f/m,f/n,f/o,f/p,f/q,f/r,f/s,f/t,f/u,f/v,f/w,f/x,f/y,f/z,f/A,f/B,f/C,f/D,f/E,f/F,f/G,f/H,f/I,f/J,f/K,f/L,f/M,f/N,f/O,f/P,f/Q,f/R,f/S,f/T,f/U,f/V,f/W,f/X,f/Y,f/Z,g/a,g/b,g/c,g/d,g/e,g/f,g/g,g/h,g/i,g/j,g/k,g/l,g/m,g/n,g/o,g/p,g/q,g/r,g/s,g/t,g/u,g/v,g/w,g/x,g/y,g/z,g/A,g/B,g/C,g/D,g/E,g/F,g/G,g/H,g/I,g/J,g/K,g/L,g/M,g/N,g/O,g/P,g/Q,g/R,g/S,g/T,g/U,g/V,g/W,g/X,g/Y,g/Z,h/a,h/b,h/c,h/d,h/e,h/f,h/g,h/h,h/i,h/j,h/k,h/l,h/m,h/n,h/o,h/p,h/q,h/r,h/s,h/t,h/u,h/v,h/w,h/x,h/y,h/z,h/A,h/B,h/C,h/D,h/E,h/F,h/G,h/H,h/I,h/J,h/K,h/L,h/M,h/N,h/O,h/P,h/Q,h/R,h/S,h/T,h/U,h/V,h/W,h/X,h/Y,h/Z,i/a,i/b,i/c,i/d,i/e,i/f,i/g,i/h,i/i,i/j,i/k,i/l,i/m,i/n,i/o,i/p,i/q,i/r,i/s,i/t,i/u,i/v,i/w,i/x,i/y,i/z,i/A,i/B,i/C,i/D,i/E,i/F,i/G,i/H,i/I,i/J,i/K,i/L,i/M,i/N,i/O,i/P,i/Q,i/R,i/S,i/T,i/U,i/V,i/W,i/X,i/Y,i/Z,j/a,j/b,j/c,j/d,j/e,j/f,j/g,j/h,j/i,j/j,j/k,j/l,j/m,j/n,j/o,j/p,j/q,j/r,j/s,j/t,j/u,j/v,j/w,j/x,j/y,j/z,j/A,j/B,j/C,j/D,j/E,j/F,j/G,j/H,j/I,j/J,j/K,j/L,j/M,j/N,j/O,j/P,j/Q,j/R,j/S,j/T,j/U,j/V,j/W,j/X,j/Y,j/Z,k/a,k/b,k/c,k/d,k/e,k/f,k/g,k/h,k/i,k/j,k/k,k/l,k/m,k/n,k/o,k/p,k/q,k/r,k/s,k/t,k/u,k/v,k/w,k/x,k/y,k/z,k/A,k/B,k/C,k/D,k/E,k/F,k/G,k/H,k/I,k/J,k/K,k/L,k/M,k/N,k/O,k/P,k/Q,k/R,k/S,k/T,k/U,k/V,k/W,k/X,k/Y,k/Z,l/a,l/b,l/c,l/d,l/e,l/f,l/g,l/h,l/i,l/j,l/k,l/l,l/m,l/n,l/o,l/p,l/q,l/r,l/s,l/t,l/u,l/v,l/w,l/x,l/y,l/z,l/A,l/B,l/C,l/D,l/E,l/F,l/G,l/H,l/I,l/J,l/K,l/L,l/M,l/N,l/O,l/P,l/Q,l/R,l/S,l/T,l/U,l/V,l/W,l/X,l/Y,l/Z,m/a,m/b,m/c,m/d,m/e,m/f,m/g,m/h,m/i,m/j,m/k,m/l,m/m,m/n,m/o,m/p,m/q,m/r,m/s,m/t,m/u,m/v,m/w,m/x,m/y,m/z,m/A,m/B,m/C,m/D,m/E,m/F,m/G,m/H,m/I,m/J,m/K,m/L,m/M,m/N,m/O,m/P,m/Q,m/R,m/S,m/T,m/U,m/V,m/W,m/X,m/Y,m/Z,n/a,n/b,n/c,n/d,n/e,n/f,n/g,n/h,n/i,n/j,n/k,n/l,n/m,n/n,n/o,n/p,n/q,n/r,n/s,n/t,n/u,n/v,n/w,n/x,n/y,n/z,n/A,n/B,n/C,n/D,n/E,n/F,n/G,n/H,n/I,n/J,n/K,n/L,n/M,n/N,n/O,n/P,n/Q,n/R,n/S,n/T,n/U,n/V,n/W,n/X,n/Y,n/Z,o/a,o/b,o/c,o/d,o/e,o/f,o/g,o/h,o/i,o/j,o/k,o/l,o/m,o/n,o/o,o/p,o/q,o/r,o/s,o/t,o/u,o/v,o/w,o/x,o/y,o/z,o/A,o/B,o/C,o/D,o/E,o/F,o/G,o/H,o/I,o/J,o/K,o/L,o/M,o/N,o/O,o/P,o/Q,o/R,o/S,o/T,o/U,o/V,o/W,o/X,o/Y,o/Z,p/a,p/b,p/c,p/d,p/e,p/f,p/g,p/h,p/i,p/j,p/k,p/l,p/m,p/n,p/o,p/p,p/q,p/r,p/s,p/t,p/u,p/v,p/w,p/x,p/y,p/z,p/A,p/B,p/C,p/D,p/E,p/F,p/G,p/H,p/I,p/J,p/K,p/L,p/M,p/N,p/O,p/P,p/Q,p/R,p/S,p/T,p/U,p/V,p/W,p/X,p/Y,p/Z,q/a,q/b,q/c,q/d,q/e,q/f,q/g,q/h,q/i,q/j,q/k,q/l,q/m,q/n,q/o,q/p,q/q,q/r,q/s,q/t,q/u,q/v,q/w,q/x,q/y,q/z,q/A,q/B,q/C,q/D,q/E,q/F,q/G,q/H,q/I,q/J,q/K,q/L,q/M,q/N,q/O,q/P,q/Q,q/R,q/S,q/T,q/U,q/V,q/W,q/X,q/Y,q/Z,r/a,r/b,r/c,r/d,r/e,r/f,r/g,r/h,r/i,r/j,r/k,r/l,r/m,r/n,r/o,r/p,r/q,r/r,r/s,r/t,r/u,r/v,r/w,r/x,r/y,r/z,r/A,r/B,r/C,r/D,r/E,r/F,r/G,r/H,r/I,r/J,r/K,r/L,r/M,r/N,r/O,r/P,r/Q,r/R,r/S,r/T,r/U,r/V,r/W,r/X,r/Y,r/Z,s/a,s/b,s/c,s/d,s/e,s/f,s/g,s/h,s/i,s/j,s/k,s/l,s/m,s/n,s/o,s/p,s/q,s/r,s/s,s/t,s/u,s/v,s/w,s/x,s/y,s/z,s/A,s/B,s/C,s/D,s/E,s/F,s/G,s/H,s/I,s/J,s/K,s/L,s/M,s/N,s/O,s/P,s/Q,s/R,s/S,s/T,s/U,s/V,s/W,s/X,s/Y,s/Z,t/a,t/b,t/c,t/d,t/e,t/f,t/g,t/h,t/i,t/j,t/k,t/l,t/m,t/n,t/o,t/p,t/q,t/r,t/s,t/t,t/u,t/v,t/w,t/x,t/y,t/z,t/A,t/B,t/C,t/D,t/E,t/F,t/G,t/H,t/I,t/J,t/K,t/L,t/M,t/N,t/O,t/P,t/Q,t/R,t/S,t/T,t/U,t/V,t/W,t/X,t/Y,t/Z,u/a,u/b,u/c,u/d,u/e,u/f,u/g,u/h,u/i,u/j,u/k,u/l,u/m,u/n,u/o,u/p,u/q,u/r,u/s,u/t,u/u,u/v,u/w,u/x,u/y,u/z,u/A,u/B,u/C,u/D,u/E,u/F,u/G,u/H,u/I,u/J,u/K,u/L,u/M,u/N,u/O,u/P,u/Q,u/R,u/S,u/T,u/U,u/V,u/W,u/X,u/Y,u/Z,v/a,v/b,v/c,v/d,v/e,v/f,v/g,v/h,v/i,v/j,v/k,v/l,v/m,v/n,v/o,v/p,v/q,v/r,v/s,v/t,v/u,v/v,v/w,v/x,v/y,v/z,v/A,v/B,v/C,v/D,v/E,v/F,v/G,v/H,v/I,v/J,v/K,v/L,v/M,v/N,v/O,v/P,v/Q,v/R,v/S,v/T,v/U,v/V,v/W,v/X,v/Y,v/Z,w/a,w/b,w/c,w/d,w/e,w/f,w/g,w/h,w/i,w/j,w/k,w/l,w/m,w/n,w/o,w/p,w/q,w/r,w/s,w/t,w/u,w/v,w/w,w/x,w/y,w/z,w/A,w/B,w/C,w/D,w/E,w/F,w/G,w/H,w/I,w/J,w/K,w/L,w/M,w/N,w/O,w/P,w/Q,w/R,w/S,w/T,w/U,w/V,w/W,w/X,w/Y,w/Z,x/a,x/b,x/c,x/d,x/e,x/f,x/g,x/h,x/i,x/j,x/k,x/l,x/m,x/n,x/o,x/p,x/q,x/r,x/s,x/t,x/u,x/v,x/w,x/x,x/y,x/z,x/A,x/B,x/C,x/D,x/E,x/F,x/G,x/H,x/I,x/J,x/K,x/L,x/M,x/N,x/O,x/P,x/Q,x/R,x/S,x/T,x/U,x/V,x/W,x/X,x/Y,x/Z,y/a,y/b,y/c,y/d,y/e,y/f,y/g,y/h,y/i,y/j,y/k,y/l,y/m,y/n,y/o,y/p,y/q,y/r,y/s,y/t,y/u,y/v,y/w,y/x,y/y,y/z,y/A,y/B,y/C,y/D,y/E,y/F,y/G,y/H,y/I,y/J,y/K,y/L,y/M,y/N,y/O,y/P,y/Q,y/R,y/S,y/T,y/U,y/V,y/W,y/X,y/Y,y/Z,z/a,z/b,z/c,z/d,z/e,z/f,z/g,z/h,z/i,z/j,z/k,z/l,z/m,z/n,z/o,z/p,z/q,z/r,z/s,z/t,z/u,z/v,z/w,z/x,z/y,z/z} rw, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_lock_1.sd0000644000175000017500000000012411232012201021227 0ustar jjjj# #=DESCRIPTION k to be lower case #=EXRESULT FAIL # /usr/bin/foo { /bin/ls K, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_alternations_1.sd0000644000175000017500000000026112247474211022713 0ustar jjjj# #=Description basic file rule w/alternations #=EXRESULT PASS # /usr/bin/foo { /a/b/c/**{cache,data,download,/ext,fileadmin,files,images,joomla,moodledata/sessions}/** rw, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_deny_4.sd0000644000175000017500000000022212226157421021145 0ustar jjjj# #=DESCRIPTION an exact overlapping deny rule #=EXRESULT PASS # vim:syntax=apparmor # /usr/bin/foo { /usr/bin/foo r, deny /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_src_ok_link_1.sd0000644000175000017500000000017312534527434022755 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { /foo@{var} rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_carat_1.sd0000644000175000017500000000012411232012201021254 0ustar jjjj# #=DESCRIPTION carat in pathname #=EXRESULT PASS # /usr/bin/foo { /foo^bar r, } apparmor-2.11.0/parser/tst/simple_tests/file/dos_line_endings.sd0000644000175000017500000000232111232012201022555 0ustar jjjj# vim:syntax=subdomain # Last Modified: Wed Aug 31 11:14:09 2005 #=DESCRIPTION dos line endings #=EXRESULT PASS /usr/lib/RealPlayer10/realplay { #include #include /bin/bash ix, /bin/sed ixr, /bin/true ixr, /etc/opt/gnome/pango/pango.modules r, /opt/gnome/lib/gtk-2.0/2.4.0/loaders/* r, /opt/gnome/lib/lib*so* r, /opt/gnome/lib/pango/1.4.0/modules/* r, /opt/gnome/share/icons r, /opt/gnome/share/icons/** r, /opt/gnome/bin/nautilus rux, /root r, /root/.Xauthority r, /root/.fonts.cache-1 r, /root/.realplayerrc rw, /home/*/ r, /home/*/.Xauthority r, /home/*/.fonts.cache-1 r, /home/*/.realplayerrc rw, /usr/X11R6/lib/Acrobat7/Resource/Font/* r, /usr/X11R6/lib/Acrobat7/Resource/Font/PFM/* r, /usr/lib/RealPlayer10/** r, /usr/lib/RealPlayer10/realplay.bin ixr, /usr/lib/jvm/java-1.4.2-sun-1.4.2.06/jre/lib/fonts/** r, /usr/lib/ooo-2.0/share/fonts/** r, /opt/MozillaFirefox/bin/firefox.sh pxr, /opt/MozillaFirefox/lib/firefox-bin pxr, /opt/MozillaFirefox/lib/init.d r, /usr/bin/opera pxr, /usr/share/icons r, /usr/share/icons/** r, /opt/gnome/share/pixmaps r, /opt/gnome/share/pixmaps/** r, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_slashquote_1.sd0000644000175000017500000000020712266425523022403 0ustar jjjj# #=DESCRIPTION unnecessary slash quotes are okay (should emit warning) #=EXRESULT PASS # profile blart { /bingo/bang\o/bongo rw, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_quoted_2.sd0000644000175000017500000000015712266425523021521 0ustar jjjj# #=DESCRIPTION simple quoted newline expansion #=EXRESULT PASS # profile test { "/bin/alpha\nbeta" rix, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_1.sd0000644000175000017500000000012511232012201020103 0ustar jjjj# #=Description basic file rule #=EXRESULT PASS # /usr/bin/foo { /usr/bin/foo r, } apparmor-2.11.0/parser/tst/simple_tests/file/bad_embedded_0_1.sd0000644000175000017500000000023612467167244022310 0ustar jjjj# #=DESCRIPTION embedded \000 in file path #=EXRESULT PASS # currently do NOT have semantic checks for \000 in file path # /usr/bin/foo { /foo\000bar w, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_mmap_2.sd0000644000175000017500000000034411232012201021121 0ustar jjjj# #=DESCRIPTION m and [upi]x do not conflict, seperate rules #=EXRESULT PASS # /usr/bin/foo { /bin/cat rm, /bin/cat ix, /bin/true px, /bin/true m, /bin/false m, /bin/false ux, /lib/libc.so rwl, /lib/libc.so m, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_octal_2.sd0000644000175000017500000000015612266425523021321 0ustar jjjj# #=DESCRIPTION simple quoted octal expansion #=EXRESULT PASS # profile octal { "/bin/a b \143 d e" rix, } apparmor-2.11.0/parser/tst/simple_tests/file/ok_embedded_spaces_2.sd0000644000175000017500000000014111232012201023251 0ustar jjjj#=DESCRIPTION Simple test case for embedded spaces #=EXRESULT PASS /bin/foo { "/abc def" r, } apparmor-2.11.0/parser/tst/simple_tests/file/var2_target_ok_link_1.sd0000644000175000017500000000017412534527434023455 0ustar jjjj# #=DESCRIPTION simple link access test #=EXRESULT PASS # @{var}=/test profile test { /alpha/beta rl, /gamma/* rwl, } apparmor-2.11.0/parser/tst/simple_tests/conditional/0000755000175000017500000000000013034613157020333 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/conditional/ok_9.sd0000644000175000017500000000104611232012201021502 0ustar jjjj#=DESCRIPTION basic conditional with not statements/weird whitespace #=EXRESULT PASS $FOO=true $BAR = False /bin/true { /bin/false rix, capability net_raw, if not not not not not not not not not not not not not not not not not not not not not not not not not not ${FOO} { /usr/bin/sendmail rux, } /bin/true rix, /bin/sh rix, capability dac_override, } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_2.sd0000644000175000017500000000025411232012201021473 0ustar jjjj# taken from cond48.sd #=DESCRIPTION redundant rule selected by conditional #=EXRESULT PASS $FOO=true /bin/true { if $FOO { /bin/true rix, } /bin/true rix, } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_3.sd0000644000175000017500000000044611232012201022016 0ustar jjjj# taken from codn54.sd #=DESCRIPTION conditional within hat scope #=EXRESULT PASS $FOO=true /bin/true { ^TRUE { if $FOO { /bin/true rix, } else { /bin/false rix, } } ^FALSE { if not $FOO { /bin/true rix, } else { /bin/false rix, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/defined_2.sd0000644000175000017500000000047611232012201022466 0ustar jjjj#=DESCRIPTION Conditional tests with 'defined' keyword #=EXRESULT PASS @FOO = "" /bin/true { if not defined @BAR { /bin/true rix, } if not defined @FOO { /bin/false rix, } if not not defined @FOO { /usr/bin/true rix, } if not not defined @BAR { /usr/bin/false rix, } /dev/null r, } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_8.sd0000644000175000017500000000047011232012201021501 0ustar jjjj#=DESCRIPTION basic conditional statements w/hats #=EXRESULT PASS $FOO= false $BAR = False /bin/true { /bin/false rix, capability net_raw, ^hat1 { /usr/bin/sendmail rix, } if ${FOO} { ^hat1 { /usr/bin/sendmail rux, } } /bin/true rix, /bin/sh rix, capability dac_override, } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_3.sd0000644000175000017500000000035411232012201021475 0ustar jjjj#=DESCRIPTION basic conditional statements w/file rules #=EXRESULT PASS $FOO=true $BAR = False /bin/true { /bin/false rix, if ${FOO} { /bin/true rix, } /bin/true rix, if ${BAR} { /etc/shadow rw, } /bin/sh rix, } apparmor-2.11.0/parser/tst/simple_tests/conditional/stress_1.sd0000644000175000017500000005455212546462662022453 0ustar jjjj#=DESCRIPTION simple stress test nested ifs #=EXRESULT PASS $a1 = true $a2 = true $a3 = true $a4 = true $a5 = true $a6 = true $a7 = true $a8 = true $a9 = true $a10 = true $a11 = true $a12 = true $a13 = true $a14 = true $a15 = true $a16 = true $a17 = true $a18 = true $a19 = true $a20 = true $a21 = true $a22 = true $a23 = true $a24 = true $a25 = true $a26 = true $a27 = true $a28 = true $a29 = true $a30 = true $a31 = true $a32 = true $a33 = true $a34 = true $a35 = true $a36 = true $a37 = true $a38 = true $a39 = true $a40 = true $a41 = true $a42 = true $a43 = true $a44 = true $a45 = true $a46 = true $a47 = true $a48 = true $a49 = true $a50 = true $a51 = true $a52 = true $a53 = true $a54 = true $a55 = true $a56 = true $a57 = true $a58 = true $a59 = true $a60 = true $a61 = true $a62 = true $a63 = true $a64 = true $a65 = true $a66 = true $a67 = true $a68 = true $a69 = true $a70 = true $a71 = true $a72 = true $a73 = true $a74 = true $a75 = true $a76 = true $a77 = true $a78 = true $a79 = true $a80 = true $a81 = true $a82 = true $a83 = true $a84 = true $a85 = true $a86 = true $a87 = true $a88 = true $a89 = true $a90 = true $a91 = true $a92 = true $a93 = true $a94 = true $a95 = true $a96 = true $a97 = true $a98 = true $a99 = true $a100 = true /bin/true { /bin/true r, if $a1 { if $a2 { if $a3 { if $a4 { if $a5 { if $a6 { if $a7 { if $a8 { if $a9 { if $a10 { if $a11 { if $a12 { if $a13 { if $a14 { if $a15 { if $a16 { if $a17 { if $a18 { if $a19 { if $a20 { if $a21 { if $a22 { if $a23 { if $a24 { if $a25 { if $a26 { if $a27 { if $a28 { if $a29 { if $a30 { if $a31 { if $a32 { if $a33 { if $a34 { if $a35 { if $a36 { if $a37 { if $a38 { if $a39 { if $a40 { if $a41 { if $a42 { if $a43 { if $a44 { if $a45 { if $a46 { if $a47 { if $a48 { if $a49 { if $a50 { if $a51 { if $a52 { if $a53 { if $a54 { if $a55 { if $a56 { if $a57 { if $a58 { if $a59 { if $a60 { if $a61 { if $a62 { if $a63 { if $a64 { if $a65 { if $a66 { if $a67 { if $a68 { if $a69 { if $a70 { if $a71 { if $a72 { if $a73 { if $a74 { if $a75 { if $a76 { if $a77 { if $a78 { if $a79 { if $a80 { if $a81 { if $a82 { if $a83 { if $a84 { if $a85 { if $a86 { if $a87 { if $a88 { if $a89 { if $a90 { if $a91 { if $a92 { if $a93 { if $a94 { if $a95 { if $a96 { if $a97 { if $a98 { if $a99 { if $a100 { /bin/false ux, } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_1.sd0000644000175000017500000000023111232012201021602 0ustar jjjj# taken from cond31.sd #=DESCRIPTION boolean assigned inside profile scope #=EXRESULT FAIL /bin/true { $BAR=true if $BAR { /bin/true rix, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_6.sd0000644000175000017500000000075111232012201021501 0ustar jjjj#=DESCRIPTION basic conditional statements w/hats #=EXRESULT PASS $FOO=true $BAR = False /bin/true { /bin/false rix, capability net_raw, if ${FOO} { capability ipc_lock, ^hat1 { /usr/bin/sendmail rix, if not $BAR { /usr/sbin/sshd rix, } } } /bin/true rix, if ${BAR} { capability sys_admin, /etc/shadow rw, ^hat2 { /usr/bin/passwd rix, } } /bin/sh rix, capability dac_override, ^hat3 { /tmp/** rw, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_else_2.sd0000644000175000017500000000044011232012201022615 0ustar jjjj# taken from cond59.sd #=DESCRIPTION improper nesting of hat and conditional #=EXRESULT FAIL $FOO=true #indentation screwy to try to show crossing levels /bin/true { /bin/true rix, if $FOO { ^HATNAME } #endif { /bin/false rix, if $FOO { } #endhat } #endif } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_1.sd0000644000175000017500000000037211232012201022012 0ustar jjjj# taken from cond50.sd #=DESCRIPTION simple else clause #=EXRESULT PASS $FOO=true /bin/true { if $FOO { /bin/true rix, } else { /bin/false rix, } } /bin/false { if not $FOO { /bin/true rix, } else { /bin/false rix, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_5.sd0000644000175000017500000000066111232012201021500 0ustar jjjj#=DESCRIPTION basic conditional statements w/hats #=EXRESULT PASS $FOO=true $BAR = False /bin/true { /bin/false rix, capability net_raw, if ${FOO} { capability ipc_lock, ^hat1 { /usr/bin/sendmail rix, } } /bin/true rix, if ${BAR} { capability sys_admin, /etc/shadow rw, ^hat2 { /usr/bin/passwd rix, } } /bin/sh rix, capability dac_override, ^hat3 { /tmp/** rw, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_7.sd0000644000175000017500000000040111232012201022467 0ustar jjjj#=DESCRIPTION conditional else in invalid locations #=EXRESULT FAIL $BAR = false $FOO=true $FALSE = false /bin/true { if $FOO { /bin/true rix, ^FOO { /bin/false rix, } else if $FALSE { /dev/null w, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_6.sd0000644000175000017500000000031211232012201022467 0ustar jjjj#=DESCRIPTION conditional else in invalid locations #=EXRESULT FAIL $BAR = false $FOO=true $FALSE = false /bin/true { if $FOO { /bin/true rix, } } else if $FALSE { /dev/null w, } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_3.sd0000644000175000017500000000016511232012201021612 0ustar jjjj#=DESCRIPTION conditional at end of line #=EXRESULT FAIL $FOO=true /bin/true { /bin/true r if $FOO { , } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_5.sd0000644000175000017500000000137511232012201022500 0ustar jjjj#=DESCRIPTION conditional else #=EXRESULT PASS $FOO=true $BAR = false $FALSE = false /bin/true { ^TRUE { if $FOO { /bin/true rix, } else if $FALSE { /bin/false rix, } else if $BAR { /dev/null r, } else if not $FALSE { /dev/null w, } else if defined @B1 { /tmp/1 rw, } else if defined @B2 { /tmp/2 rw, } else if defined @B3 { /tmp/3 rw, } else { /tmp/4 rw, } } ^FALSE { if not $FOO { /bin/false rix, } else if ${FALSE} { /bin/true rix, } else if $BAR { /dev/null r, } else if defined @B1 { /tmp/1 rw, } else if defined @B2 { /tmp/2 rw, } else if defined @B3 { /tmp/3 rw, } else { /tmp/4 rw, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_4.sd0000644000175000017500000000047711232012201021504 0ustar jjjj#=DESCRIPTION basic conditional statements w/capabilities #=EXRESULT PASS $FOO=true $BAR = False /bin/true { /bin/false rix, capability net_raw, if ${FOO} { capability ipc_lock, } /bin/true rix, if ${BAR} { capability sys_admin, /etc/shadow rw, } /bin/sh rix, capability dac_override, } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_4.sd0000644000175000017500000000044311232012201022472 0ustar jjjj#=DESCRIPTION conditional else in invlaid locations #=EXRESULT FAIL $BAR = false $FOO=true $FALSE = false /bin/true { ^TRUE { if $FOO { /bin/true rix, } else if $FALSE { /bin/false rix, } else if $BAR { /dev/null r, } } else { /dev/null w, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_1.sd0000644000175000017500000000052011232012201022463 0ustar jjjj#=DESCRIPTION conditional else #=EXRESULT PASS $FOO=true $FALSE = false /bin/true { ^TRUE { if $FOO { /bin/true rix, } else { if $FALSE { /bin/false rix, } } } ^FALSE { if not $FOO { /bin/true rix, } else { if not ${FALSE} { /bin/false rix, } } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_2.sd0000644000175000017500000000051411232012201022011 0ustar jjjj# taken from cond52.sd #=DESCRIPTION hat defined in if and else clauses #=EXRESULT PASS $FOO=true /bin/true { if $FOO { ^TRUE { /bin/true rix, } } else { ^TRUE { /bin/false rix, } } if not $FOO { ^FALSE { /bin/true rix, } } else { ^FALSE { /bin/false rix, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_8.sd0000644000175000017500000000037211232012201022477 0ustar jjjj#=DESCRIPTION conditional else in invalid locations #=EXRESULT FAIL $BAR = false $FOO=true $FALSE = false /bin/true { if $FOO { /bin/true rix, } else ^FOO { /bin/false rix, } if $FALSE { /dev/null w, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/defined_1.sd0000644000175000017500000000030711232012201022456 0ustar jjjj#=DESCRIPTION Conditional tests with 'defined' keyword #=EXRESULT PASS @FOO = "" /bin/true { if defined @FOO { /bin/true rix, } if defined @BAR { /bin/false rix, } /dev/null r, } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_dup_hats_2.sd0000644000175000017500000000036511232012201023502 0ustar jjjj#=DESCRIPTION duplicated hats inside a conditional #=EXRESULT FAIL ${FOO} = true ${BAR} = true /bin/true { if ${BAR} { ^dupehat { /bin/false rix, } } if ${FOO} { ^dupehat { capability dac_override, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_else_1.sd0000644000175000017500000000042411232012201022616 0ustar jjjj# taken from codn55.sd #=DESCRIPTION improper nesting of hat and conditional block #=EXRESULT FAIL $FOO=true # indentation screwy to try to best show 'else' in wrong place /bin/true { if $FOO { ^HAT { /bin/true rix, } else { /bin/bother rix, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_2.sd0000644000175000017500000000017011232012201021605 0ustar jjjj#=DESCRIPTION conditional around only mode #=EXRESULT FAIL $FOO=true /bin/true { /bin/true if $FOO { r, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_1.sd0000644000175000017500000000017011232012201021467 0ustar jjjj#=DESCRIPTION conditional within profile #=EXRESULT PASS $FOO=true /bin/true { if $FOO { /bin/true rix, } } apparmor-2.11.0/parser/tst/simple_tests/conditional/bad_dup_hats_1.sd0000644000175000017500000000031611232012201023475 0ustar jjjj#=DESCRIPTION duplicated hats inside a conditional #=EXRESULT FAIL ${FOO} = true /bin/true { ^dupehat { /bin/false rix, } if ${FOO} { ^dupehat { capability dac_override, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_3.sd0000644000175000017500000000225611232012201022475 0ustar jjjj#=DESCRIPTION conditional else #=EXRESULT PASS $FOO=true $BAR = false $FALSE = false /bin/true { #empty clauses if $FOO { } if $BAR { } if $FOO { } else { } if $BAR { } else { } if $FOO { if $FALSE { } if not $FALSE { } else { } } else { if $BAR { } else { } if $BAR { } else if not $FALSE { } } #unempty clauses if $FOO { /tmp/1 r, } if $BAR { /tmp/2 r, } if $FOO { /tmp/3 r, } else { /tmp/4 r, } if $BAR { /tmp/5 r, } else { /tmp/6 r, } if $FOO { /tmp/7 r, if $FALSE { /tmp/8 r, } if not $FALSE { /tmp/9 r, } else { /tmp/10 r, } } else { /tmp/11 r, if $BAR { /tmp/12 r, } else { /tmp/13 r, } if $BAR { /tmp/14 r, } else if not $FALSE { /tmp/15 r, } } if $BAR { /tmp/16 r, if $FALSE { /tmp/17 r, } if not $FALSE { /tmp/18 r, } else { /tmp/19 r, } } else { /tmp/20 r, if $BAR { /tmp/21 r, } else { /tmp/22 r, } if $BAR { /tmp/23 r, } else if not $FALSE { /tmp/24 r, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/else_if_2.sd0000644000175000017500000000045411232012201022472 0ustar jjjj#=DESCRIPTION conditional else #=EXRESULT PASS $FOO=true $FALSE = false /bin/true { ^TRUE { if $FOO { /bin/true rix, } else if $FALSE { /bin/false rix, } } ^FALSE { if not $FOO { /bin/false rix, } else if not ${FALSE} { /bin/true rix, } } } apparmor-2.11.0/parser/tst/simple_tests/conditional/ok_7.sd0000644000175000017500000000052211232012201021476 0ustar jjjj#=DESCRIPTION basic conditional statements w/hats #=EXRESULT PASS $FOO=true $BAR = False /bin/true { /bin/false rix, capability net_raw, if ${FOO} { ^hat1 { /usr/bin/sendmail rix, } } if not ${FOO} { ^hat1 { /usr/bin/sendmail rux, } } /bin/true rix, /bin/sh rix, capability dac_override, } apparmor-2.11.0/parser/tst/simple_tests/unix/0000755000175000017500000000000013034613166017013 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/unix/ok_shutdown_1.sd0000644000175000017500000000015512401710304022115 0ustar jjjj# #=DESCRIPTION simple unix shutdown acceptance test #=EXRESULT PASS profile a_profile { unix shutdown, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_opt_4.sd0000644000175000017500000000020512410047776021200 0ustar jjjj# #=DESCRIPTION simple unix setopt w/peer label test #=EXRESULT FAIL profile a_profile { unix (setopt) peer=(label=unconfined), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_shutdown_2.sd0000644000175000017500000000021412410047776022247 0ustar jjjj# #=DESCRIPTION simple unix shutdown acceptance test #=EXRESULT FAIL profile a_profile { unix (shutdown) peer=(label=@{profile_name}), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_listen_2.sd0000644000175000017500000000017412410047776021677 0ustar jjjj# #=DESCRIPTION simple unix listen w/peer test #=EXRESULT FAIL profile a_profile { unix (listen) peer=(addr=@unknown), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_shutdown_1.sd0000644000175000017500000000017212410047776022251 0ustar jjjj# #=DESCRIPTION simple unix shutdown w/peer test #=EXRESULT FAIL profile a_profile { unix shutdown peer=(addr=none), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_19.sd0000644000175000017500000000013112401710304021113 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (rw), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_listen_1.sd0000644000175000017500000000015112401710304021534 0ustar jjjj# #=DESCRIPTION simple unix listen acceptance test #=EXRESULT PASS profile a_profile { unix listen, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_create_1.sd0000644000175000017500000000015112401710304021501 0ustar jjjj# #=DESCRIPTION simple unix create acceptance test #=EXRESULT PASS profile a_profile { unix create, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_18.sd0000644000175000017500000000020412413103046021441 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that is quoted #=EXRESULT PASS # profile foo { unix peer=(label="splat "), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_create_2.sd0000644000175000017500000000015312401710304021504 0ustar jjjj# #=DESCRIPTION simple unix create acceptance test #=EXRESULT PASS profile a_profile { unix (create), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_connect_2.sd0000644000175000017500000000015512401710304021674 0ustar jjjj# #=DESCRIPTION simple unix connect acceptance test #=EXRESULT PASS profile a_profile { unix (connect), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_peer_1.sd0000644000175000017500000000026012401700741021313 0ustar jjjj# #=Description unix rule with bad 'peer' #=EXRESULT FAIL # # path address must be none for anonymous or start with @ for abstract profile foo { unix send peer(addr=wat), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_7.sd0000644000175000017500000000014512401700741021041 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send) addr=none, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_listen_2.sd0000644000175000017500000000015312401710304021537 0ustar jjjj# #=DESCRIPTION simple unix listen acceptance test #=EXRESULT PASS profile a_profile { unix (listen), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_regex_03.sd0000644000175000017500000000020112401674202021551 0ustar jjjj# #=DESCRIPTION unix rule with a bad peer regex expansion #=EXRESULT FAIL # profile foo { dbus send peer=(label=spla{t,r ), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_attr_3.sd0000644000175000017500000000017312410047776021353 0ustar jjjj# #=DESCRIPTION simple unix setattr w/peer test #=EXRESULT FAIL profile a_profile { unix setattr peer=(label=orange), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_06.sd0000644000175000017500000000017412413103046021444 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\(, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_05.sd0000644000175000017500000000017412413103046021443 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\,, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_embedded_0_1.sd0000644000175000017500000000015112467167244022233 0ustar jjjj# #=DESCRIPTION unix rule with embedded \000 #=EXRESULT PASS # profile foo { unix addr=@foo\000bar, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_create_2.sd0000644000175000017500000000020112410047776021633 0ustar jjjj# #=DESCRIPTION simple unix create acceptance test #=EXRESULT FAIL profile a_profile { unix (create) peer=(addr=@somesuch), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_07.sd0000644000175000017500000000017412413103046021445 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_attr_3.sd0000644000175000017500000000015312401710304021214 0ustar jjjj# #=DESCRIPTION simple unix setattr acceptance test #=EXRESULT PASS profile a_profile { unix setattr, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_10.sd0000644000175000017500000000015412401674202021115 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send) peer=(label=foo), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_16.sd0000644000175000017500000000012612401710304021114 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix w, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_modifier_4.sd0000644000175000017500000000017512401674202022170 0ustar jjjj# #=DESCRIPTION unix entry with a bad multivalue modifier #=EXRESULT FAIL profile foo { unix send type=(stream, dgram), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_8.sd0000644000175000017500000000014512401700741021042 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send) addr=@foo, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_listen_3.sd0000644000175000017500000000017412410047776021563 0ustar jjjj# #=DESCRIPTION simple unix listen w/addr acceptance test #=EXRESULT PASS profile a_profile { unix listen addr=@foo**, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_attr_4.sd0000644000175000017500000000015512401710304021217 0ustar jjjj# #=DESCRIPTION simple unix setattr acceptance test #=EXRESULT PASS profile a_profile { unix (setattr), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_13.sd0000644000175000017500000000021012413103046021431 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\"), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_opt_2.sd0000644000175000017500000000020412410047776021175 0ustar jjjj# #=DESCRIPTION simple unix getopt w/peer label test #=EXRESULT FAIL profile a_profile { unix (getopt) peer=(label=strongbad), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_2.sd0000644000175000017500000000013612401674202021036 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (receive), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_6.sd0000644000175000017500000000015512401674202021043 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send, receive, connect), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_outside_1.sd0000644000175000017500000000012612611240354022037 0ustar jjjj# #=DESCRIPTION unix accept rule outside of a profile #=EXRESULT FAIL unix accept, apparmor-2.11.0/parser/tst/simple_tests/unix/ok_attr_6.sd0000644000175000017500000000017412410047776021242 0ustar jjjj# #=DESCRIPTION simple unix setattr w/addr acceptance test #=EXRESULT PASS profile a_profile { unix setattr addr=none, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_modifier_3.sd0000644000175000017500000000017112401674202022163 0ustar jjjj# #=DESCRIPTION unix entry with a bad 'in' keyword #=EXRESULT FAIL profile foo { unix send type in (dgram, stream), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_create_3.sd0000644000175000017500000000017212410047776021526 0ustar jjjj# #=DESCRIPTION simple unix create w/addr acceptance test #=EXRESULT PASS profile a_profile { unix create addr=none, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_shutdown_2.sd0000644000175000017500000000015712401710304022120 0ustar jjjj# #=DESCRIPTION simple unix shutdown acceptance test #=EXRESULT PASS profile a_profile { unix (shutdown), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_1.sd0000644000175000017500000000013412401674202021033 0ustar jjjj# #=DESCRIPTION simple unix send test #=EXRESULT PASS profile a_profile { unix (send), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_12.sd0000644000175000017500000000013212401710304021105 0ustar jjjj# #=DESCRIPTION simple unix send test #=EXRESULT PASS profile a_profile { unix send, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_17.sd0000644000175000017500000000021012413103046021435 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\)), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_opt_4.sd0000644000175000017500000000015312401710304021045 0ustar jjjj# #=DESCRIPTION simple unix setopt acceptance test #=EXRESULT PASS profile a_profile { unix (setopt), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_bind_2.sd0000644000175000017500000000014512401710304021156 0ustar jjjj# #=DESCRIPTION simple unix bind acceptance test #=EXRESULT PASS profile a_profile { unix bind, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_attr_1.sd0000644000175000017500000000015312401710304021212 0ustar jjjj# #=DESCRIPTION simple unix getattr acceptance test #=EXRESULT PASS profile a_profile { unix getattr, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_connect_1.sd0000644000175000017500000000015312401710304021671 0ustar jjjj# #=DESCRIPTION simple unix connect acceptance test #=EXRESULT PASS profile a_profile { unix connect, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_embedded_0_3.sd0000644000175000017500000000015112467167244022235 0ustar jjjj# #=DESCRIPTION unix rule with embedded \d00 #=EXRESULT PASS # profile foo { unix addr=@foo\d00bar, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_attr_1.sd0000644000175000017500000000017412410047776021352 0ustar jjjj# #=DESCRIPTION simple unix getattr w/peer modifier #=EXRESULT FAIL profile a_profile { unix getattr peer=(addr=none), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_4.sd0000644000175000017500000000013312401674202021035 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_17.sd0000644000175000017500000000013012401710304021110 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (w), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_18.sd0000644000175000017500000000012712401710304021117 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix rw, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_bind_2.sd0000644000175000017500000000017712401700741021304 0ustar jjjj# #=DESCRIPTION dbus bind with non-bind interface modifier #=EXRESULT FAIL # profile foo { unix bind label=foo addr=@bar, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_02.sd0000644000175000017500000000017412413103046021440 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\ , } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_13.sd0000644000175000017500000000013412401710304021110 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix receive, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_attr_2.sd0000644000175000017500000000020512410047776021346 0ustar jjjj# #=DESCRIPTION simple unix getattr acceptance test #=EXRESULT FAIL profile a_profile { unix (getattr) peer=(label=unconfined), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_14.sd0000644000175000017500000000012612401710304021112 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix r, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_08.sd0000644000175000017500000000017012413103046021442 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that is quoted #=EXRESULT PASS # profile foo { unix addr="@splat ", } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_opt_1.sd0000644000175000017500000000017312410047776021201 0ustar jjjj# #=DESCRIPTION simple unix getopt w/peer addr test #=EXRESULT FAIL profile a_profile { unix getopt peer=(addr=none), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_bind_3.sd0000644000175000017500000000014712401710304021161 0ustar jjjj# #=DESCRIPTION simple unix bind acceptance test #=EXRESULT PASS profile a_profile { unix (bind), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_09.sd0000644000175000017500000000021512413103046021443 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that is quoted with quote escaped #=EXRESULT PASS # profile foo { unix addr="@splat \"", } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_attr_2.sd0000644000175000017500000000015512401710304021215 0ustar jjjj# #=DESCRIPTION simple unix getattr acceptance test #=EXRESULT PASS profile a_profile { unix (getattr), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_opt_6.sd0000644000175000017500000000017212410047776021070 0ustar jjjj# #=DESCRIPTION simple unix setopt w/addr acceptance test #=EXRESULT PASS profile a_profile { unix setopt addr=none, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_9.sd0000644000175000017500000000015412401700741021043 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send) peer=(addr=@foo), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_5.sd0000644000175000017500000000014412401674202021040 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (send, receive), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_regex_02.sd0000644000175000017500000000015512401700741021556 0ustar jjjj# #=DESCRIPTION unix rule with a bad expansion #=EXRESULT FAIL # profile foo { unix bind addr=abcd]efg, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_19.sd0000644000175000017500000000023112413103046021442 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that is quoted with quote escaped #=EXRESULT PASS # profile foo { unix peer=(label="splat \""), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_16.sd0000644000175000017500000000021012413103046021434 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\(), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_15.sd0000644000175000017500000000021012413103046021433 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\,), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_shutdown_3.sd0000644000175000017500000000022412410047776022134 0ustar jjjj# #=DESCRIPTION simple unix shutdown w/addr acceptance test #=EXRESULT PASS profile a_profile { unix shutdown addr=@HypotheticalServiceDaemon, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_attr_4.sd0000644000175000017500000000020112410047776021344 0ustar jjjj# #=DESCRIPTION simple unix setattr w/peer addr test #=EXRESULT FAIL profile a_profile { unix (setattr) peer=(addr=@spork), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_opt_5.sd0000644000175000017500000000020412410047776021063 0ustar jjjj# #=DESCRIPTION simple unix getopt w/addr acceptance test #=EXRESULT PASS profile a_profile { unix getopt addr=@private/defer, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_3.sd0000644000175000017500000000013612401674202021037 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (connect), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_11.sd0000644000175000017500000000021012413103046021427 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\ ), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_14.sd0000644000175000017500000000021012413103046021432 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\!), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_listen_1.sd0000644000175000017500000000020612410047776021672 0ustar jjjj# #=DESCRIPTION simple unix listen w/peer test #=EXRESULT FAIL profile a_profile { unix listen peer=(label=you_cannot_label_me), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_opt_3.sd0000644000175000017500000000022112410047776021175 0ustar jjjj# #=DESCRIPTION simple unix setopt w/peer addr test #=EXRESULT FAIL profile a_profile { unix setopt peer=(addr=@/dbus-vfs-daemon/socket-*), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_modifier_2.sd0000644000175000017500000000017112401674202022162 0ustar jjjj# #=DESCRIPTION unix entry with a repeated modifier #=EXRESULT FAIL profile foo { unix send type=stream type=dgram, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_regex_01.sd0000644000175000017500000000021712401700741021554 0ustar jjjj# #=DESCRIPTION unix rule with a bad addr regex expansion #=EXRESULT FAIL # profile foo { unix send addr=@foo{one,two peer=(label=splat), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_opt_3.sd0000644000175000017500000000015112401710304021042 0ustar jjjj# #=DESCRIPTION simple unix setopt acceptance test #=EXRESULT PASS profile a_profile { unix setopt, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_bind_1.sd0000644000175000017500000000017212401700741021276 0ustar jjjj# #=DESCRIPTION unix bind with non-bind member modifier #=EXRESULT FAIL # profile foo { unix bind peer=(addr=@foo ), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_15.sd0000644000175000017500000000013012401710304021106 0ustar jjjj# #=DESCRIPTION simple unix msg test #=EXRESULT PASS profile a_profile { unix (r), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_regex_04.sd0000644000175000017500000000023512401700741021557 0ustar jjjj# #=DESCRIPTION unix rule with a bad path address regex expansion #=EXRESULT FAIL # profile foo { unix send addr=/some/random/{path peer=(label=splat), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_bind_1.sd0000644000175000017500000000017312401700741021162 0ustar jjjj# #=DESCRIPTION simple unix implicit bind acceptance test #=EXRESULT PASS profile a_profile { unix addr=@SomeService, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_opt_1.sd0000644000175000017500000000015112401710304021040 0ustar jjjj# #=DESCRIPTION simple unix getopt acceptance test #=EXRESULT PASS profile a_profile { unix getopt, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_03.sd0000644000175000017500000000017412413103046021441 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\", } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_01.sd0000644000175000017500000000017412413103046021437 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\ , } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_opt_2.sd0000644000175000017500000000015312401710304021043 0ustar jjjj# #=DESCRIPTION simple unix getopt acceptance test #=EXRESULT PASS profile a_profile { unix (getopt), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_04.sd0000644000175000017500000000017412413103046021442 0ustar jjjj# #=DESCRIPTION unix rule with regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix addr=@splat\!, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_msg_11.sd0000644000175000017500000000012012401710304021101 0ustar jjjj# #=DESCRIPTION simple unix rule #=EXRESULT PASS profile a_profile { unix, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_accept_2.sd0000644000175000017500000000015312401710304021500 0ustar jjjj# #=DESCRIPTION simple unix accept acceptance test #=EXRESULT PASS profile a_profile { unix (accept), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_regex_12.sd0000644000175000017500000000021012413103046021430 0ustar jjjj# #=DESCRIPTION unix rule with peer regex expansion that needs escaping #=EXRESULT PASS # profile foo { unix peer=(label=splat\ ), } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_modifier_1.sd0000644000175000017500000000016512401674202022164 0ustar jjjj# #=DESCRIPTION unix entry with a bad modifier #=EXRESULT FAIL profile foo { unix send type=dgram modifier=foo, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_embedded_0_2.sd0000644000175000017500000000015112467167244022234 0ustar jjjj# #=DESCRIPTION unix rule with embedded \x00 #=EXRESULT PASS # profile foo { unix addr=@foo\x00bar, } apparmor-2.11.0/parser/tst/simple_tests/unix/bad_create_1.sd0000644000175000017500000000021712410047776021641 0ustar jjjj# #=DESCRIPTION simple unix create w/peer acceptance test #=EXRESULT FAIL profile a_profile { unix create peer=(label=/usr/sbin/apache2), } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_attr_5.sd0000644000175000017500000000017412410047776021241 0ustar jjjj# #=DESCRIPTION simple unix getattr w/addr acceptance test #=EXRESULT PASS profile a_profile { unix getattr addr=none, } apparmor-2.11.0/parser/tst/simple_tests/unix/ok_accept_1.sd0000644000175000017500000000015112401710304021475 0ustar jjjj# #=DESCRIPTION simple unix accept acceptance test #=EXRESULT PASS profile a_profile { unix accept, } apparmor-2.11.0/parser/tst/simple_tests/includes-preamble/0000755000175000017500000000000013034613146021421 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/includes-preamble/vars0000644000175000017500000000011611113046204022304 0ustar jjjj# variable declarations for inclusion @{FOO} = /foo /bar /baz /biff /lib /tmp apparmor-2.11.0/parser/tst/simple_tests/includes-preamble/aliases0000644000175000017500000000006311113046204022753 0ustar jjjjalias /usr/ -> /User/, alias /lib/ -> /Libraries/, apparmor-2.11.0/parser/tst/simple_tests/includes/0000755000175000017500000000000013034613162017632 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/includes/fonts0000644000175000017500000000304611503736226020717 0ustar jjjj# ------------------------------------------------------------------ # # Copyright (C) 2002-2006 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ /usr/share/AbiSuite/fonts/** r, /usr/X11R6/lib/X11/fonts/** r, /usr/X11R6/lib/modules/fonts/** r, /usr/X11R6/lib64/X11/fonts/** r, /usr/X11R6/lib64/modules/fonts/** r, /usr/X11R6/include/X11/fonts/** r, /usr/share/fonts/** r, /etc/fonts/** r, /opt/kde3/share/fonts/** r, /usr/lib/openoffice/share/fonts/** r, /usr/lib64/openoffice/share/fonts/** r, /opt/OpenOffice.org/share/fonts/** r, /opt/OpenOffice.org/share/psprint/fontmetric/** r, /opt/OpenOffice.org/user/psprint/fontmetric/** r, /opt/gnome/share/gimp/*/fonts/** r, /opt/gnome/share/fonts/** r, /opt/mozilla/lib/res/fonts/** r, /opt/mozilla/lib64/res/fonts/** r, /var/cache/fonts/** r, /var/cache/fontconfig/** r, /usr/share/a2ps/fonts/** r, /usr/share/xfce/fonts/** r, /usr/share/ghostscript/fonts/** r, /usr/share/texmf/*/fonts/** r, #@{HOME}/.fonts/** r, /usr/local/share/fonts r, /usr/local/share/fonts/** r, apparmor-2.11.0/parser/tst/simple_tests/includes/base0000644000175000017500000000566011503736226020504 0ustar jjjj# ------------------------------------------------------------------ # # Copyright (C) 2002-2005 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ # (Note that the ldd profile has inlined this file; if you make # modifications here, please consider including them in the ldd # profile as well.) # The __canary_death_handler function writes a time-stamped log # message to /dev/log for logging by syslogd. So, /dev/log, timezones, # and localisations of date should be available EVERYWHERE, so # StackGuard, FormatGuard, etc., alerts can be properly logged. /dev/log w, /dev/urandom r, /etc/locale/** r, /etc/localtime r, /usr/share/locale/** r, /usr/share/zoneinfo/** r, /usr/lib64/locale/** r, /usr/lib64/gconv/*.so r, /usr/lib64/gconv/gconv-modules* r, /usr/lib/locale/** r, /usr/lib/gconv/*.so r, /usr/lib/gconv/gconv-modules* r, # used by glibc when binding to ephemeral ports /etc/bindresvport.blacklist r, # ld.so.cache and ld are used to load shared libraries; they are best # available everywhere /etc/ld.so.cache r, # 'px' requires a profile to be available for the transition to # function; without a loaded profile, the kernel will fail the exec. /lib/ld-*.so px, /lib64/ld-*.so px, /opt/*-linux-uclibc/lib/ld-uClibc*so* px, # we might as well allow everything to use common libraries /lib/lib*.so* r, /lib/tls/lib*.so* r, /lib/power4/lib*.so* r, /lib/power5/lib*.so* r, /lib/power5+/lib*.so* r, /lib64/power4/lib*.so* r, /lib64/power5/lib*.so* r, /lib64/power5+/lib*.so* r, /usr/lib/*.so* r, /usr/lib/tls/lib*.so* r, /usr/lib/power4/lib*.so* r, /usr/lib/power5/lib*.so* r, /usr/lib/power5+/lib*.so* r, /lib64/lib*.so* r, /lib64/tls/lib*.so* r, /usr/lib64/*.so* r, /usr/lib64/tls/lib*.so* r, # /dev/null is pretty harmless and frequently used /dev/null rw, # as is /dev/zero /dev/zero rw, # Sometimes used to determine kernel/user interfaces to use /proc/sys/kernel/version r, # Depending on which glibc routine uses this file, base may not be the # best place -- but many profiles require it, and it is quite harmless. /proc/sys/kernel/ngroups_max r, # glibc's sysconf(3) routine to determine free memory, etc /proc/meminfo r, /proc/stat r, /proc/cpuinfo r, apparmor-2.11.0/parser/tst/simple_tests/vars/0000755000175000017500000000000013034613167017004 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/vars/vars_alternation_1.sd0000644000175000017500000000027411544325141023126 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar baz @{BAR}=@{FOO} blort /does/not/exist { /does/not/{exist,notexist}/blah/@{BAR} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_12.sd0000644000175000017500000000033711232012201024371 0ustar jjjj#=DESCRIPTION Test for continuation onto newline #=EXRESULT PASS # the continuation should mean the next line should all be assigned to # this one. @{FOO} = blah \ @{BAR} = baz @{BAR} = notbaz /bin/true { /@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_13.sd0000644000175000017500000000031411471443154024411 0ustar jjjj#=DESCRIPTION quoted commas should not trigger an error #=EXRESULT PASS @{LIBVIRT} = "libvirt," /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_3.sd0000644000175000017500000000015111232012201024303 0ustar jjjj#=DESCRIPTION undefined set used as rvalue #=EXRESULT FAIL @{FOO}=@{BAR} /bin/foo { /home/@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_reassignment_1.sd0000644000175000017500000000011111232012201023253 0ustar jjjj#=DESCRIPTION reassignment of set #=EXRESULT FAIL @{FOO}=foo @{FOO}=bar apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_4.sd0000644000175000017500000000020011232012201023724 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = foo bar baz biff /usr/bin/foo { /@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_15.sd0000644000175000017500000000031511544145302024034 0ustar jjjj#=DESCRIPTION simple expansions within file rules with numeric variable #=EXRESULT PASS @{FOO1} = /foo /bar /baz /biff @{B1A1R1} = @{FOO1} /usr/bin/foo { /@{FOO1}/.foo/* r, /foo/@{B1A1R1}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_24.sd0000644000175000017500000000016312550066465023341 0ustar jjjj#=DESCRIPTION reference variables is null #=EXRESULT FAIL @{FOO}= /does/not/exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_21.sd0000644000175000017500000000014712550313554023332 0ustar jjjj#=DESCRIPTION var in hat name #=EXRESULT PASS @{FOO}=bar profile /does/not/exist { ^@{FOO} { } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_19.sd0000644000175000017500000000016612550313554023342 0ustar jjjj#=DESCRIPTION var in sub profile name #=EXRESULT PASS @{FOO}=bar profile /does/not/exist { profile @{FOO} { } } apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/0000755000175000017500000000000013034613146020420 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_7.sd0000644000175000017500000000016411232012201023403 0ustar jjjj# taken from cond8.sd #=DESCRIPTION initial part of word matches 'true', with spaces #=EXRESULT FAIL $FOO = truely apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_1.sd0000644000175000017500000000012511232012201023372 0ustar jjjj#=DESCRIPTION Assign boolean non true/false value #=EXRESULT FAIL $VAR = beeblebrox apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_8.sd0000644000175000017500000000013611232012201023403 0ustar jjjj# taken from cond10.sd #=DESCRIPTION boolean assignment of an integer #=EXRESULT FAIL $FOO=1 apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_3.sd0000644000175000017500000000012511232012201023374 0ustar jjjj#=DESCRIPTION test re-assignment of boolean #=EXRESULT FAIL $FOO = true $FOO = true apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_2.sd0000644000175000017500000000012611232012201023374 0ustar jjjj#=DESCRIPTION test re-assignment of boolean #=EXRESULT FAIL $FOO = true $FOO = false apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_good_1.sd0000644000175000017500000000062711232012201023603 0ustar jjjj#=DESCRIPTION Simple boolean assignment parsing test #=EXRESULT PASS $VAR = True ${BOOLEAN} = fALsE $GUH = true $HO_HUM=TRUE $MEEP = true /bin/foo { #include } apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_5.sd0000644000175000017500000000015211232012201023376 0ustar jjjj#=DESCRIPTION Boolean assignments inside policy should fail #=EXRESULT FAIL /bin/foo { $BLAH = false } apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_6.sd0000644000175000017500000000014211232012201023376 0ustar jjjj# from condcod6.sd #=DESCRIPTION initial part of word matches 'true' #=EXRESULT FAIL $FOO=truely apparmor-2.11.0/parser/tst/simple_tests/vars/boolean/boolean_bad_4.sd0000644000175000017500000000012511232012201023375 0ustar jjjj#=DESCRIPTION test re-assignment of boolean #=EXRESULT FAIL $FOO = true $FOO = True apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_06.sd0000644000175000017500000000055212326047365024372 0ustar jjjj#=DESCRIPTION reference auto profile_name variable in rules w/Cx profiles #=EXRESULT PASS profile top_profile /test/profile { /test/profile rix, /run/@{profile_name}/tmp rwk, /bin/spork Cx -> spork, profile spork { owner /tmp/* r, /run/@{profile_name}/** rw, } profile spelunkk { owner /tmp/* r, /run/@{profile_name}/** rw, } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_20.sd0000644000175000017500000000017112550313554023326 0ustar jjjj#=DESCRIPTION var in sub profile name #=EXRESULT PASS @{FOO}=bar profile /does/not/exist { profile foo@{FOO} { } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_trailing_comma_3.sd0000644000175000017500000000032111471443154024400 0ustar jjjj#=DESCRIPTION trailing commas should trigger an error #=EXRESULT FAIL @{LIBVIRT} = libvirt, libtriv, /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_4.sd0000644000175000017500000000043512207721065021547 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, members #=EXRESULT PASS @{MEMBERS}=blurt blirt @{BAR} @{BAR}=@{FOO} blort @{FOO}=bink bank bonk blurry* /does/not/exist { dbus (send) bus=session member=@{MEMBERS} path="/com/canonical/hud/applications/biff", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_7.sd0000644000175000017500000000032012207721065021543 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, with duplicates #=EXRESULT PASS @{FOO}=bar baz bar @{BAR}=@{FOO} blort /does/not/exist { dbus (bind) bus=session name="com.@{BAR}.@{FOO}", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_17.sd0000644000175000017500000000016612550313554023340 0ustar jjjj#=DESCRIPTION var in sub profile name #=EXRESULT PASS @{FOO}=bar profile /does/not/exist { profile @{FOO} { } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_8.sd0000644000175000017500000000012011232012201024304 0ustar jjjj#=DESCRIPTION invalid characters in variable names #=EXRESULT FAIL @{_} = blah apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_04.sd0000644000175000017500000000045512326047365024372 0ustar jjjj#=DESCRIPTION reference auto profile_name variable in rules w/hats #=EXRESULT PASS /test/profile { /test/profile rix, /run/@{profile_name}/tmp rwk, ^spork { owner /tmp/* r, /spork/@{profile_name}/** rw, } ^spelunkk { owner /tmp/* r, /spelunk/@{profile_name}/** rw, } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_05.sd0000644000175000017500000000030512326635231022433 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus bus modifier #=EXRESULT FAIL # /does/not/exist { dbus (send) member=@{MISSING_VAR} path="/com/canonical/hud/applications/BAR", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_5.sd0000644000175000017500000000017711232012201023742 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = foo bar baz biff /usr/bin/foo { @{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_9.sd0000644000175000017500000000065112251707400021550 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, multiple expansions #=EXRESULT PASS @{BUSES}=session system @{TLDS}=com org @{DOMAINS}=gnome freedesktop @{FOO}=bar baz @{BAR}=@{FOO}/blort @{MEMBERS}=Get Set /does/not/exist { dbus (send, receive) bus=@{BUSES} path=/@{TLDS}/foo member=@{MEMBERS}.bar interface=@{TLDS}.@{DOMAINS} peer=(name=@{TLDS}.@{DOMAINS} label=/@{TLDS}/@{BAR}), } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_05.sd0000644000175000017500000000023712550066465023342 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar profile /does/not /exist{@{FOO},} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_9.sd0000644000175000017500000000021411232012201023736 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { @{FOO}/=/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_stress_03.sd0000644000175000017500000000147411232012201022176 0ustar jjjj#=DESCRIPTION stress test (32448 items, 5408 unique) #=EXRESULT PASS @{FOO}=a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z @{BAR}=a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z @{BAZ}=a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z # 52^2 * 3 --> many duplicates --> 52^2 @{FBB}=@{FOO}/@{BAR} @{BAR}/@{BAZ} @{FOO}/@{BAZ} # 52^2 * 3 --> many duplicates --> 52^2 @{BBF}=@{FOO}/FBB/@{BAR} @{BAR}/FBB/@{BAZ} @{FOO}/FBB/@{BAZ} # (52^2) * 2 --> 5408 total entries. # To really up the stress factor, replace the " " with / to give # (52 ^ 2) ^ 2 unique entries, i.e. 7311616 unique entries, 65804544 total @{MEGAFBB}=@{FBB} @{BBF} /bin/foo { /@{MEGAFBB} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_10.sd0000644000175000017500000000026112550066465023333 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar baz @{BAR}=baz profile /does/not@{BAR} /exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_03.sd0000644000175000017500000000030712326635231022433 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus path modifier #=EXRESULT FAIL # /does/not/exist { dbus (send) bus=session path="/com/canonical/hud/applications/@{MISSING_VAR}", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_01.sd0000644000175000017500000000023212326047365024360 0ustar jjjj#=DESCRIPTION reference auto profile_name variable in rules #=EXRESULT PASS /a/test/profile { /a/test/profile rix, /var/run/@{profile_name} rwk, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_3.sd0000644000175000017500000000034612207721065021547 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, bus fields #=EXRESULT PASS @{BUSES}=session system accessability choochoo /does/not/exist { dbus (send) bus=@{BUSES} path="/com/canonical/hud/applications/baz", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_6.sd0000644000175000017500000000020612266425523021343 0ustar jjjj#=DESCRIPTION list variables need leading @ symbol #=EXRESULT FAIL {FOO} = /foo /bar /baz /biff /usr/bin/foo { /@{FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_add_assignment_1.sd0000644000175000017500000000024512266425523024401 0ustar jjjj#=DESCRIPTION can't additional assign to variables without initial assign #=EXRESULT FAIL @{FOO} += @{BAZ} @{BAZ} = @{BAR} @{BAR} = 2006 /bin/foo { /@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_9.sd0000644000175000017500000000012011232012201024305 0ustar jjjj#=DESCRIPTION invalid characters in variable names #=EXRESULT FAIL @{1} = blah apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_1.sd0000644000175000017500000000011111232012201024275 0ustar jjjj#=DESCRIPTION simple set variable assignment #=EXRESULT PASS @{FOO}=bar apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_trailing_comma_1.sd0000644000175000017500000000031011471443154024374 0ustar jjjj#=DESCRIPTION trailing commas should trigger an error #=EXRESULT FAIL @{LIBVIRT} = libvirt, /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_alternation_5.sd0000644000175000017500000000023612251707400023126 0ustar jjjj#=DESCRIPTION variable w/part of an alternation included #=EXRESULT PASS @{BAR}=bar,baz,blort /does/not/exist { /does/not/{exist@{BAR}notexist}/meep r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_stress_01.sd0000644000175000017500000000050711232012201022170 0ustar jjjj#=DESCRIPTION stress test (2828 items, 676 unique) #=EXRESULT PASS @{FOO}=a b c d e f g h i j k l m n o p q r s t u v w x y z @{BAR}=a b c d e f g h i j k l m n o p q r s t u v w x y z @{BAZ}=a b c d e f g h i j k l m n o p q r s t u v w x y z @{FBB}=@{FOO}/@{BAR} @{BAR}/@{BAZ} @{FOO}/@{BAZ} /bin/foo { /home/@{FBB} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_09.sd0000644000175000017500000000023712550066465023346 0ustar jjjj#=DESCRIPTION reference variables in name and attachment #=EXRESULT PASS @{FOO}=bar @{BAR}=baz profile /does/not@{BAR} /exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_alternation_4.sd0000644000175000017500000000023712251707400023126 0ustar jjjj#=DESCRIPTION variable w/part of an alternation included #=EXRESULT PASS @{BAR}=bar,baz,blort} /does/not/exist { /does/not/{exist,notexist@{BAR}/meep r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_8.sd0000644000175000017500000000021311232012201023734 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT FAIL @{FOO} = /foo /bar /baz /biff /usr/bin/foo { @{FOO}+/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_5.sd0000644000175000017500000000016011232012201024305 0ustar jjjj#=DESCRIPTION set var to one value, empty string #=EXRESULT PASS @{FOO}="" /bin/foo { @{FOO}/bin/foo rix, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_25.sd0000644000175000017500000000025312550066465023342 0ustar jjjj#=DESCRIPTION reference variables is null #=EXRESULT FAIL #=TODO #needs post var expansion check that variable contained a value @{FOO}= @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_26.sd0000644000175000017500000000026712550066465023350 0ustar jjjj#=DESCRIPTION reference variables is null #=EXRESULT FAIL #=TODO #needs post var expansion check that variable contained a value @{FOO}= profile bar @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_13.sd0000644000175000017500000000021411232012201024011 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { /@{FOO}=/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_11.sd0000644000175000017500000000030512550066465023333 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword have var and var attachment #=EXRESULT PASS @{FOO}=/bar /baz @{BAR}=baz foo profile /does/not/exist@{BAR} @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_8.sd0000644000175000017500000000053612251707400021551 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, embedded within alternation #=EXRESULT PASS @{TLDS}=com org @{DOMAINS}=gnome freedesktop /does/not/exist { dbus (send, receive) bus=session path={/@{TLDS}/foo,/com/@{DOMAINS}} interface=@{TLDS}.freedesktop peer=(name=@{TLDS}.freedesktop label=/@{TLDS}/freedesktop), } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_7.sd0000644000175000017500000000034611232012201024315 0ustar jjjj#=DESCRIPTION valid characters in variable names #=EXRESULT PASS @{ABCDEFGHIJKLMNOPQRSTUVWXYZ_} = bah @{a_bcdefghijklmnopqrstuvwxyz} = @{ABCDEFGHIJKLMNOPQRSTUVWXYZ_}/@{ABCDEFGHIJKLMNOPQRSTUVWXYZ_} ${A1_2_3_4_5_6_7_8_9_0} = False apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_10.sd0000644000175000017500000000042312251707400021615 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, var containing alternation #=EXRESULT PASS @{BUSES}=session system @{TLDS}=com org @{MEMBERS}={Get,Set} /does/not/exist { dbus (send, receive) bus=@{BUSES} path=/@{TLDS}/foo member=@{MEMBERS}.bar, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_14.sd0000644000175000017500000000021411232012201024012 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { /@{FOO}+/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_trailing_comma_4.sd0000644000175000017500000000032011471443154024400 0ustar jjjj#=DESCRIPTION trailing commas should trigger an error #=EXRESULT FAIL @{LIBVIRT} = libvirt, libtriv /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_6.sd0000644000175000017500000000030612207721065021546 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, with name #=EXRESULT PASS @{FOO}=bar baz @{BAR}=@{FOO} blort /does/not/exist { dbus (bind) bus=session name="com.@{BAR}.@{FOO}", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_10.sd0000644000175000017500000000012311232012201024360 0ustar jjjj#=DESCRIPTION invalid characters in variable names #=EXRESULT FAIL @{$FOO} = blah apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_5.sd0000644000175000017500000000022011544145302021326 0ustar jjjj#=DESCRIPTION don't accept variables with leading numeric #=EXRESULT FAIL @{4FOO} = /foo /bar /baz /biff /usr/bin/foo { /@{4FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_06.sd0000644000175000017500000000032212326635231022433 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus peer label modifier #=EXRESULT FAIL # /does/not/exist { dbus (send) path="/com/canonical/hud/applications/BAR" peer=(label=@{MISSING_VAR}), } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_16.sd0000644000175000017500000000017112550313554023333 0ustar jjjj#=DESCRIPTION var in sub profile name #=EXRESULT PASS @{FOO}=bar profile /does/not/exist { profile foo@{FOO} { } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_02.sd0000644000175000017500000000022712550066465023336 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar baz /does/not/exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_11.sd0000644000175000017500000000017411232012201024367 0ustar jjjj#=DESCRIPTION Test for continuation onto newline #=EXRESULT PASS @{FOO} = blah \\ @{BAR} = baz /bin/true { /@{BAR} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_stress_02.sd0000644000175000017500000000075111232012201022172 0ustar jjjj#=DESCRIPTION stress test (8112 items, 2704 unique) #=EXRESULT PASS @{FOO}=a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z @{BAR}=a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z @{BAZ}=a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z @{FBB}=@{FOO}/@{BAR} @{BAR}/@{BAZ} @{FOO}/@{BAZ} /bin/foo { /usr/share/@{FBB} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_7.sd0000644000175000017500000000017212266425523021346 0ustar jjjj#=DESCRIPTION variables need closing } #=EXRESULT FAIL @{FOO = /foo /bar /baz /biff /usr/bin/foo { /@{FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_22.sd0000644000175000017500000000035412550066465023341 0ustar jjjj#=DESCRIPTION all attachment expansions must start with / #=EXRESULT FAIL #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=/bar baz profile /does/not/exist @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_02.sd0000644000175000017500000000024212326047365024362 0ustar jjjj#=DESCRIPTION reference auto profile_name variable in rules #=EXRESULT PASS profile /a/test/profile { /a/test/profile rix, /var/@{profile_name}/tmp rwk, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_8.sd0000644000175000017500000000017412266425523021351 0ustar jjjj#=DESCRIPTION variables need matching {} #=EXRESULT FAIL @FOO} = /foo /bar /baz /biff /usr/bin/foo { /@{FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_bad_1.sd0000644000175000017500000000016012550066465024057 0ustar jjjj#=DESCRIPTION bare profile names must start with / #=EXRESULT FAIL @{FOO}=bar @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_recursion_4.sd0000644000175000017500000000025011232012201022574 0ustar jjjj#=DESCRIPTION recursion with multiple values #=EXRESULT FAIL @{FOO} = foo bar baz @{BAR} = @{FOO} @{FOO} += {BAR,foo} @{BAR} /bin/foo { @{FOO} r, /bin/@{BAR} rw, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_recursion_2.sd0000644000175000017500000000020611232012201022573 0ustar jjjj#=DESCRIPTION recursive set definitions -- two variables #=EXRESULT FAIL @{FOO}=@{BAR} @{BAR}=@{FOO} /bin/foo { /home/@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_05.sd0000644000175000017500000000117212326047365024370 0ustar jjjj#=DESCRIPTION reference auto profile_name variable in rules w/hats #=EXRESULT PASS profile idf3s2A6GX8vrk /simple/profile { /test/profile rix, /run/@{profile_name}/tmp rwk, ^spork { owner /tmp/* r, /spork/@{profile_name}/** rw, } ^spelunkk { owner /tmp/* r, /spelunk/@{profile_name}/** rw, } } profile LzdZb9bKTMN6y /not/simple/profile { /test/profile rix, /run/@{profile_name}/tmp rwk, ^spork { owner /tmp/* r, /run/@{profile_name}/** rw, } ^spelunkk { owner /tmp/* r, /run/@{profile_name}/** rw, } ^spry { owner /tmp/* r, /run/@{profile_name}/** rw, } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_03.sd0000644000175000017500000000022112550066465023331 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword can begin with var #=EXRESULT PASS @{FOO}=bar profile @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_2.sd0000644000175000017500000000030011471450425021326 0ustar jjjj#=DESCRIPTION garbage should trigger an error #=EXRESULT FAIL @{LIBVIRT} = lib"virt /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_11.sd0000644000175000017500000000044012251707400021615 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, nested embedded alternations #=EXRESULT PASS @{BUSES}=session system @{TLDS}=com org @{MEMBERS}={Get,Set} /does/not/exist { dbus (send, receive) bus=@{BUSES} path=/@{TLDS}/foo member={@{MEMBERS}.bar,List.baz}, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_03.sd0000644000175000017500000000026112326047365024364 0ustar jjjj#=DESCRIPTION reference auto profile_name variable in rules #=EXRESULT PASS profile this_is_a_test /a/test/profile { /a/test/profile rix, /run/@{profile_name}/tmp rwk, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_23.sd0000644000175000017500000000020012550066465023330 0ustar jjjj#=DESCRIPTION reference variables in profile name is undefined #=EXRESULT FAIL /does/not/exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_01.sd0000644000175000017500000000022312550066465023331 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar /does/not/exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_14.sd0000644000175000017500000000037412550066465023344 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=/bar /baz @{BAR}=baz profile @{BAR} @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_auto_profile_name_07.sd0000644000175000017500000000065612326047365024400 0ustar jjjj#=DESCRIPTION ensure profile_name expansion after subprofiles works #=EXRESULT PASS profile top_profile /test/profile { /test/profile rix, /first/path/@{profile_name}/tmp rwk, /bin/spork Cx -> spork, profile spork { owner /tmp/* r, /run/@{profile_name}/** rw, } hat spelunkk { owner /tmp/* r, /run/@{profile_name}/** rw, } # Does this expand properly? /second/path/@{profile_name}/tmp rk, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_2.sd0000644000175000017500000000042112207721065021540 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, interfaces #=EXRESULT PASS @{ORGS}=freedesktop ubuntu gnome kde /does/not/exist { dbus (receive) bus=accessibility interface=org.@{ORGS}.DBus.Properties path="/com/canonical/hud/applications/bar", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_6.sd0000644000175000017500000000025311232012201024311 0ustar jjjj#=DESCRIPTION multiple references to variables within vars #=EXRESULT PASS @{FOO} = blah @{BAR} @{FOO} += @{BAZ} @{BAZ} = @{BAR} @{BAR} = 2006 /bin/foo { /@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_2.sd0000644000175000017500000000012011232012201024276 0ustar jjjj#=DESCRIPTION two-value set variable assignment #=EXRESULT PASS @{FOO}=bar baz apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_5.sd0000644000175000017500000000042012207721065021542 0ustar jjjj#=DESCRIPTION reference variables in dbus rules, with peers #=EXRESULT PASS @{FOO}=bar baz @{BAR}=@{FOO} blort /does/not/exist { dbus (send, receive) bus=session path="/foo/bar" member="bar" peer=(name="com.@{FOO}" label="/usr/bin/app.@{FOO}"), } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_4.sd0000644000175000017500000000013311232012201024304 0ustar jjjj#=DESCRIPTION four value set variable assignment #=EXRESULT PASS @{FOO}=foo bar baz blort apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_04.sd0000644000175000017500000000031612326635231022434 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus interface modifier #=EXRESULT FAIL # /does/not/exist { dbus (send) interface=@{MISSING_VAR} path="/com/canonical/hud/applications/BAR", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_08.sd0000644000175000017500000000037512550066465023350 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword can begin with var #=EXRESULT FAIL #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=bar baz profile /does/not/exist @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_2.sd0000644000175000017500000000022111232012201023725 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = foo bar baz biff /usr/bin/foo { /home/@{FOO}/.foo/@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_18.sd0000644000175000017500000000015212550313554023334 0ustar jjjj#=DESCRIPTION var in hat name #=EXRESULT PASS @{FOO}=bar profile /does/not/exist { ^foo@{FOO} { } } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_trailing_garbage_1.sd0000644000175000017500000000031111471450425024670 0ustar jjjj#=DESCRIPTION trailing garbage should trigger an error #=EXRESULT FAIL @{LIBVIRT} = libvirt" /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_simple_assignment_14.sd0000644000175000017500000000032411471443154024413 0ustar jjjj#=DESCRIPTION quoted commas should not trigger an error #=EXRESULT PASS @{LIBVIRT} = "libvirt, libtriv" /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_07.sd0000644000175000017500000000037112550066465023343 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword can begin with var #=EXRESULT FAIL #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=bar profile /does/not/exist @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_16.sd0000644000175000017500000000024111544145302024033 0ustar jjjj#=DESCRIPTION simple expansions within file rules with underscore variable #=EXRESULT PASS @{F_OO} = /foo /bar /baz /biff /usr/bin/foo { /@{F_OO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_3.sd0000644000175000017500000000024011232012201023727 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = foo bar baz biff @{BAR} = *.jpg /usr/bin/foo { /home/@{FOO}/.foo/@{BAR} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_6.sd0000644000175000017500000000021211232012201023731 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { @{FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_7.sd0000644000175000017500000000021311232012201023733 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT FAIL @{FOO} = /foo /bar /baz /biff /usr/bin/foo { @{FOO}=/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_04.sd0000644000175000017500000000022512550066465023336 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword can begin with var #=EXRESULT PASS @{FOO}=bar baz profile @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_02.sd0000644000175000017500000000021312326635231022426 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus name modifier #=EXRESULT FAIL # /does/not/exist { dbus (bind) name=@{MISSING_VAR}, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_1.sd0000644000175000017500000000021411232012201023726 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = foo bar baz biff /usr/bin/foo { /home/@{FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_recursion_3.sd0000644000175000017500000000022611232012201022576 0ustar jjjj#=DESCRIPTION recursive set definitions -- three variables #=EXRESULT FAIL @{FOO}=@{BAR} @{BAR}=@{BAZ} @{BAZ}=@{FOO} /bin/foo { /home/@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_12.sd0000644000175000017500000000044612550066465023342 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword can expand var and have var attachment #=EXRESULT FAIL #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=bar baz @{BAR}=baz foo profile /does/not/exist@{BAR} @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_alternation_2.sd0000644000175000017500000000027411544325141023127 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar baz @{BAR}=@{FOO} blort /does/not/exist { /does/not/@{BAR}/blah/{exist,notexist} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_3.sd0000644000175000017500000000031011471450425021330 0ustar jjjj#=DESCRIPTION garbage should trigger an error #=EXRESULT FAIL @{LIBVIRT} = lib!virt libfail /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_bad_2.sd0000644000175000017500000000022112550066465024056 0ustar jjjj#=DESCRIPTION special @{profile_name} not defined for profile name declaration #=EXRESULT FAIL profile @{profile_name} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_12.sd0000644000175000017500000000021611232012201024012 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { "@{FOO}+=/.foo/*" r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_1.sd0000644000175000017500000000032012207721065021535 0ustar jjjj#=DESCRIPTION reference variables in dbus rules #=EXRESULT PASS @{FOO}=bar baz @{BAR}=@{FOO} blort /does/not/exist { dbus (send) bus=session path="/com/canonical/hud/applications/@{BAR}", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_assignment_reference_1.sd0000644000175000017500000000016712546462662025012 0ustar jjjj#=DESCRIPTION set variable assignment using set variable as rvalue #=EXRESULT PASS @{FOO}=bar baz @{BAR}=${FOO} blort apparmor-2.11.0/parser/tst/simple_tests/vars/vars_alternation_3.sd0000644000175000017500000000023312251707400023121 0ustar jjjj#=DESCRIPTION variable w/part of an alternation included #=EXRESULT PASS @{BAR}={bar,baz,blort /does/not/exist { /does/not/@{BAR},exist,notexist} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_11.sd0000644000175000017500000000021511232012201024010 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { "@{FOO}=/.foo/*" r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_4.sd0000644000175000017500000000022411544145302021331 0ustar jjjj#=DESCRIPTION don't accept variables with leading underscores #=EXRESULT FAIL @{_FOO} = /foo /bar /baz /biff /usr/bin/foo { /@{_FOO}/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_13.sd0000644000175000017500000000037212550066465023341 0ustar jjjj#=DESCRIPTION reference variables that are the profile name and attachment #=EXRESULT FAIL #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=bar @{BAR}=baz profile @{BAR} @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_file_evaluation_10.sd0000644000175000017500000000021511232012201024007 0ustar jjjj#=DESCRIPTION some simple expansions within file rules #=EXRESULT PASS @{FOO} = /foo /bar /baz /biff /usr/bin/foo { @{FOO}.+=/.foo/* r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_recursion_1.sd0000644000175000017500000000015011232012201022570 0ustar jjjj#=DESCRIPTION recursive assignment of set #=EXRESULT FAIL @{FOO}=@{FOO} /bin/foo { /home/@{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_07.sd0000644000175000017500000000032012326635231022432 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus peer name modifier #=EXRESULT FAIL # /does/not/exist { dbus (send) path="/com/canonical/hud/applications/BAR" peer=(name=@{MISSING_VAR}), } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_dbus_bad_01.sd0000644000175000017500000000030212326635231022424 0ustar jjjj# #=DESCRIPTION missing reference variable in dbus bus modifier #=EXRESULT FAIL # /does/not/exist { dbus (send) bus=@{MISSING_VAR} path="/com/canonical/hud/applications/BAR", } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_15.sd0000644000175000017500000000040312550066465023336 0ustar jjjj#=DESCRIPTION profiles declared with the profile keyword can begin with var #=EXRESULT FAIL #=TODO # This test needs check on @{FOO} attachment having leading / post var expansion @{FOO}=bar baz @{BAR}=baz foo profile @{BAR} @{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_1.sd0000644000175000017500000000031111471450425021327 0ustar jjjj#=DESCRIPTION trailing garbage should trigger an error #=EXRESULT FAIL @{LIBVIRT} = "libvirt /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_profile_name_06.sd0000644000175000017500000000024012550066465023335 0ustar jjjj#=DESCRIPTION reference variables in rules that also have alternations #=EXRESULT PASS @{FOO}=bar baz profile /does/not /exist@{FOO} { /does/not/exist r, } apparmor-2.11.0/parser/tst/simple_tests/vars/vars_bad_trailing_comma_2.sd0000644000175000017500000000032011471443154024376 0ustar jjjj#=DESCRIPTION trailing commas should trigger an error #=EXRESULT FAIL @{LIBVIRT} = libvirt libtriv, /does/not/exist { change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, } apparmor-2.11.0/parser/tst/simple_tests/generated_perms_safe/0000755000175000017500000000000013034613142022164 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/rlimits/0000755000175000017500000000000013034613166017513 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_11.sd0000644000175000017500000000014612266153613022340 0ustar jjjj# #=DESCRIPTION simple nproc rlimit test #=EXRESULT PASS profile rlimit { set rlimit nproc <= 1, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/bad_rlimit_outside_01.sd0000644000175000017500000000014512611240354024200 0ustar jjjj# #=DESCRIPTION simple cpu rlimit rule outside of a profile #=EXRESULT FAIL set rlimit cpu <= 1024, apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_15.sd0000644000175000017500000000016112266153613022341 0ustar jjjj# #=DESCRIPTION simple sigpending rlimit test #=EXRESULT PASS profile rlimit { set rlimit sigpending <= 42, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_07.sd0000644000175000017500000000015112266153613022341 0ustar jjjj# #=DESCRIPTION simple rss rlimit test #=EXRESULT PASS profile rlimit { set rlimit rss <= infinity, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/bad_rlimit_01.sd0000644000175000017500000000024512550067131022447 0ustar jjjj# #=DESCRIPTION realtime time rlimit test with ambiguous unit 'm' which could mean 'ms' or 'minutes' #=EXRESULT FAIL profile rlimit { set rlimit rttime <= 60m, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_13.sd0000644000175000017500000000017112550067131022333 0ustar jjjj# #=DESCRIPTION simple rttime rlimit allows default units #=EXRESULT PASS profile rlimit { set rlimit rttime <= 12, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_02.sd0000644000175000017500000000015112266153613022334 0ustar jjjj# #=DESCRIPTION simple cpu rlimit test #=EXRESULT PASS profile rlimit { set rlimit cpu <= infinity, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_17.sd0000644000175000017500000000015112266153613022342 0ustar jjjj# #=DESCRIPTION simple rtprio rlimit test #=EXRESULT PASS profile rlimit { set rlimit rtprio <= 10, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_01.sd0000644000175000017500000000017712550067131022336 0ustar jjjj# #=DESCRIPTION simple cpu rlimit test, cpu allows default units #=EXRESULT PASS profile rlimit { set rlimit cpu <= 1024, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_06.sd0000644000175000017500000000023312266153613022341 0ustar jjjj# #=DESCRIPTION simple core file size rlimit test #=EXRESULT PASS profile rlimit { set rlimit core <= 44444KB, # 4 chosen by completely fair die roll } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_08.sd0000644000175000017500000000020112266153613022336 0ustar jjjj# #=DESCRIPTION simple max open file (same as ofile) rlimit test #=EXRESULT PASS profile rlimit { set rlimit nofile <= 256, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_14.sd0000644000175000017500000000015712266153613022345 0ustar jjjj# #=DESCRIPTION simple msgqueue rlimit test #=EXRESULT PASS profile rlimit { set rlimit msgqueue <= 4444, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_10.sd0000644000175000017500000000017212266153613022336 0ustar jjjj# #=DESCRIPTION simple max virtual memory szie rlimit test #=EXRESULT PASS profile rlimit { set rlimit as <= 2047MB, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_18.sd0000644000175000017500000000016712270534667022361 0ustar jjjj# #=DESCRIPTION simple realtime time rlimit test #=EXRESULT PASS profile rlimit { set rlimit rttime <= 60minutes, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_05.sd0000644000175000017500000000016012266153613022337 0ustar jjjj# #=DESCRIPTION simple stack size rlimit test #=EXRESULT PASS profile rlimit { set rlimit stack <= 1024GB, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_09.sd0000644000175000017500000000020212266153613022340 0ustar jjjj# #=DESCRIPTION simple max open file (same as nofile) rlimit test #=EXRESULT PASS profile rlimit { set rlimit ofile <= 1234, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_16.sd0000644000175000017500000000014612266153613022345 0ustar jjjj# #=DESCRIPTION simple nice rlimit test #=EXRESULT PASS profile rlimit { set rlimit nice <= -10, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_03.sd0000644000175000017500000000015712266153613022343 0ustar jjjj# #=DESCRIPTION simple file size rlimit test #=EXRESULT PASS profile rlimit { set rlimit fsize <= 1023MB, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_04.sd0000644000175000017500000000016112266153613022337 0ustar jjjj# #=DESCRIPTION simple data segment rlimit test #=EXRESULT PASS profile rlimit { set rlimit data <= 4095KB, } apparmor-2.11.0/parser/tst/simple_tests/rlimits/ok_rlimit_12.sd0000644000175000017500000000015612266153613022342 0ustar jjjj# #=DESCRIPTION simple memlock rlimit test #=EXRESULT PASS profile rlimit { set rlimit memlock <= 10240, } apparmor-2.11.0/parser/tst/simple_tests/readme0000644000175000017500000000006111503744054017205 0ustar jjjjDirectory for auto generated x-transition tests apparmor-2.11.0/parser/tst/simple_tests/include_tests/0000755000175000017500000000000013034613146020673 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix_2/0000755000175000017500000000000013034613146024127 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix_2/good.dpkg-new.include0000644000175000017500000000004311232313353030127 0ustar jjjj# Valid include @{FOO} = /foo /bar apparmor-2.11.0/parser/tst/simple_tests/include_tests/ok_2.sd0000644000175000017500000000037711232143712022057 0ustar jjjj# #=DESCRIPTION includes testing - test some "odd" locations of includes #=EXRESULT PASS # /does/not/exist { /does/not/exist mr, #include /bin/true Px, #include #include } apparmor-2.11.0/parser/tst/simple_tests/include_tests/ok_3.sd0000644000175000017500000000026311232012201022036 0ustar jjjj# #=DESCRIPTION includes testing - basic include of a directory #=EXRESULT PASS # /does/not/exist { #include #include #include } apparmor-2.11.0/parser/tst/simple_tests/include_tests/bad_1.sd0000644000175000017500000000022511232012201022147 0ustar jjjj# #=DESCRIPTION includes testing - non-existent include should fail #=EXRESULT FAIL # /does/not/exist { #include } apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix_2.sd0000644000175000017500000000024711232316106024454 0ustar jjjj# #=DESCRIPTION includes testing - verify that only suffixes are ignored #=EXRESULT PASS # #include /does/not/exist { @{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix_1.sd0000644000175000017500000000025011232313353024446 0ustar jjjj# #=DESCRIPTION includes testing - verify that ignored suffixes are ignored #=EXRESULT PASS # #include /does/not/exist { @{FOO} r, } apparmor-2.11.0/parser/tst/simple_tests/include_tests/recursive.sd0000644000175000017500000000021711232145143023225 0ustar jjjj# #=DESCRIPTION includes testing - recursive include should fail #=EXRESULT FAIL # /does/not/exist { #include } apparmor-2.11.0/parser/tst/simple_tests/include_tests/bad_3.sd0000644000175000017500000000026011232012201022150 0ustar jjjj# #=DESCRIPTION includes testing - non-existent include should fail #=EXRESULT FAIL # /does/not/exist { #include #include } apparmor-2.11.0/parser/tst/simple_tests/include_tests/bad_4.sd0000644000175000017500000000026011232012201022151 0ustar jjjj# #=DESCRIPTION includes testing - non-existent include should fail #=EXRESULT FAIL # /does/not/exist { #include #include } apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/0000755000175000017500000000000013034613162023704 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/good-include0000644000175000017500000000004311232262342026173 0ustar jjjj# Valid include @{FOO} = /foo /bar apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include.dpkg-old0000644000175000017500000000002511232262342027471 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include.rpmnew0000644000175000017500000000002511232262342027300 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/.bad-include0000644000175000017500000000002511232262342026047 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include.dpkg-bak0000644000175000017500000000002511336603144027454 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include~0000644000175000017500000000002511232313353026166 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include.rpmsave0000644000175000017500000000002511232262342027445 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include.dpkg-dist0000644000175000017500000000002511232262342027656 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/ignored_suffix/bad-include.dpkg-new0000644000175000017500000000002511232262342027504 0ustar jjjjTHIS WILL NOT PARSE! apparmor-2.11.0/parser/tst/simple_tests/include_tests/includes_okay_helper.include0000644000175000017500000000013211232012201026403 0ustar jjjj# #=DESCRIPTION A helper for includes_okay.sd # #include /tmp/** r, apparmor-2.11.0/parser/tst/simple_tests/include_tests/bad_2.sd0000644000175000017500000000022211232012201022145 0ustar jjjj# #=DESCRIPTION includes testing - mis-parsing include should fail #=EXRESULT FAIL # /does/not/exist { #include does-not-exist/does-not-exist } apparmor-2.11.0/parser/tst/simple_tests/include_tests/ok_1.sd0000644000175000017500000000034111232143712022045 0ustar jjjj# #=DESCRIPTION includes testing - basic include of global and local include #=EXRESULT PASS # /does/not/exist { #include #include #include } apparmor-2.11.0/parser/tst/simple_tests/network/0000755000175000017500000000000013034613166017521 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/network/network_ok_2.sd0000644000175000017500000000072612661407367022472 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT PASS # /usr/bin/foo { network unspec, network inet, network ax25, network ipx, network appletalk, network netrom, network bridge, network atmpvc, network x25, network inet6, network rose, network netbeui, network security, network key, network packet, network ash, network econet, network atmsvc, network sna, network irda, network pppox, network wanpipe, network bluetooth, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_6.sd0000644000175000017500000000042511503736226023065 0ustar jjjj# #=DESCRIPTION netdomain tcp connect to ip/cidr netmask/port range via #=EXRESULT FAIL /tmp/tcp/tcp_client { tcp_connect to 10.0.0.17/16:50-100 via eth1, tcp_connect to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_4.sd0000644000175000017500000000051611503736226023064 0ustar jjjj# #=DESCRIPTION netdomain accept from port 65535 #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_accept to 10.0.0.17/16:1024-65535 from 127.0.0.1 via eth1, tcp_accept to 10.0.0.18/16:65535 from 127.0.0.1 via eth1, tcp_accept to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_bad_interface.sd0000644000175000017500000000042711503736226023472 0ustar jjjj# #=DESCRIPTION netdomain bad via interface parsing #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect to 10.0.0.17/16:50-100 from 127.0.0.1 via {}^/ eth1, tcp_connect to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error7.sd0000644000175000017500000000043511503736226023501 0ustar jjjj# #=DESCRIPTION netdomain tcp connect w/portnumber 65536 #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect from 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_connect to 127.0.0.1:65536, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error4.sd0000644000175000017500000000044111503736226023473 0ustar jjjj# #=DESCRIPTION netdomain tcp connect w/bad netmask #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect from 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_connect to 127.0.0.1/256.512.1024.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/network_ok_6.sd0000644000175000017500000000013212221410422022437 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT PASS # /usr/bin/foo { network netlink, } apparmor-2.11.0/parser/tst/simple_tests/network/network_ok_3.sd0000644000175000017500000000030711232012201022432 0ustar jjjj # #=DESCRIPTION basic network tests #=EXRESULT PASS # /usr/bin/foo { network inet stream, network inet dgram, network inet raw, network inet tcp, network inet udp, network inet icmp, } apparmor-2.11.0/parser/tst/simple_tests/network/network_bad_1.sd0000644000175000017500000000013711232012201022546 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT FAIL # /usr/bin/foo { network inet raw tcp, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_8.sd0000644000175000017500000000155311503736226023072 0ustar jjjj# #=DESCRIPTION netdomain tcp (accept,connect), udp (send,receive) conglomerate test #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect to 10.0.0.17/16:50-100 from 0.0.0.0:50-100 via eth1, tcp_connect to 127.0.0.1, tcp_connect from 12.13.14.15/31:21, tcp_accept from 12.13.15.128/25:1024-2048 via eth2, tcp_accept from 10.0.1.1/24:1024-2048 to 192.168.1.1:70 via eth2:1, tcp_accept to 192.168.2.1:70 from 10.0.2.1/24:1024-2048 via eth2:2, tcp_connect to 192.168.3.1:70 from 10.0.3.1/24:1024-2048 via eth2:3, tcp_connect from 10.0.4.1/24:1024-2048 to 192.168.4.1:70 via eth2:4, # syntactic suger cdub asked for: udp_send via eth0, udp_receive via eth1, # attempt an ip style netmask tcp_connect from 10.0.4.1/255.0.255.0:1024-2048 to 192.168.4.1:70 via eth2:4, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_2.sd0000644000175000017500000000043011503736226023055 0ustar jjjj# #=DESCRIPTION netdomain tcp accept from ip/cidr netmask/port range via #=EXRESULT FAIL /tmp/tcp/tcp_server { tcp_accept from 10.0.0.17/16:50-100 via eth1, tcp_accept from 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_5.sd0000644000175000017500000000040611503736226023063 0ustar jjjj# #=DESCRIPTION netdomain tcp connect simple parse test (to,via) #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect to 127.0.0.1, tcp_connect to 10.0.0.17 via eth1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error1.sd0000644000175000017500000000043511503736226023473 0ustar jjjj# #=DESCRIPTION netdomain tcp connect w/multiple to destinations #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect to 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_connect to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_9.sd0000644000175000017500000000052011503736226023064 0ustar jjjj# #=DESCRIPTION netdomain connect to port 65535 #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect to 10.0.0.17/16:1024-65535 from 127.0.0.1 via eth1, tcp_connect to 10.0.0.18/16:65535 from 127.0.0.1 via eth1, tcp_connect to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_3.sd0000644000175000017500000000041511503736226023061 0ustar jjjj# #=DESCRIPTION netdomain tcp accept from,to,via #=EXRESULT FAIL /tmp/tcp/tcp_server { tcp_accept from 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_accept from 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/network_bad_4.sd0000644000175000017500000000013011232012201022542 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT FAIL # /usr/bin/foo { network local, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error2.sd0000644000175000017500000000043611503736226023475 0ustar jjjj# #=DESCRIPTION netdomain tcp connect w/multiple from statments #=EXRESULT FAIL /tmp/tcp/tcp_client { tcp_connect from 10.0.0.17/16:50-100 from 127.0.0.1 via eth1, tcp_connect to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/network_ok_4.sd0000644000175000017500000000025111232012201022431 0ustar jjjj # #=DESCRIPTION basic network tests #=EXRESULT PASS # /usr/bin/foo { network stream, network dgram, network raw, network tcp, network udp, network icmp, } apparmor-2.11.0/parser/tst/simple_tests/network/bad_network_outside_1.sd0000644000175000017500000000011712611240354024316 0ustar jjjj# #=DESCRIPTION network rule outside of a profile #=EXRESULT FAIL # network, apparmor-2.11.0/parser/tst/simple_tests/network/network_bad_2.sd0000644000175000017500000000012611232012201022545 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT FAIL # /usr/bin/foo { network foo, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_7.sd0000644000175000017500000000041611503736226023066 0ustar jjjj# #=DESCRIPTION netdomain tcp connect to,from,via #=EXRESULT FAIL /tmp/tcp/tcp_client { tcp_connect to 10.0.0.17/16:50-100 from 127.0.0.1 via eth1, tcp_connect to 127.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/network_bad_3.sd0000644000175000017500000000013311232012201022544 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT FAIL # /usr/bin/foo { network inet foo, } apparmor-2.11.0/parser/tst/simple_tests/network/netdomain_bad_1.sd0000644000175000017500000000041111503736226023053 0ustar jjjj# #=DESCRIPTION netdomain tcp accept simple parse test (from,via) #=EXRESULT FAIL # /tmp/tcp/tcp_server { tcp_accept from 127.0.0.1, tcp_accept from 10.0.0.17 via eth1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/network_ok_5.sd0000644000175000017500000000012712221410422022442 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT PASS # /usr/bin/foo { network unix, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error3.sd0000644000175000017500000000042511503736226023474 0ustar jjjj# #=DESCRIPTION netdomain tcp_connect w/bad ip address #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect from 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_connect to 256.0.0.1, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error5.sd0000644000175000017500000000043411503736226023476 0ustar jjjj# #=DESCRIPTION netdomain tcp connect w/bad portnumber #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect from 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_connect to 127.0.0.1:100000, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/network/network_ok_1.sd0000644000175000017500000000012211232012201022423 0ustar jjjj# #=DESCRIPTION basic network tests #=EXRESULT PASS # /usr/bin/foo { network, } apparmor-2.11.0/parser/tst/simple_tests/network/network_ok_7.sd0000644000175000017500000000022512661407367022471 0ustar jjjj# #=DESCRIPTION basic unspec network tests #=EXRESULT PASS # /usr/bin/foo { network unspec stream, network unspec dgram, network unspec raw, } apparmor-2.11.0/parser/tst/simple_tests/network/tcp_client_error6.sd0000644000175000017500000000043211503736226023475 0ustar jjjj# #=DESCRIPTION netdomain tcp connect w/bad CIDR netmask #=EXRESULT FAIL # /tmp/tcp/tcp_client { tcp_connect from 10.0.0.17/16:50-100 to 127.0.0.1 via eth1, tcp_connect to 127.0.0.1/64, /lib/libc.so.6 r, /lib/ld-linux.so.2 r, /etc/ld.so.cache r, /lib/libc-2.1.3.so r, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/0000755000175000017500000000000013034613166017306 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_02.sd0000644000175000017500000000014612326011671020662 0ustar jjjj# #=Description basic ptrace bad peer rule #=EXRESULT FAIL # /usr/bin/foo { ptrace /bin/true , } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_09.sd0000644000175000017500000000016412326011671020554 0ustar jjjj# #=Description basic ptrace read and trace all rule #=EXRESULT PASS # /usr/bin/foo { ptrace (read, trace) , } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_11.sd0000644000175000017500000000030012326011671020535 0ustar jjjj# #=Description basic ptrace all perms rule #=EXRESULT PASS # /usr/bin/foo { ptrace (read, readby, trace, tracedby) , ptrace read, ptrace readby, ptrace trace, ptrace tracedby, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_15.sd0000644000175000017500000000015412326011671020550 0ustar jjjj# #=Description basic ptrace peer perms rule #=EXRESULT PASS # /usr/bin/foo { ptrace peer=/bin/true, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_19.sd0000644000175000017500000000050412326011671020553 0ustar jjjj# #=Description ptrace peer w/perms rule #=EXRESULT PASS # /usr/bin/foo { ptrace read peer=/bin/sh, ptrace write peer=/bin/true, ptrace trace peer=/bin/false, ptrace readby peer=/sbin/init, ptrace tracedby peer=/usr/bin/gdb, ptrace rw peer=/usr/bin/top, ptrace (readby, tracedby) peer=/usr/bin/valgrind, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_03.sd0000644000175000017500000000014212326011671020542 0ustar jjjj# #=Description basic allow ptrace all rule #=EXRESULT PASS # /usr/bin/foo { allow ptrace, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_10.sd0000644000175000017500000000017612326011671020547 0ustar jjjj# #=Description basic ptrace readby and tracedby all rule #=EXRESULT PASS # /usr/bin/foo { ptrace (readby, tracedby) , } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_06.sd0000644000175000017500000000013612326011671020550 0ustar jjjj# #=Description basic ptrace trace rule #=EXRESULT PASS # /usr/bin/foo { ptrace trace, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_04.sd0000644000175000017500000000022612326011671020663 0ustar jjjj# #=Description basic ptrace bad multi-peer perms rule #=EXRESULT FAIL # /usr/bin/foo { ptrace peer=/bin/true peer=/sbin/init peer=MY_PROFILE, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_03.sd0000644000175000017500000000017212326011671020662 0ustar jjjj# #=Description basic ptrace bad peer rule #=EXRESULT FAIL # /usr/bin/foo { ptrace read peer=/sbin/init /bin/bash, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_21.sd0000644000175000017500000000017412326011671020547 0ustar jjjj# #=Description ptrace regex peer rule #=EXRESULT PASS # /usr/bin/foo { deny ptrace read peer=/{**/,}bin/{sh,true}, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_01.sd0000644000175000017500000000012612326011671020542 0ustar jjjj# #=Description basic ptrace all rule #=EXRESULT PASS # /usr/bin/foo { ptrace, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_08.sd0000644000175000017500000000014712326011671020671 0ustar jjjj# #=Description ptrace w/non ptrace modifier #=EXRESULT FAIL # /usr/bin/foo { ptrace bus=session, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_09.sd0000644000175000017500000000012512326011671020666 0ustar jjjj# #=Description ptrace w/owner #=EXRESULT FAIL # /usr/bin/foo { owner ptrace r, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_06.sd0000644000175000017500000000017412326011671020667 0ustar jjjj# #=Description capability + ptrace merged rule #=EXRESULT FAIL # /usr/bin/foo { capability sys_ptrace peer=/dev/null, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_10.sd0000644000175000017500000000015312326011671020657 0ustar jjjj# #=Description ptrace w/bad regex expansion #=EXRESULT FAIL # /usr/bin/foo { ptrace peer={/bin/true, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_04.sd0000644000175000017500000000014212326011671020543 0ustar jjjj# #=Description basic audit ptrace all rule #=EXRESULT PASS # /usr/bin/foo { audit ptrace, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_05.sd0000644000175000017500000000015712326011671020667 0ustar jjjj# #=Description capability + ptrace merged rule #=EXRESULT FAIL # /usr/bin/foo { capability ptrace trace, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_18.sd0000644000175000017500000000023712326011671020555 0ustar jjjj# #=Description ptrace peer w/multiple var names rule #=EXRESULT PASS # @{SHELLS}=/bin/bash /bin/dash /bin/tcsh /usr/bin/foo { ptrace peer=@{SHELLS}, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_20.sd0000644000175000017500000000016712326011671020550 0ustar jjjj# #=Description ptrace regex peer rule #=EXRESULT PASS # /usr/bin/foo { ptrace read peer=/{**/,}bin/{sh,true}, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_14.sd0000644000175000017500000000017312326011671020550 0ustar jjjj# #=Description basic ptrace list perms rule #=EXRESULT PASS # /usr/bin/foo { ptrace (w read, r rw,,,, tracedby ) , } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_22.sd0000644000175000017500000000060412326011671020546 0ustar jjjj# #=Description ptrace peer w/perms and misc modifiers rule #=EXRESULT PASS # /usr/bin/foo { deny ptrace read peer=/bin/sh, allow ptrace write peer=/bin/true, audit ptrace trace peer=/bin/false, audit deny ptrace readby peer=/sbin/init, audit allow ptrace tracedby peer=/usr/bin/gdb, ptrace rw peer=/usr/bin/top, deny ptrace (readby, tracedby) peer=/usr/bin/valgrind, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_outside_01.sd0000644000175000017500000000012312611240354022407 0ustar jjjj# #=Description ptrace all rule outside of a profile #=EXRESULT FAIL # ptrace, apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_16.sd0000644000175000017500000000032512326011671020551 0ustar jjjj# #=Description basic ptrace peer perms rule #=EXRESULT PASS # @{SHELL}=/bin/bash /usr/bin/foo { ptrace peer=/bin/true, ptrace peer=/sbin/init, ptrace peer=@{SHELL}, ptrace peer=SOME_OTHER_PROFILE, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_01.sd0000644000175000017500000000017012326011671020656 0ustar jjjj# #=Description basic ptrace all perms rule #=EXRESULT FAIL # /usr/bin/foo { ptrace read readby trace tracedby , } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_08.sd0000644000175000017500000000015012326011671020546 0ustar jjjj# #=Description basic ptrace tracedby all rule #=EXRESULT PASS # /usr/bin/foo { ptrace tracedby, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_12.sd0000644000175000017500000000026712326011671020552 0ustar jjjj# #=Description basic ptrace all perms rule #=EXRESULT PASS # /usr/bin/foo { ptrace (read readby trace tracedby) , ptrace (read, readby) , ptrace trace, ptrace tracedby, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_13.sd0000644000175000017500000000033512326011671020547 0ustar jjjj# #=Description basic ptrace all perms rule #=EXRESULT PASS # /usr/bin/foo { ptrace (read readby trace write tracedby r w rw) , ptrace (w read, r rw, write) , ptrace r, ptrace rw, ptrace w, ptrace write, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_17.sd0000644000175000017500000000020012326011671020542 0ustar jjjj# #=Description ptrace peer w/implicit profile name rule #=EXRESULT PASS # /usr/bin/foo { ptrace peer=@{profile_name}, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_02.sd0000644000175000017500000000014012326011671020537 0ustar jjjj# #=Description basic deny ptrace all rule #=EXRESULT PASS # /usr/bin/foo { deny ptrace, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_07.sd0000644000175000017500000000014012326011671020544 0ustar jjjj# #=Description basic ptrace readby rule #=EXRESULT PASS # /usr/bin/foo { ptrace readby, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/ok_05.sd0000644000175000017500000000013412326011671020545 0ustar jjjj# #=Description basic ptrace read rule #=EXRESULT PASS # /usr/bin/foo { ptrace read, } apparmor-2.11.0/parser/tst/simple_tests/ptrace/bad_07.sd0000644000175000017500000000016712326011671020672 0ustar jjjj# #=Description peer not allowed perms list #=EXRESULT FAIL # /usr/bin/foo { ptrace (read readby peer=/dev/null), } apparmor-2.11.0/parser/tst/simple_tests/generated_perms_leading/0000755000175000017500000000000013034613142022651 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/mount/0000755000175000017500000000000013034613166017172 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_14.sd0000644000175000017500000000041412442575122021321 0ustar jjjj# #=Description basic rules to test the "mand" mount option #=EXRESULT PASS /usr/bin/foo { mount options=mand /a -> /1, mount options=(mand) /b -> /2, mount options=(rw,mand) /c -> /3, mount options in (mand) /d -> /4, mount options in (ro,mand) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_9.sd0000644000175000017500000000040612442575122021246 0ustar jjjj# #=Description basic rules to test the "dev" mount option #=EXRESULT PASS /usr/bin/foo { mount options=dev /a -> /1, mount options=(dev) /b -> /2, mount options=(rw,dev) /c -> /3, mount options in (dev) /d -> /4, mount options in (ro,dev) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_26.sd0000644000175000017500000000037212442575122021327 0ustar jjjj# #=Description basic rules to test the "M" mount option #=EXRESULT PASS /usr/bin/foo { mount options=M /a -> /1, mount options=(M) /b -> /2, mount options=(rw,M) /c -> /3, mount options in (M) /d -> /4, mount options in (ro,M) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_9.sd0000644000175000017500000000013211721700132020346 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount none -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_22.sd0000644000175000017500000000024712442575122021441 0ustar jjjj# #=Description basic rule to test the valid "make-rprivate" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-rprivate) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_49.sd0000644000175000017500000000045512442575122021336 0ustar jjjj# #=Description basic rules to test the "make-private" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-private -> /1, mount options=(make-private) -> /2, mount options=(rw,make-private) -> /3, mount options in (make-private) -> /4, mount options in (ro,make-private) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_4.sd0000644000175000017500000000020312442575122021351 0ustar jjjj# #=Description basic rule to test the invalid "rec" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(rec) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_44.sd0000644000175000017500000000044712442575122021332 0ustar jjjj# #=Description basic rules to test the "runbindable" mount option #=EXRESULT PASS /usr/bin/foo { mount options=runbindable -> /1, mount options=(runbindable) -> /2, mount options=(rw,runbindable) -> /3, mount options in (runbindable) -> /4, mount options in (ro,runbindable) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_23.sd0000644000175000017500000000042212442575122021320 0ustar jjjj# #=Description basic rules to test the "rbind" mount option #=EXRESULT PASS /usr/bin/foo { mount options=rbind /a -> /1, mount options=(rbind) /b -> /2, mount options=(rw,rbind) /c -> /3, mount options in (rbind) /d -> /4, mount options in (ro,rbind) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_13.sd0000644000175000017500000000024312442575122021435 0ustar jjjj# #=Description basic rule to test the valid "runbindable" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(runbindable) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_7.sd0000644000175000017500000000041412442575122021243 0ustar jjjj# #=Description basic rules to test the "suid" mount option #=EXRESULT PASS /usr/bin/foo { mount options=suid /a -> /1, mount options=(suid) /b -> /2, mount options=(rw,suid) /c -> /3, mount options in (suid) /d -> /4, mount options in (ro,suid) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_2.sd0000644000175000017500000000012211721700132020336 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_11.sd0000644000175000017500000000015411721700132020423 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount fstype=(procfs, sysfs) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_15.sd0000644000175000017500000000014211721700132020424 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options=(rw) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/in_1.sd0000644000175000017500000000014511734066164020355 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options in (rw) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_8.sd0000644000175000017500000000017311721700132020352 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # @{dev}=/one /two /three /four /usr/bin/foo { mount @{dev} -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_17.sd0000644000175000017500000000043612442575122021330 0ustar jjjj# #=Description basic rules to test the "noatime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=noatime /a -> /1, mount options=(noatime) /b -> /2, mount options=(rw,noatime) /c -> /3, mount options in (noatime) /d -> /4, mount options in (ro,noatime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_19.sd0000644000175000017500000000017211721700132020433 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options=(rw ro) fstype=(procfs) none -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_3.sd0000644000175000017500000000012111721700132020336 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount /**, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_53.sd0000644000175000017500000000046312442575122021330 0ustar jjjj# #=Description basic rules to test the "make-rprivate" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-rprivate -> /1, mount options=(make-rprivate) -> /2, mount options=(rw,make-rprivate) -> /3, mount options in (make-rprivate) -> /4, mount options in (ro,make-rprivate) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_25.sd0000644000175000017500000000041412442575122021323 0ustar jjjj# #=Description basic rules to test the "move" mount option #=EXRESULT PASS /usr/bin/foo { mount options=move /a -> /1, mount options=(move) /b -> /2, mount options=(rw,move) /c -> /3, mount options in (move) /d -> /4, mount options in (ro,move) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_11.sd0000644000175000017500000000022712442575122021435 0ustar jjjj# #=Description basic rule to test the valid "slave" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(slave) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_7.sd0000644000175000017500000000021712442575122021361 0ustar jjjj# #=Description basic rule to test the invalid "nodirsync" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(nodirsync) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_19.sd0000644000175000017500000000046012442575122021327 0ustar jjjj# #=Description basic rules to test the "nodiratime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=nodiratime /a -> /1, mount options=(nodiratime) /b -> /2, mount options=(rw,nodiratime) /c -> /3, mount options in (nodiratime) /d -> /4, mount options in (ro,nodiratime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_11.sd0000644000175000017500000000041412442575122021316 0ustar jjjj# #=Description basic rules to test the "exec" mount option #=EXRESULT PASS /usr/bin/foo { mount options=exec /a -> /1, mount options=(exec) /b -> /2, mount options=(rw,exec) /c -> /3, mount options in (exec) /d -> /4, mount options in (ro,exec) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/in_3.sd0000644000175000017500000000015011734066164020353 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options in (rw ro) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_6.sd0000644000175000017500000000022112442575122021353 0ustar jjjj# #=Description basic rule to test the invalid "norelative" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(norelative) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/okay_6.sd0000644000175000017500000000013611721700132020701 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount /dev/bar -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_13.sd0000644000175000017500000000042212442575122021317 0ustar jjjj# #=Description basic rules to test the "async" mount option #=EXRESULT PASS /usr/bin/foo { mount options=async /a -> /1, mount options=(async) /b -> /2, mount options=(rw,async) /c -> /3, mount options in (async) /d -> /4, mount options in (ro,async) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_10.sd0000644000175000017500000000014511721700132020422 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount fstype=(procfs) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_5.sd0000644000175000017500000000015411721700132020346 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # @{mntpnt}=/foo/bar /usr/bin/foo { mount @{mntpnt}, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_33.sd0000644000175000017500000000046012442575122021323 0ustar jjjj# #=Description basic rules to test the "norelatime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=norelatime /a -> /1, mount options=(norelatime) /b -> /2, mount options=(rw,norelatime) /c -> /3, mount options in (norelatime) /d -> /4, mount options in (ro,norelatime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_36.sd0000644000175000017500000000046612442575122021334 0ustar jjjj# #=Description basic rules to test the "strictatime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=strictatime /a -> /1, mount options=(strictatime) /b -> /2, mount options=(rw,strictatime) /c -> /3, mount options in (strictatime) /d -> /4, mount options in (ro,strictatime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_18.sd0000644000175000017500000000042212442575122021324 0ustar jjjj# #=Description basic rules to test the "atime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=atime /a -> /1, mount options=(atime) /b -> /2, mount options=(rw,atime) /c -> /3, mount options in (atime) /d -> /4, mount options in (ro,atime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_2.sd0000644000175000017500000000021312442575122021350 0ustar jjjj# #=Description basic rule to test the invalid "suidXXX" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(suidXXX) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_21.sd0000644000175000017500000000013211721700132020420 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount /bar -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_50.sd0000644000175000017500000000044112442575122021321 0ustar jjjj# #=Description basic rules to test the "make-slave" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-slave -> /1, mount options=(make-slave) -> /2, mount options=(rw,make-slave) -> /3, mount options in (make-slave) -> /4, mount options in (ro,make-slave) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_outside_1.sd0000644000175000017500000000011412611240354022213 0ustar jjjj# #=Description mount rule outside of a profile #=EXRESULT FAIL # mount, apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_39.sd0000644000175000017500000000041712442575122021333 0ustar jjjj# #=Description basic rules to test the "remount" mount option #=EXRESULT PASS /usr/bin/foo { mount options=remount -> /1, mount options=(remount) -> /2, mount options=(rw,remount) -> /3, mount options in (remount) -> /4, mount options in (ro,remount) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_48.sd0000644000175000017500000000047712442575122021341 0ustar jjjj# #=Description basic rules to test the "make-unbindable" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-unbindable -> /1, mount options=(make-unbindable) -> /2, mount options=(rw,make-unbindable) -> /3, mount options in (make-unbindable) -> /4, mount options in (ro,make-unbindable) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_16.sd0000644000175000017500000000043612442575122021327 0ustar jjjj# #=Description basic rules to test the "dirsync" mount option #=EXRESULT PASS /usr/bin/foo { mount options=dirsync /a -> /1, mount options=(dirsync) /b -> /2, mount options=(rw,dirsync) /c -> /3, mount options in (dirsync) /d -> /4, mount options in (ro,dirsync) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_41.sd0000644000175000017500000000041712442575122021324 0ustar jjjj# #=Description basic rules to test the "private" mount option #=EXRESULT PASS /usr/bin/foo { mount options=private -> /1, mount options=(private) -> /2, mount options=(rw,private) -> /3, mount options in (private) -> /4, mount options in (ro,private) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_35.sd0000644000175000017500000000046012442575122021325 0ustar jjjj# #=Description basic rules to test the "noiversion" mount option #=EXRESULT PASS /usr/bin/foo { mount options=noiversion /a -> /1, mount options=(noiversion) /b -> /2, mount options=(rw,noiversion) /c -> /3, mount options in (noiversion) /d -> /4, mount options in (ro,noiversion) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_51.sd0000644000175000017500000000044712442575122021330 0ustar jjjj# #=Description basic rules to test the "make-shared" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-shared -> /1, mount options=(make-shared) -> /2, mount options=(rw,make-shared) -> /3, mount options in (make-shared) -> /4, mount options in (ro,make-shared) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_23.sd0000644000175000017500000000012311721700132020422 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { umount /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_4.sd0000644000175000017500000000027112442575122021241 0ustar jjjj# #=Description basic rules to test the "rw" mount option #=EXRESULT PASS /usr/bin/foo { mount options=rw /a -> /1, mount options=(rw) /b -> /2, mount options in (rw) /d -> /4, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_9.sd0000644000175000017500000000024112442575122021360 0ustar jjjj# #=Description basic rule to test the valid "unbindable" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(unbindable) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_18.sd0000644000175000017500000000024512442575122021444 0ustar jjjj# #=Description basic rule to test the valid "make-private" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-private) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_43.sd0000644000175000017500000000041112442575122021320 0ustar jjjj# #=Description basic rules to test the "shared" mount option #=EXRESULT PASS /usr/bin/foo { mount options=shared -> /1, mount options=(shared) -> /2, mount options=(rw,shared) -> /3, mount options in (shared) -> /4, mount options in (ro,shared) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_16.sd0000644000175000017500000000023312442575122021437 0ustar jjjj# #=Description basic rule to test the valid "rshared" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(rshared) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_20.sd0000644000175000017500000000024312442575122021433 0ustar jjjj# #=Description basic rule to test the valid "make-shared" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-shared) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_4.sd0000644000175000017500000000013011721700132020337 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount /{foo,bar}, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_29.sd0000644000175000017500000000041412442575122021327 0ustar jjjj# #=Description basic rules to test the "loud" mount option #=EXRESULT PASS /usr/bin/foo { mount options=loud /a -> /1, mount options=(loud) /b -> /2, mount options=(rw,loud) /c -> /3, mount options in (loud) /d -> /4, mount options in (ro,loud) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_14.sd0000644000175000017500000000023512442575122021437 0ustar jjjj# #=Description basic rule to test the valid "rprivate" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(rprivate) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_27.sd0000644000175000017500000000043612442575122021331 0ustar jjjj# #=Description basic rules to test the "verbose" mount option #=EXRESULT PASS /usr/bin/foo { mount options=verbose /a -> /1, mount options=(verbose) /b -> /2, mount options=(rw,verbose) /c -> /3, mount options in (verbose) /d -> /4, mount options in (ro,verbose) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_5.sd0000644000175000017500000000021512442575122021355 0ustar jjjj# #=Description basic rule to test the invalid "relative" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(relative) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_55.sd0000644000175000017500000000045512442575122021333 0ustar jjjj# #=Description basic rules to test the "make-rshared" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-rshared -> /1, mount options=(make-rshared) -> /2, mount options=(rw,make-rshared) -> /3, mount options in (make-rshared) -> /4, mount options in (ro,make-rshared) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_31.sd0000644000175000017500000000042212442575122021317 0ustar jjjj# #=Description basic rules to test the "noacl" mount option #=EXRESULT PASS /usr/bin/foo { mount options=noacl /a -> /1, mount options=(noacl) /b -> /2, mount options=(rw,noacl) /c -> /3, mount options in (noacl) /d -> /4, mount options in (ro,noacl) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_10.sd0000644000175000017500000000023312442575122021431 0ustar jjjj# #=Description basic rule to test the valid "private" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(private) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_46.sd0000644000175000017500000000041112442575122021323 0ustar jjjj# #=Description basic rules to test the "rslave" mount option #=EXRESULT PASS /usr/bin/foo { mount options=rslave -> /1, mount options=(rslave) -> /2, mount options=(rw,rslave) -> /3, mount options in (rslave) -> /4, mount options in (ro,rslave) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_22.sd0000644000175000017500000000037212442575122021323 0ustar jjjj# #=Description basic rules to test the "B" mount option #=EXRESULT PASS /usr/bin/foo { mount options=B /a -> /1, mount options=(B) /b -> /2, mount options=(rw,B) /c -> /3, mount options in (B) /d -> /4, mount options in (ro,B) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_37.sd0000644000175000017500000000043012442575122021324 0ustar jjjj# #=Description basic rules to test the "nouser" mount option #=EXRESULT PASS /usr/bin/foo { mount options=nouser /a -> /1, mount options=(nouser) /b -> /2, mount options=(rw,nouser) /c -> /3, mount options in (nouser) /d -> /4, mount options in (ro,nouser) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_45.sd0000644000175000017500000000042512442575122021327 0ustar jjjj# #=Description basic rules to test the "rprivate" mount option #=EXRESULT PASS /usr/bin/foo { mount options=rprivate -> /1, mount options=(rprivate) -> /2, mount options=(rw,rprivate) -> /3, mount options in (rprivate) -> /4, mount options in (ro,rprivate) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_21.sd0000644000175000017500000000041412442575122021317 0ustar jjjj# #=Description basic rules to test the "bind" mount option #=EXRESULT PASS /usr/bin/foo { mount options=bind /a -> /1, mount options=(bind) /b -> /2, mount options=(rw,bind) /c -> /3, mount options in (bind) /d -> /4, mount options in (ro,bind) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_23.sd0000644000175000017500000000024312442575122021436 0ustar jjjj# #=Description basic rule to test the valid "make-rslave" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-rslave) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_8.sd0000644000175000017500000000023312442575122021360 0ustar jjjj# #=Description basic rule to test the valid "remount" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(remount) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_15.sd0000644000175000017500000000023112442575122021434 0ustar jjjj# #=Description basic rule to test the valid "rslave" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(rslave) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/in_2.sd0000644000175000017500000000015111734066164020353 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options in (rw, ro) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_34.sd0000644000175000017500000000044412442575122021326 0ustar jjjj# #=Description basic rules to test the "iversion" mount option #=EXRESULT PASS /usr/bin/foo { mount options=iversion /a -> /1, mount options=(iversion) /b -> /2, mount options=(rw,iversion) /c -> /3, mount options in (iversion) /d -> /4, mount options in (ro,iversion) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/okay_13.sd0000644000175000017500000000015311721700132020756 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount fstype=(procfs sysfs) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_12.sd0000644000175000017500000000041412442575122021317 0ustar jjjj# #=Description basic rules to test the "sync" mount option #=EXRESULT PASS /usr/bin/foo { mount options=sync /a -> /1, mount options=(sync) /b -> /2, mount options=(rw,sync) /c -> /3, mount options in (sync) /d -> /4, mount options in (ro,sync) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_40.sd0000644000175000017500000000044112442575122021320 0ustar jjjj# #=Description basic rules to test the "unbindable" mount option #=EXRESULT PASS /usr/bin/foo { mount options=unbindable -> /1, mount options=(unbindable) -> /2, mount options=(rw,unbindable) -> /3, mount options in (unbindable) -> /4, mount options in (ro,unbindable) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_47.sd0000644000175000017500000000041712442575122021332 0ustar jjjj# #=Description basic rules to test the "rshared" mount option #=EXRESULT PASS /usr/bin/foo { mount options=rshared -> /1, mount options=(rshared) -> /2, mount options=(rw,rshared) -> /3, mount options in (rshared) -> /4, mount options in (ro,rshared) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/in_4.sd0000644000175000017500000000016611734066164020363 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options in (rw ro) fstype=procfs -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_18.sd0000644000175000017500000000016311721700132020432 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options=(rw ro) fstype=procfs -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_20.sd0000644000175000017500000000015111721700132020420 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options=(bind) /bar -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_1.sd0000644000175000017500000000020312442575122021346 0ustar jjjj# #=Description basic rule to test the invalid "XXX" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(XXX) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_20.sd0000644000175000017500000000044412442575122021321 0ustar jjjj# #=Description basic rules to test the "diratime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=diratime /a -> /1, mount options=(diratime) /b -> /2, mount options=(rw,diratime) /c -> /3, mount options in (diratime) /d -> /4, mount options in (ro,diratime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_10.sd0000644000175000017500000000043012442575122021313 0ustar jjjj# #=Description basic rules to test the "noexec" mount option #=EXRESULT PASS /usr/bin/foo { mount options=noexec /a -> /1, mount options=(noexec) /b -> /2, mount options=(rw,noexec) /c -> /3, mount options in (noexec) /d -> /4, mount options in (ro,noexec) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_24.sd0000644000175000017500000000037212442575122021325 0ustar jjjj# #=Description basic rules to test the "R" mount option #=EXRESULT PASS /usr/bin/foo { mount options=R /a -> /1, mount options=(R) /b -> /2, mount options=(rw,R) /c -> /3, mount options in (R) /d -> /4, mount options in (ro,R) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_52.sd0000644000175000017500000000050512442575122021324 0ustar jjjj# #=Description basic rules to test the "make-runbindable" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-runbindable -> /1, mount options=(make-runbindable) -> /2, mount options=(rw,make-runbindable) -> /3, mount options in (make-runbindable) -> /4, mount options in (ro,make-runbindable) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_14.sd0000644000175000017500000000016011721700132020423 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount fstype=(procfs sysfs) none -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_28.sd0000644000175000017500000000043012442575122021324 0ustar jjjj# #=Description basic rules to test the "silent" mount option #=EXRESULT PASS /usr/bin/foo { mount options=silent /a -> /1, mount options=(silent) /b -> /2, mount options=(rw,silent) /c -> /3, mount options in (silent) /d -> /4, mount options in (ro,silent) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_22.sd0000644000175000017500000000012411721700132020422 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { remount /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_6.sd0000644000175000017500000000043012442575122021240 0ustar jjjj# #=Description basic rules to test the "nosuid" mount option #=EXRESULT PASS /usr/bin/foo { mount options=nosuid /a -> /1, mount options=(nosuid) /b -> /2, mount options=(rw,nosuid) /c -> /3, mount options in (nosuid) /d -> /4, mount options in (ro,nosuid) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_16.sd0000644000175000017500000000014611721700132020431 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options=(rw, ro) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_54.sd0000644000175000017500000000044712442575122021333 0ustar jjjj# #=Description basic rules to test the "make-rslave" mount option #=EXRESULT PASS /usr/bin/foo { mount options=make-rslave -> /1, mount options=(make-rslave) -> /2, mount options=(rw,make-rslave) -> /3, mount options in (make-rslave) -> /4, mount options in (ro,make-rslave) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_24.sd0000644000175000017500000000024512442575122021441 0ustar jjjj# #=Description basic rule to test the valid "make-rshared" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-rshared) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_8.sd0000644000175000017500000000042212442575122021243 0ustar jjjj# #=Description basic rules to test the "nodev" mount option #=EXRESULT PASS /usr/bin/foo { mount options=nodev /a -> /1, mount options=(nodev) /b -> /2, mount options=(rw,nodev) /c -> /3, mount options in (nodev) /d -> /4, mount options in (ro,nodev) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_42.sd0000644000175000017500000000040312442575122021320 0ustar jjjj# #=Description basic rules to test the "slave" mount option #=EXRESULT PASS /usr/bin/foo { mount options=slave -> /1, mount options=(slave) -> /2, mount options=(rw,slave) -> /3, mount options in (slave) -> /4, mount options in (ro,slave) -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_30.sd0000644000175000017500000000040612442575122021320 0ustar jjjj# #=Description basic rules to test the "acl" mount option #=EXRESULT PASS /usr/bin/foo { mount options=acl /a -> /1, mount options=(acl) /b -> /2, mount options=(rw,acl) /c -> /3, mount options in (acl) /d -> /4, mount options in (ro,acl) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_19.sd0000644000175000017500000000024112442575122021441 0ustar jjjj# #=Description basic rule to test the valid "make-slave" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-slave) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_5.sd0000644000175000017500000000026512442575122021245 0ustar jjjj# #=Description basic rules to test the "w" mount option #=EXRESULT PASS /usr/bin/foo { mount options=w /a -> /1, mount options=(w) /b -> /2, mount options in (w) /d -> /4, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_12.sd0000644000175000017500000000015311721700132020423 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount fstype={procfs,sysfs} -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_12.sd0000644000175000017500000000023112442575122021431 0ustar jjjj# #=Description basic rule to test the valid "shared" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(shared) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_3.sd0000644000175000017500000000020512442575122021352 0ustar jjjj# #=Description basic rule to test the invalid "load" mount option #=EXRESULT FAIL /usr/bin/foo { mount options=(load) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_3.sd0000644000175000017500000000032512442575122021240 0ustar jjjj# #=Description basic rules to test the "read-only" mount option #=EXRESULT PASS /usr/bin/foo { mount options=read-only /a -> /1, mount options=(read-only) /b -> /2, mount options in (read-only) /d -> /4, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_1.sd0000644000175000017500000000027112442575122021236 0ustar jjjj# #=Description basic rules to test the "ro" mount option #=EXRESULT PASS /usr/bin/foo { mount options=ro /a -> /1, mount options=(ro) /b -> /2, mount options in (ro) /d -> /4, } apparmor-2.11.0/parser/tst/simple_tests/mount/okay_7.sd0000644000175000017500000000013511721700132020701 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount /dev/** -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_21.sd0000644000175000017500000000025512442575122021437 0ustar jjjj# #=Description basic rule to test the valid "make-runbindable" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-runbindable) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/bad_opt_17.sd0000644000175000017500000000025312442575122021442 0ustar jjjj# #=Description basic rule to test the valid "make-unbindable" mount opt and an invalid src #=EXRESULT FAIL /usr/bin/foo { mount options=(make-unbindable) /a -> /1, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_2.sd0000644000175000017500000000026512442575122021242 0ustar jjjj# #=Description basic rules to test the "r" mount option #=EXRESULT PASS /usr/bin/foo { mount options=r /a -> /1, mount options=(r) /b -> /2, mount options in (r) /d -> /4, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_1.sd0000644000175000017500000000011511721700132020337 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_15.sd0000644000175000017500000000043012442575122021320 0ustar jjjj# #=Description basic rules to test the "nomand" mount option #=EXRESULT PASS /usr/bin/foo { mount options=nomand /a -> /1, mount options=(nomand) /b -> /2, mount options=(rw,nomand) /c -> /3, mount options in (nomand) /d -> /4, mount options in (ro,nomand) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_17.sd0000644000175000017500000000014511721700132020431 0ustar jjjj# #=Description basic mount rule #=EXRESULT PASS # /usr/bin/foo { mount options=(rw ro) -> /foo, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_32.sd0000644000175000017500000000044412442575122021324 0ustar jjjj# #=Description basic rules to test the "relatime" mount option #=EXRESULT PASS /usr/bin/foo { mount options=relatime /a -> /1, mount options=(relatime) /b -> /2, mount options=(rw,relatime) /c -> /3, mount options in (relatime) /d -> /4, mount options in (ro,relatime) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/mount/ok_opt_38.sd0000644000175000017500000000041412442575122021327 0ustar jjjj# #=Description basic rules to test the "user" mount option #=EXRESULT PASS /usr/bin/foo { mount options=user /a -> /1, mount options=(user) /b -> /2, mount options=(rw,user) /c -> /3, mount options in (user) /d -> /4, mount options in (ro,user) /e -> /5, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/0000755000175000017500000000000013034613162020105 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/change_hat/new_style2.sd0000644000175000017500000000151611503736226022541 0ustar jjjj# #=DESCRIPTION Tests to verify multiple profiles can have the same hatname #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /HAT1 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /HAT2 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /HAT3 { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } /does/not/exist1 { #include # hat 1 ^/HAT1 { /var/log/HAT1 rwl, } # hat 2 ^/HAT2 { /var/log/HAT2 rwl, } } /does/not/exist2 { #include # hat 1 ^/HAT1 { /var/log/HAT1 rwl, } # hat 2 ^/HAT2 { /var/log/HAT2 rwl, } } /does/not/exist3 { #include # hat 1 ^/HAT1 { /var/log/HAT1 rwl, } # hat 2 ^/HAT3 { /var/log/HAT2 rwl, } } apparmor-2.11.0/parser/tst/simple_tests/change_hat/new_style3.sd0000644000175000017500000000064311503736226022542 0ustar jjjj# #=DESCRIPTION Simple test of new-style hats with spaces #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include # hat 1 ^HAT1 { /var/log/HAT1 rwl, } # hat 2 ^HAT2 { /var/log/HAT2 rwl, } # hat 3 ^HAT3 { /var/log/HAT3 rwl, } /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/old_style3.sd0000644000175000017500000000061611503736226022527 0ustar jjjj# #=DESCRIPTION Simple test of old-style hats #=EXRESULT FAIL #=DISABLED # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # hat /does/not/exist^HAT { /var/log/HAT rwl, } # hat 0 /does/not/exist^HAT0 { /var/log/HAT0 rwl, } # hat 1 /does/not/exist^HAT1 { /var/log/HAT1 rwl, } /does/not/exist { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/new_style4.sd0000644000175000017500000000064611503736226022546 0ustar jjjj# #=DESCRIPTION Simple test of new-style hats #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } # hat 1 hat /does/not/exist//HAT1 { /var/log/HAT1 rwl, } # hat 2 hat /does/not/exist//HAT2 { /var/log/HAT2 rwl, } # hat 3 hat /does/not/exist//HAT3 { /var/log/HAT3 rwl, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/old_style1.sd0000644000175000017500000000062111503736226022521 0ustar jjjj# #=DESCRIPTION Simple test of old-style hats #=EXRESULT FAIL #=DISABLED # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } # hat 1 /does/not/exist^HAT1 { /var/log/HAT1 rwl, } # hat 2 /does/not/exist^HAT2 { /var/log/HAT2 rwl, } # hat 3 /does/not/exist^HAT3 { /var/log/HAT3 rwl, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/old_style2.sd0000644000175000017500000000077311503736226022532 0ustar jjjj# #=DESCRIPTION Simple test of old-style hats #=EXRESULT FAIL #=DISABLED # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # hat /does/not/exist^HAT { /var/log/HAT rwl, } # hat 0 /does/not/exist^HAT0 { /var/log/HAT0 rwl, } /does/not/exist { #include /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } # hat 1 /does/not/exist^HAT1 { /var/log/HAT1 rwl, } # hat 2 /does/not/exist^HAT2 { /var/log/HAT2 rwl, } # hat 3 /does/not/exist^HAT3 { /var/log/HAT3 rwl, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/new_style1.sd0000644000175000017500000000055511503736226022542 0ustar jjjj# #=DESCRIPTION Simple test of new-style hats #=EXRESULT PASS # vim:syntax=subdomain # Last Modified: Sun Apr 17 19:44:44 2005 # /does/not/exist { #include # hat 1 ^HAT1 { /var/log/HAT1 rwl, } # hat 2 ^HAT2 { /var/log/HAT2 rwl, } # hat 3 ^HAT3 { /var/log/HAT3 rwl, } /usr/X11R6/lib/lib*so* r, /usr/bin/emacs r, } apparmor-2.11.0/parser/tst/simple_tests/change_hat/bad_parsing.sd0000644000175000017500000000023011232012201022662 0ustar jjjj# #=DESCRIPTION A simple syntax error -- missing hatname + bad parsing #=EXRESULT FAIL # /usr/bin/foo^!!!!!!!!!^BLAH { /blah rw, } /usr/bin/foo { } apparmor-2.11.0/parser/tst/simple_tests/signal/0000755000175000017500000000000013034613166017305 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/signal/bad_12.sd0000644000175000017500000000015512326635016020667 0ustar jjjj# #=Description basic bad signal 'lost' #=EXRESULT FAIL # /usr/bin/signal-test { signal send set=lost, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_14.sd0000644000175000017500000000016012326635016020665 0ustar jjjj# #=DESCRIPTION simple bad rtmin value test #=EXRESULT FAIL # /usr/bin/signal-test { signal set=rtmin+-99, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_02.sd0000644000175000017500000000022112326635016020660 0ustar jjjj# #=Description basic signal no parens for signals #=EXRESULT FAIL # /usr/bin/signal-test { signal (read write send receive) set=stop stp, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_17.sd0000644000175000017500000000014212326635016020670 0ustar jjjj# #=DESCRIPTION simple bare set keyword #=EXRESULT FAIL # /usr/bin/signal-test { signal set, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_09.sd0000644000175000017500000000073512326635016020564 0ustar jjjj# #=Description basic signal mixed send/receive w/modifiers rules #=EXRESULT PASS # /usr/bin/signal-test { deny signal (r), audit signal (rw), } /usr/bin/signal-test2 { allow signal (r, w), audit signal (read, write), } /usr/bin/signal-test3 { audit deny signal (send, receive), } /usr/bin/signal-test4 { audit allow signal (r send, receive, write, rw, send), deny signal r, } /usr/bin/signal-test5 { deny signal (r send,,,, receive,write,rw, send), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_11.sd0000644000175000017500000000216712326635016020556 0ustar jjjj# #=Description basic signal w/specific signals rule #=EXRESULT PASS # /usr/bin/signal-test1 { signal r set=(hup), signal rw set=(int), signal receive set=(quit), signal read set=(ill), signal write set=(trap), signal send set=(abrt), allow signal set=(bus), audit allow signal set=(fpe), deny signal set=(kill), audit deny signal set=(usr1), allow signal (send, receive) set=(segv), audit allow signal (r, write) set=(usr2), deny signal (send) set=(pipe), signal w set=(alrm), audit signal set=(term), audit signal (receive) set=(stkflt), audit deny signal (send, receive) set=(chld), signal read set=(cont), signal write set=(stop), signal rw set=(stp), signal send set=(ttin), signal receive set=(ttou), signal (send receive) set=(urg), signal (read write) set=(xcpu), deny signal (send) set=(xfsz), deny signal (send receive) set=(vtalrm), audit signal (send) set=(prof), audit signal (receive) set=(winch), audit signal (send receive) set=(io), allow signal set=(pwr), allow signal (r) set=(sys), allow signal (w, write send) set=(emt), allow signal (r w) set=(exists), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_15.sd0000644000175000017500000000020612326635016020552 0ustar jjjj# #=Description basic signal w/implicit profile name rule #=EXRESULT PASS # /usr/bin/signal-test { signal peer=@{profile_name}, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_19.sd0000644000175000017500000000066612326635016020570 0ustar jjjj# #=Description basic signal w/multiple signal set rule #=EXRESULT PASS # /usr/bin/signal-test1 { signal set=hup set=int set=quit set=ill set=trap set=abrt set=bus set=fpe set=kill set=usr1 set=segv set=usr2 set=pipe set=alrm set=term set=stkflt set=chld set=cont set=stop set=stp set=ttin set=ttou set=urg set=xcpu set=xfsz set=vtalrm set=prof set=winch set=io set=pwr set=sys set=emt set=exists, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_19.sd0000644000175000017500000000015612326635016020677 0ustar jjjj# #=DESCRIPTION simple signal w/bad option #=EXRESULT FAIL # /usr/bin/signal-test { signal options=(ro), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_03.sd0000644000175000017500000000015112326635016020546 0ustar jjjj# #=Description basic allow signal all rule #=EXRESULT PASS # /usr/bin/signal-test { allow signal, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_16.sd0000644000175000017500000000016012326635016020667 0ustar jjjj# #=DESCRIPTION simple bad 'in' keyword #=EXRESULT FAIL # /usr/bin/signal-test { signal set in (hup stop), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_10.sd0000644000175000017500000000321112326635016020544 0ustar jjjj# #=Description basic signal w/specific signals rule #=EXRESULT PASS # /usr/bin/signal-test1 { signal set=(hup), } /usr/bin/signal-test2 { signal set=(int), } /usr/bin/signal-test3 { signal set=(quit), } /usr/bin/signal-test4 { signal set=(ill), } /usr/bin/signal-test5 { signal set=(trap), } /usr/bin/signal-test6 { signal set=(abrt), } /usr/bin/signal-test7 { signal set=(bus), } /usr/bin/signal-test8 { signal set=(fpe), } /usr/bin/signal-test9 { signal set=(kill), } /usr/bin/signal-test10 { signal set=(usr1), } /usr/bin/signal-test11 { signal set=(segv), } /usr/bin/signal-test12 { signal set=(usr2), } /usr/bin/signal-test13 { signal set=(pipe), } /usr/bin/signal-test14 { signal set=(alrm), } /usr/bin/signal-test15 { signal set=(term), } /usr/bin/signal-test16 { signal set=(stkflt), } /usr/bin/signal-test17 { signal set=(chld), } /usr/bin/signal-test18 { signal set=(cont), } /usr/bin/signal-test19 { signal set=(stop), } /usr/bin/signal-test20 { signal set=(stp), } /usr/bin/signal-test21 { signal set=(ttin), } /usr/bin/signal-test22 { signal set=(ttou), } /usr/bin/signal-test23 { signal set=(urg), } /usr/bin/signal-test24 { signal set=(xcpu), } /usr/bin/signal-test25 { signal set=(xfsz), } /usr/bin/signal-test26 { signal set=(vtalrm), } /usr/bin/signal-test27 { signal set=(prof), } /usr/bin/signal-test28 { signal set=(winch), } /usr/bin/signal-test29 { signal set=(io), } /usr/bin/signal-test30 { signal set=(pwr), } /usr/bin/signal-test31 { signal set=(sys), } /usr/bin/signal-test32 { signal set=(emt), } /usr/bin/signal-test33 { signal set=(exists), } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_21.sd0000644000175000017500000000016312326635016020666 0ustar jjjj# #=Description signal w/bad regex expansion #=EXRESULT FAIL # /usr/bin/signal-test { signal peer={/bin/true, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_06.sd0000644000175000017500000000027512326635016020560 0ustar jjjj# #=Description basic signal write/send rules #=EXRESULT PASS # /usr/bin/signal-test { signal w, } /usr/bin/signal-test2 { signal write, } /usr/bin/signal-test3 { signal send, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_04.sd0000644000175000017500000000023712326635016020671 0ustar jjjj# #=Description basic signal bad peer #=EXRESULT FAIL # /usr/bin/signal-test { signal (read write send receive) set=(hup, int) peer=/bin/bash /bin/dash, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_03.sd0000644000175000017500000000022112326635016020661 0ustar jjjj# #=Description basic signal no parens for signals #=EXRESULT FAIL # /usr/bin/signal-test { signal (read write send receive) set=hup, int, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_21.sd0000644000175000017500000000075712326635016020562 0ustar jjjj# #=Description basic signal w/multiple signal set rule #=EXRESULT PASS # /usr/bin/signal-test1 { audit signal send set=hup set=int set=quit set=ill set=trap, deny signal receive set=abrt set=bus set=fpe set=kill set=usr1 set=segv, allow signal receive set=usr2 set=pipe set=alrm set=term set=stkflt, audit allow signal set=chld set=cont set=stop set=stp set=ttin, audit deny signal set=(ttou, urg) set=(xcpu xfsz vtalrm , prof) set=winch set=io set=pwr set=sys set=emt set=exists, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_01.sd0000644000175000017500000000013512326635016020546 0ustar jjjj# #=Description basic signal all rule #=EXRESULT PASS # /usr/bin/signal-test { signal, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_08.sd0000644000175000017500000000020112326635016020664 0ustar jjjj# #=Description basic signal multiple peer entries #=EXRESULT FAIL # /usr/bin/signal-test { signal send peer=foo peer=bar, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_13.sd0000644000175000017500000000015712326635016020672 0ustar jjjj# #=DESCRIPTION simple bad rtmin value test #=EXRESULT FAIL # /usr/bin/signal-test { signal set=rtmin+33, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_09.sd0000644000175000017500000000015612326635016020676 0ustar jjjj# #=Description basic signal bad signal #=EXRESULT FAIL # /usr/bin/signal-test { signal send set=nohup, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_06.sd0000644000175000017500000000017512326635016020674 0ustar jjjj# #=Description basic signal bad perm #=EXRESULT FAIL # /usr/bin/signal-test { signal (read write send receive trace), } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_10.sd0000644000175000017500000000016012326635016020661 0ustar jjjj# #=Description basic signal bad signal #=EXRESULT FAIL # /usr/bin/signal-test { signal send set=(nohup), } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_18.sd0000644000175000017500000000014412326635016020673 0ustar jjjj# #=DESCRIPTION simple bare peer keyword #=EXRESULT FAIL # /usr/bin/signal-test { signal peer, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_20.sd0000644000175000017500000000014212326635016020662 0ustar jjjj# #=DESCRIPTION simple signal w/bad perm #=EXRESULT FAIL # /usr/bin/signal-test { signal mr, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_04.sd0000644000175000017500000000015112326635016020547 0ustar jjjj# #=Description basic audit signal all rule #=EXRESULT PASS # /usr/bin/signal-test { audit signal, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_05.sd0000644000175000017500000000020312326635016020663 0ustar jjjj# #=Description basic signal set= inside parens #=EXRESULT FAIL # /usr/bin/signal-test { signal send set=(hup segv set=int), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_18.sd0000644000175000017500000000310712326635016020560 0ustar jjjj# #=Description basic signal w/specific signals rule #=EXRESULT PASS # /usr/bin/signal-test1 { signal set=hup, } /usr/bin/signal-test2 { signal set=int, } /usr/bin/signal-test3 { signal set=quit, } /usr/bin/signal-test4 { signal set=ill, } /usr/bin/signal-test5 { signal set=trap, } /usr/bin/signal-test6 { signal set=abrt, } /usr/bin/signal-test7 { signal set=bus, } /usr/bin/signal-test8 { signal set=fpe, } /usr/bin/signal-test9 { signal set=kill, } /usr/bin/signal-test10 { signal set=usr1, } /usr/bin/signal-test11 { signal set=segv, } /usr/bin/signal-test12 { signal set=usr2, } /usr/bin/signal-test13 { signal set=pipe, } /usr/bin/signal-test14 { signal set=alrm, } /usr/bin/signal-test15 { signal set=term, } /usr/bin/signal-test16 { signal set=stkflt, } /usr/bin/signal-test17 { signal set=chld, } /usr/bin/signal-test18 { signal set=cont, } /usr/bin/signal-test19 { signal set=stop, } /usr/bin/signal-test20 { signal set=stp, } /usr/bin/signal-test21 { signal set=ttin, } /usr/bin/signal-test22 { signal set=ttou, } /usr/bin/signal-test23 { signal set=urg, } /usr/bin/signal-test24 { signal set=xcpu, } /usr/bin/signal-test25 { signal set=xfsz, } /usr/bin/signal-test26 { signal set=vtalrm, } /usr/bin/signal-test27 { signal set=prof, } /usr/bin/signal-test28 { signal set=winch, } /usr/bin/signal-test29 { signal set=io, } /usr/bin/signal-test30 { signal set=pwr, } /usr/bin/signal-test31 { signal set=sys, } /usr/bin/signal-test32 { signal set=emt, } /usr/bin/signal-test33 { signal set=exists, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_20.sd0000644000175000017500000000037512326635016020555 0ustar jjjj# #=Description basic signal w/multiple signal set rule #=EXRESULT PASS # /usr/bin/signal-test { signal set=(hup int quit ill trap abrt) set=(bus,fpe,,,kill,usr1) set=segv set=usr2 set=pipe set=alrm set=term set=stkflt set=chld, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_14.sd0000644000175000017500000000015712326635016020556 0ustar jjjj# #=Description basic signal w/peer rule #=EXRESULT PASS # /usr/bin/signal-test { signal peer=/bin/init, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_15.sd0000644000175000017500000000020412326635016020665 0ustar jjjj# #=DESCRIPTION simple bad rtmin value test #=EXRESULT FAIL # /usr/bin/signal-test { signal set=hup set=stop set=bad set=ttin, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_outside_01.sd0000644000175000017500000000011712611240354022411 0ustar jjjj# #=Description signal rule outside of a profile #=EXRESULT FAIL # signal, apparmor-2.11.0/parser/tst/simple_tests/signal/ok_16.sd0000644000175000017500000000044212326635016020555 0ustar jjjj# #=Description basic signal w/multiple var names rule #=EXRESULT PASS # @{SHELLS}=/bin/bash /bin/dash /bin/tcsh /usr/bin/signal-test1 { signal peer=@{SHELLS}, } /usr/bin/signal-test2 { signal (send) peer=@{SHELLS}, } /usr/bin/signal-test3 { signal (receive) peer=@{SHELLS}, } apparmor-2.11.0/parser/tst/simple_tests/signal/rtsig_01.sd0000644000175000017500000000016712546462662021303 0ustar jjjj# #=DESCRIPTION simple rtsig test #=EXRESULT PASS # /usr/bin/signal-test { signal set=(rtmin+30 rtmin+0 rtmin+1), } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_01.sd0000644000175000017500000000020712326635016020663 0ustar jjjj# #=Description basic signal no parens permissions rule #=EXRESULT FAIL # /usr/bin/signal-test { signal read write send receive, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_08.sd0000644000175000017500000000063112326635016020556 0ustar jjjj# #=Description basic signal mixed send/receive rules #=EXRESULT PASS # /usr/bin/signal-test { signal (r), signal (rw), } /usr/bin/signal-test2 { signal (r, w), signal (read, write), } /usr/bin/signal-test3 { signal (send, receive), } /usr/bin/signal-test4 { signal (r send, receive, write, rw, send), signal r, } /usr/bin/signal-test5 { signal (r send,,,, receive,write,rw, send), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_12.sd0000644000175000017500000000234712326635016020557 0ustar jjjj# #=Description basic signal w/multiple signal set rule #=EXRESULT PASS # /usr/bin/signal-test1 { signal set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } /usr/bin/signal-test2 { signal set=(hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt exists), } /usr/bin/signal-test3 { signal send set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } /usr/bin/signal-test4 { signal (send, receive) set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } /usr/bin/signal-test5 { signal (send receive) set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_13.sd0000644000175000017500000000241712326635016020556 0ustar jjjj# #=Description basic signal w/multiple signal set rule #=EXRESULT PASS # /usr/bin/signal-test1 { audit signal set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } /usr/bin/signal-test2 { deny signal set=(hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt exists), } /usr/bin/signal-test3 { allow signal send set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } /usr/bin/signal-test4 { audit allow signal (send, receive) set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } /usr/bin/signal-test5 { audit deny signal (send receive) set=(hup, int, quit, ill, trap, abrt, bus, fpe, kill, usr1, segv, usr2, pipe, alrm, term, stkflt, chld, cont, stop, stp, ttin, ttou, urg, xcpu, xfsz, vtalrm, prof, winch, io, pwr, sys, emt, exists), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_17.sd0000644000175000017500000000055112326635016020557 0ustar jjjj# #=Description basic signal w/regex peer #=EXRESULT PASS # /usr/bin/signal-test1 { signal (send) peer=/{**/,}bin/{sh,true}, } /usr/bin/signal-test2 { signal (receive) set=(fpe stop) peer=/sbin/{init,systend,upstart}, } /usr/bin/signal-test3 { audit deny signal receive set=(stop, int, usr1, usr2) peer=/**.{py,pl,rb}, signal receive set=(segv), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_02.sd0000644000175000017500000000014712326635016020552 0ustar jjjj# #=Description basic deny signal all rule #=EXRESULT PASS # /usr/bin/signal-test { deny signal, } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_07.sd0000644000175000017500000000036312326635016020557 0ustar jjjj# #=Description basic signal mixed send/receive rules #=EXRESULT PASS # /usr/bin/signal-test { signal r, signal rw, } /usr/bin/signal-test2 { signal read, signal write, } /usr/bin/signal-test3 { signal send, signal receive, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_11.sd0000644000175000017500000000016412326635016020666 0ustar jjjj# #=Description basic signal bad signal #=EXRESULT FAIL # /usr/bin/signal-test { signal send set=(hup nohup), } apparmor-2.11.0/parser/tst/simple_tests/signal/ok_05.sd0000644000175000017500000000027112326635016020553 0ustar jjjj# #=Description basic signal read rules #=EXRESULT PASS # /usr/bin/signal-test { signal r, } /usr/bin/signal-test2 { signal read, } /usr/bin/signal-test3 { signal receive, } apparmor-2.11.0/parser/tst/simple_tests/signal/bad_07.sd0000644000175000017500000000014612326635016020673 0ustar jjjj# #=Description basic signal bad perm #=EXRESULT FAIL # /usr/bin/signal-test { signal tracedby, } apparmor-2.11.0/parser/tst/simple_tests/signal/rtsig_02.sd0000644000175000017500000000021412546462662021275 0ustar jjjj# #=DESCRIPTION simple rtsig test #=EXRESULT PASS # /usr/bin/signal-test { signal set=(rtmin+20) set=rtmin+5 set=(rtmin+001, rtmin+8), } apparmor-2.11.0/parser/tst/simple_tests/rewrite/0000755000175000017500000000000013034613162017505 5ustar jjjjapparmor-2.11.0/parser/tst/simple_tests/rewrite/alias_dupe_1.sd0000644000175000017500000000041511335346537022376 0ustar jjjj#=DESCRIPTION Test of duplicate alias detection #=EXRESULT PASS @{MEEP} = meep moop alias /etc -> /Etcetera, alias /usr/ -> /Libraries/, alias /tmp -> /var/tmp, alias /usr/ -> /User/, @{FOO} = foo bar /bin/foo { #include /tmp/@{FOO}/@{MEEP} rw, } apparmor-2.11.0/parser/tst/simple_tests/rewrite/alias_good_4.sd0000644000175000017500000000036411232012201022345 0ustar jjjj#=DESCRIPTION Test of aliases within includes #=EXRESULT PASS alias /tmp -> /var/tmp, #include #include /bin/foo { #include /tmp/meep rw, @{FOO}/some/other/thing r, } apparmor-2.11.0/parser/tst/simple_tests/rewrite/alias_good_1.sd0000644000175000017500000000022411232012201022335 0ustar jjjj#=DESCRIPTION Simple test of alias functionality #=EXRESULT PASS alias /tmp -> /var/tmp, /bin/foo { #include /tmp/meep rw, } apparmor-2.11.0/parser/tst/simple_tests/rewrite/alias_good_3.sd0000644000175000017500000000042111232012201022336 0ustar jjjj#=DESCRIPTION Simple test of alias functionality #=EXRESULT PASS @{MEEP} = meep moop alias /etc -> /Etcetera, alias /tmp -> /var/tmp, alias /usr/lib/ -> /Libraries/, alias /usr -> /User, @{FOO} = foo bar /bin/foo { #include /tmp/@{FOO}/@{MEEP} rw, } apparmor-2.11.0/parser/tst/simple_tests/rewrite/alias_good_2.sd0000644000175000017500000000040211232012201022334 0ustar jjjj#=DESCRIPTION Simple test of alias functionality after var defn #=EXRESULT PASS alias /etc -> /Etcetera, @{FOO}= foo bar alias /tmp -> /var/tmp, @{MEEP} = meep moop alias /usr -> /User, /bin/foo { #include /tmp/@{FOO}/@{MEEP} rw, } apparmor-2.11.0/parser/tst/simple_tests/rewrite/alias_good_5.sd0000644000175000017500000000043611232012201022346 0ustar jjjj#=DESCRIPTION Test of aliases within includes #=EXRESULT PASS alias /tmp -> /var/tmp, #include #include @{FOO} += /etc/ alias /etc/ -> /Config/, /bin/foo { #include /tmp/meep rw, @{FOO}/some/other/thing r, } apparmor-2.11.0/parser/tst/simple_tests/namespace/0000755000175000017500000000000013034613142017756 5ustar jjjjapparmor-2.11.0/parser/README0000644000175000017500000000154112226155264013366 0ustar jjjjThe apparmor_parser allows you to add, replace, and remove AppArmor policy through the use of command line options. The default is to add. `apparmor_parser --help` shows what the command line options are. You can also find more information at http://wiki.apparmor.net Please send all complaints, feature requests, rants about the software, and questions to the apparmor@lists.ubuntu.com mailing list. Bug reports can be filed against the AppArmor project on launchpad.net at https://launchpad.net/apparmor or reported to the mailing list directly for those who wish not to register for an account on launchpad. Security issues can be filed as security bugs on launchpad or directed to security@ubuntu.com. We will attempt to conform to the RFP vulnerability disclosure protocol: http://www.wiretrip.net/rfp/policy.html Thanks. -- The AppArmor development team apparmor-2.11.0/parser/rule.h0000644000175000017500000000240512320570525013622 0ustar jjjj/* * Copyright (c) 2014 * Canonical Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #ifndef __AA_RULE_H #define __AA_RULE_H #include #include #include "policydb.h" class Profile; #define RULE_NOT_SUPPORTED 0 #define RULE_ERROR -1 #define RULE_OK 1 class rule_t { public: virtual ~rule_t() { }; //virtual bool operator<(rule_t const &rhs)const = 0; virtual std::ostream &dump(std::ostream &os) = 0; virtual int expand_variables(void) = 0; virtual int gen_policy_re(Profile &prof) = 0; virtual void post_process(Profile &prof) = 0; }; std::ostream &operator<<(std::ostream &os, rule_t &rule); typedef std::list RuleList; #endif /* __AA_RULE_H */ apparmor-2.11.0/parser/network.c0000644000175000017500000002343612504631026014344 0ustar jjjj/* * Copyright (c) 2014 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ #include #include #include #include #include #include #include #include "lib.h" #include "parser.h" #include "profile.h" #include "parser_yacc.h" #include "network.h" int parse_net_mode(const char *str_mode, int *mode, int fail) { return parse_X_mode("net", AA_VALID_NET_PERMS, str_mode, mode, fail); } /* Bleah C++ doesn't have non-trivial designated initializers so we just * have to make sure these are in order. This means we are more brittle * but there isn't much we can do. */ struct sock_type_map { const char *name; int value; }; struct sock_type_map sock_types[] = { { "none", 0 }, { "stream", SOCK_STREAM }, { "dgram", SOCK_DGRAM }, { "raw", SOCK_RAW }, { "rdm", SOCK_RDM }, { "seqpacket", SOCK_SEQPACKET }, { "dccp", SOCK_DCCP }, { "invalid", -1 }, { "invalid", -1 }, { "invalid", -1 }, { "packet", SOCK_PACKET }, { NULL, -1 }, /* * See comment above */ }; int net_find_type_val(const char *type) { int i; for (i = 0; sock_types[i].name; i++) { if (strcmp(sock_types[i].name, type) == 0) return sock_types[i].value; } return -1; } const char *net_find_type_name(int type) { int i; for (i = 0; sock_types[i].name; i++) { if (sock_types[i].value == type) return sock_types[i].name; } return NULL; } /* FIXME: currently just treating as a bit mask this will have to change * set up a table of mappings, there can be several mappings for a * given match. * currently the mapping does not set the protocol for stream/dgram to * anything other than 0. * network inet tcp -> network inet stream 0 instead of * network inet raw tcp. * some entries are just provided for completeness at this time */ /* values stolen from /etc/protocols - needs to change */ #define RAW_TCP 6 #define RAW_UDP 17 #define RAW_ICMP 1 #define RAW_ICMPv6 58 /* used by af_name.h to auto generate table entries for "name", AF_NAME * pair */ #define AA_GEN_NET_ENT(name, AF) \ {name, AF, "stream", SOCK_STREAM, "", 0xffffff}, \ {name, AF, "dgram", SOCK_DGRAM, "", 0xffffff}, \ {name, AF, "seqpacket", SOCK_SEQPACKET, "", 0xffffff}, \ {name, AF, "rdm", SOCK_RDM, "", 0xffffff}, \ {name, AF, "raw", SOCK_RAW, "", 0xffffff}, \ {name, AF, "packet", SOCK_PACKET, "", 0xffffff}, /*FIXME: missing {name, AF, "dccp", SOCK_DCCP, "", 0xfffffff}, */ static struct network_tuple network_mappings[] = { /* basic types */ #include "af_names.h" /* FIXME: af_names.h is missing AF_LLC, AF_TIPC */ /* mapped types */ {"inet", AF_INET, "raw", SOCK_RAW, "tcp", 1 << RAW_TCP}, {"inet", AF_INET, "raw", SOCK_RAW, "udp", 1 << RAW_UDP}, {"inet", AF_INET, "raw", SOCK_RAW, "icmp", 1 << RAW_ICMP}, {"inet", AF_INET, "tcp", SOCK_STREAM, "", 0xffffffff}, /* should we give raw tcp too? */ {"inet", AF_INET, "udp", SOCK_DGRAM, "", 0xffffffff}, /* should these be open masks? */ {"inet", AF_INET, "icmp", SOCK_RAW, "", 1 << RAW_ICMP}, {"inet6", AF_INET6, "tcp", SOCK_STREAM, "", 0xffffffff}, {"inet6", AF_INET6, "udp", SOCK_DGRAM, "", 0xffffffff}, /* what do we do with icmp on inet6? {"inet6", AF_INET, "icmp", SOCK_RAW, 0}, {"inet6", AF_INET, "icmpv6", SOCK_RAW, 0}, */ /* terminate */ {NULL, 0, NULL, 0, NULL, 0} }; /* The apparmor kernel patches up until 2.6.38 didn't handle networking * tables with sizes > AF_MAX correctly. This could happen when the * parser was built against newer kernel headers and then used to load * policy on an older kernel. This could happen during upgrades or * in multi-kernel boot systems. * * Try to detect the running kernel version and use that to determine * AF_MAX */ #define PROC_VERSION "/proc/sys/kernel/osrelease" static size_t kernel_af_max(void) { char buffer[32]; int major; autoclose int fd = -1; int res; if (!net_af_max_override) { return 0; } /* the override parameter is specifying the max value */ if (net_af_max_override > 0) return net_af_max_override; fd = open(PROC_VERSION, O_RDONLY); if (fd == -1) /* fall back to default provided during build */ return 0; res = read(fd, &buffer, sizeof(buffer) - 1); if (res <= 0) return 0; buffer[res] = '\0'; res = sscanf(buffer, "2.6.%d", &major); if (res != 1) return 0; switch(major) { case 24: case 25: case 26: return 34; case 27: return 35; case 28: case 29: case 30: return 36; case 31: case 32: case 33: case 34: case 35: return 37; case 36: case 37: return 38; /* kernels .38 and later should handle this correctly so no * static mapping needed */ default: return 0; } } /* Yuck. We grab AF_* values to define above from linux/socket.h because * they are more accurate than sys/socket.h for what the kernel actually * supports. However, we can't just include linux/socket.h directly, * because the AF_* definitions are protected with an ifdef KERNEL * wrapper, but we don't want to define that because that can cause * other redefinitions from glibc. However, because the kernel may have * more definitions than glibc, we need make sure AF_MAX reflects this, * hence the wrapping function. */ size_t get_af_max() { size_t af_max; /* HACK: declare that version without "create" had a static AF_MAX */ if (!perms_create && !net_af_max_override) net_af_max_override = -1; #if AA_AF_MAX > AF_MAX af_max = AA_AF_MAX; #else af_max = AF_MAX; #endif /* HACK: some kernels didn't handle network tables from parsers * compiled against newer kernel headers as they are larger than * the running kernel expected. If net_override is defined check * to see if there is a static max specified for that kernel */ if (net_af_max_override) { size_t max = kernel_af_max(); if (max && max < af_max) return max; } return af_max; } struct aa_network_entry *new_network_ent(unsigned int family, unsigned int type, unsigned int protocol) { struct aa_network_entry *new_entry; new_entry = (struct aa_network_entry *) calloc(1, sizeof(struct aa_network_entry)); if (new_entry) { new_entry->family = family; new_entry->type = type; new_entry->protocol = protocol; new_entry->next = NULL; } return new_entry; } const struct network_tuple *net_find_mapping(const struct network_tuple *map, const char *family, const char *type, const char *protocol) { if (!map) map = network_mappings; else /* assumes it points to last entry returned */ map++; for (; map->family_name; map++) { if (family) { PDEBUG("Checking family %s\n", map->family_name); if (strcmp(family, map->family_name) != 0) continue; PDEBUG("Found family %s\n", family); } if (type) { PDEBUG("Checking type %s\n", map->type_name); if (strcmp(type, map->type_name) != 0) continue; PDEBUG("Found type %s\n", type); } if (protocol) { /* allows the proto to be the "type", ie. tcp implies * stream */ if (!type) { PDEBUG("Checking protocol type %s\n", map->type_name); if (strcmp(protocol, map->type_name) == 0) goto match; } PDEBUG("Checking type %s protocol %s\n", map->type_name, map->protocol_name); if (strcmp(protocol, map->protocol_name) != 0) continue; /* fixme should we allow specifying protocol by # * without needing the protocol mapping? */ } /* if we get this far we have a match */ match: return map; } return NULL; } struct aa_network_entry *network_entry(const char *family, const char *type, const char *protocol) { struct aa_network_entry *new_entry, *entry = NULL; const struct network_tuple *mapping = NULL; while ((mapping = net_find_mapping(mapping, family, type, protocol))) { new_entry = new_network_ent(mapping->family, mapping->type, mapping->protocol); if (!new_entry) yyerror(_("Memory allocation error.")); new_entry->next = entry; entry = new_entry; } return entry; }; #define ALL_TYPES 0x43e const char *net_find_af_name(unsigned int af) { size_t i; if (af < 0 || af > get_af_max()) return NULL; for (i = 0; i < sizeof(network_mappings) / sizeof(*network_mappings); i++) { if (network_mappings[i].family == af) return network_mappings[i].family_name; } return NULL; } void __debug_network(unsigned int *array, const char *name) { unsigned int count = sizeof(sock_types)/sizeof(sock_types[0]); unsigned int mask = ~((1 << count) -1); unsigned int i, j; int none = 1; size_t af_max = get_af_max(); for (i = AF_UNSPEC; i < af_max; i++) if (array[i]) { none = 0; break; } if (none) return; printf("%s: ", name); /* This can only be set by an unqualified network rule */ if (array[AF_UNSPEC]) { printf("\n"); return; } for (i = 0; i < af_max; i++) { if (array[i]) { const char *fam = net_find_af_name(i); if (fam) printf("%s ", fam); else printf("#%u ", i); /* All types/protocols */ if (array[i] == 0xffffffff || array[i] == ALL_TYPES) continue; printf("{ "); for (j = 0; j < count; j++) { const char *type; if (array[i] & (1 << j)) { type = sock_types[j].name; if (type) printf("%s ", type); else printf("#%u ", j); } } if (array[i] & mask) printf("#%x ", array[i] & mask); printf("} "); } } printf("\n"); } apparmor-2.11.0/parser/mount.cc0000644000175000017500000005414412467167244014176 0ustar jjjj/* * Copyright (c) 2010 * Canonical, Ltd. (All rights reserved) * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, contact Novell, Inc. or Canonical * Ltd. */ /** * The mount command, its mix of options and flags, its permissions and * mapping are a mess. * mount [-lhV] * * mount -a [-fFnrsvw] [-t vfstype] [-O optlist] * * mount [-fnrsvw] [-o option[,option]...] device|dir * * mount [-fnrsvw] [-t vfstype] [-o options] device dir * *---------------------------------------------------------------------- * Mount flags of no interest for apparmor mediation * -a, --all * -F fork for simultaneous mount * -f fake, do everything except that actual system call * -h --help * -i, --internal-only * -n mount without writing in /etc/mtab * -O limits what is auto mounted * -p, --pass-fd num * -s Tolerate sloppy mount options * -U uuid * -V --version * --no-canonicalize * *---------------------------------------------------------------------- * what do we do with these * -l list? * -L