linux/security/apparmor/include, branch v3.11Linux kernel source treehttps://git.amat.us/linux/atom/security/apparmor/include?h=v3.112013-04-28T07:39:35Zapparmor: localize getting the security context to a few macros2013-04-28T07:39:35ZJohn Johansenjohn.johansen@canonical.com2013-02-27T11:43:40Zurn:sha1:214beacaa7b669473bc963af719fa359a8312ea4
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: fix sparse warnings2013-04-28T07:39:35ZJohn Johansenjohn.johansen@canonical.com2013-02-21T21:25:44Zurn:sha1:53fe8b9961716033571d9799005bfdbbafa5162c
Fix a couple of warning reported by sparse
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: remove sid from profiles2013-04-28T07:37:13ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:10:34Zurn:sha1:a4987857d2c958b93b2faafe0811eea1a63ff59a
The sid is not going to be a direct property of a profile anymore, instead
it will be directly related to the label, and the profile will pickup
a label back reference.
For null-profiles replace the use of sid with a per namespace unique
id.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
apparmor: move perm defines into policy_unpack2013-04-28T07:37:04ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:09:34Zurn:sha1:180a6f5965a49535a7704c07691a6d1209904971
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
apparmor: misc cleanup of match2013-04-28T07:36:55ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:08:34Zurn:sha1:8e4ff109d0d2194d98e9e16325bb4102f6463b43
tidying up comments, includes and defines
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
apparmor: remove "permipc" command2013-04-28T07:36:32ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:06:34Zurn:sha1:4b7c331fc2eceaa4da5ded41c0b2eca3fd924444
The "permipc" command is unused and unfinished, remove it.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
apparmor: use common fn to clear task_context for domain transitions2013-04-28T07:36:20ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:05:34Zurn:sha1:7a2871b566f34d980556072943295efd107eb53c
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
apparmor: add kvzalloc to handle zeroing for kvmalloc2013-04-28T07:36:09ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:04:34Zurn:sha1:0ca554b9fca425eb58325a36290deef698cef34b
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
apparmor: add utility function to get an arbitrary tasks profile.2013-04-28T07:35:53ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:03:34Zurn:sha1:3cfcc19e0b5390c04cb5bfa4e8fde39395410e61
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
apparmor: refactor profile mode macros2013-04-28T07:35:29ZJohn Johansenjohn.johansen@canonical.com2013-02-19T00:01:34Zurn:sha1:50c5ecd5d8ffb0e549676b8fd9781e3b2fd751a0
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>