5 Commits

Author	SHA1	Message	Date
John Johansen	77b071b340	apparmor: change how profile replacement update is done ... remove the use of replaced by chaining and move to profile invalidation and lookup to handle task replacement. Replacement chaining can result in large chains of profiles being pinned in memory when one profile in the chain is use. With implicit labeling this will be even more of a problem, so move to a direct lookup method. Signed-off-by: John Johansen <john.johansen@canonical.com>	2013-08-14 11:42:06 -07:00
John Johansen	214beacaa7	apparmor: localize getting the security context to a few macros ... Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com>	2013-04-28 00:39:35 -07:00
John Johansen	7a2871b566	apparmor: use common fn to clear task_context for domain transitions ... Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>	2013-04-28 00:36:20 -07:00
John Johansen	3cfcc19e0b	apparmor: add utility function to get an arbitrary tasks profile. ... Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>	2013-04-28 00:35:53 -07:00
John Johansen	c75afcd153	AppArmor: contexts used in attaching policy to system objects ... AppArmor contexts attach profiles and state to tasks, files, etc. when a direct profile reference is not sufficient. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org>	2010-08-02 15:35:12 +10:00