iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
679,112 Commits 104 Branches 1,843 Tags
Commit Graph

10 Commits

Author SHA1 Message Date
John Johansen
ee2351e4b0 apparmor: track ns level so it can be used to help in view checks 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:36 -08:00
John Johansen
30b026a8d1 apparmor: pass gfp_t parameter into profile allocation 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:29 -08:00
John Johansen
73688d1ed0 apparmor: refactor prepare_ns() and make usable from different views 
prepare_ns() will need to be called from alternate views, and namespaces
will need to be created via different interfaces. So refactor and
allow specifying the view ns.

Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:28 -08:00
John Johansen
d102d89571 apparmor: pass gfp param into aa_policy_init() 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:27 -08:00
John Johansen
92b6d8eff5 apparmor: allow ns visibility question to consider subnses 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:22 -08:00
John Johansen
31617ddfdd apparmor: add fn to lookup profiles by fqname 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:22 -08:00
John Johansen
9a2d40c12d apparmor: add strn version of aa_find_ns 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:20 -08:00
John Johansen
8399588a7f apparmor: rename replacedby to proxy 
Proxy is shorter and a better fit than replaceby, so rename it.

Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 01:18:19 -08:00
John Johansen
98849dff90 apparmor: rename namespace to ns to improve code line lengths 
Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 00:42:16 -08:00
John Johansen
cff281f686 apparmor: split apparmor policy namespaces code into its own file 
Policy namespaces will be diverging from profile management and
expanding so put it in its own file.

Signed-off-by: John Johansen <john.johansen@canonical.com>
 2017-01-16 00:42:15 -08:00