iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
609,584 Commits 104 Branches 1,843 Tags
Commit Graph

3 Commits

Author SHA1 Message Date
John Johansen
038165070a apparmor: allow setting any profile into the unconfined state 
Allow emulating the default profile behavior from boot, by allowing
loading of a profile in the unconfined state into a new NS.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
 2013-08-14 11:42:07 -07:00
John Johansen
dd51c84857 apparmor: provide base for multiple profiles to be replaced at once 
previously profiles had to be loaded one at a time, which could result
in cases where a replacement of a set would partially succeed, and then fail
resulting in inconsistent policy.

Allow multiple profiles to replaced "atomically" so that the replacement
either succeeds or fails for the entire set of profiles.

Signed-off-by: John Johansen <john.johansen@canonical.com>
 2013-08-14 11:42:06 -07:00
John Johansen
736ec752d9 AppArmor: policy routines for loading and unpacking policy 
AppArmor policy is loaded in a platform independent flattened binary
stream.  Verify and unpack the data converting it to the internal
format needed for enforcement.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
 2010-08-02 15:38:36 +10:00