John Johansen 474d6b7510 apparmor: prepare to support newer versions of policy ...

Newer policy encodes more than just version in the version tag,
so add masking to make sure the comparison remains correct.

Note: this is fully compatible with older policy as it will never set
the bits being masked out.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2017-01-16 01:18:32 -08:00

..

include

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

.gitignore

AppArmor: remove af_names.h from .gitignore

2012-09-01 08:35:34 -07:00

apparmorfs.c

apparmor: prepare to support newer versions of policy

2017-01-16 01:18:32 -08:00

audit.c

apparmor: split apparmor policy namespaces code into its own file

2017-01-16 00:42:15 -08:00

capability.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

context.c

apparmor: rename replacedby to proxy

2017-01-16 01:18:19 -08:00

crypto.c

apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling

2016-07-27 17:39:26 +10:00

domain.c

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

file.c

apparmor: use designated initializers

2017-01-15 20:00:32 -08:00

ipc.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

Kconfig

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16 01:18:24 -08:00

lib.c

apparmor: update policy_destroy to use new debug asserts

2017-01-16 01:18:27 -08:00

lsm.c

apparmor: remove paranoid load switch

2017-01-16 01:18:30 -08:00

Makefile

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00

match.c

apparmor: move lib definitions into separate lib include

2017-01-16 00:42:13 -08:00

path.c

apparmor: internal paths should be treated as disconnected

2016-07-12 08:43:10 -07:00

policy_ns.c

apparmor: pass gfp_t parameter into profile allocation

2017-01-16 01:18:29 -08:00

policy_unpack.c

apparmor: prepare to support newer versions of policy

2017-01-16 01:18:32 -08:00

policy.c

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

procattr.c

apparmor: allow ns visibility question to consider subnses

2017-01-16 01:18:22 -08:00

resource.c

apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task

2016-07-12 08:43:10 -07:00

secid.c

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00