On Tue, Feb 14, 2012 at 09:57:28AM -0800, John Johansen wrote: > The removal of deny information is a one way operation, that can result > in a smaller dfa, but also results in a dfa that should not be used in > future operations because the deny rules from the precomputed dfa would > not get applied. > > For now default filtering out of deny information to off, as it takes > extra time and seldom results in further state reduction. > > Signed-off-by: John Johansen <[email protected]>
Acked-by: Kees Cook <[email protected]> -- Kees Cook -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
