kernel-fxtec-pro1x/security/apparmor
John Johansen c961ee5f21 apparmor: convert from securityfs to apparmorfs for policy ns files
Virtualize the apparmor policy/ directory so that the current
namespace affects what part of policy is seen. To do this convert to
using apparmorfs for policy namespace files and setup a magic symlink
in the securityfs apparmor dir to access those files.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Seth Arnold <seth.arnold@canonical.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
2017-06-08 12:51:52 -07:00
..
include apparmor: allow specifying an already created dir to create ns entries in 2017-06-08 12:51:52 -07:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c apparmor: convert from securityfs to apparmorfs for policy ns files 2017-06-08 12:51:52 -07:00
audit.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
capability.c apparmor: rename apparmor file fns and data to indicate use 2017-06-08 12:51:52 -07:00
context.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
crypto.c apparmor: use SHASH_DESC_ON_STACK 2017-04-07 08:58:35 +10:00
domain.c apparmor: Move path lookup to using preallocated buffers 2017-06-08 11:29:34 -07:00
file.c apparmor: Move path lookup to using preallocated buffers 2017-06-08 11:29:34 -07:00
ipc.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
lib.c apparmor: make internal lib fn skipn_spaces available to the rest of apparmor 2017-06-08 11:29:33 -07:00
lsm.c apparmor: Make path_max parameter readonly 2017-04-07 08:58:36 +10:00
Makefile apparmor: rename apparmor file fns and data to indicate use 2017-06-08 12:51:52 -07:00
match.c mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
nulldfa.in apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
path.c apparmor: Move path lookup to using preallocated buffers 2017-06-08 11:29:34 -07:00
policy.c apparmor: rename apparmor file fns and data to indicate use 2017-06-08 12:51:52 -07:00
policy_ns.c apparmor: allow specifying an already created dir to create ns entries in 2017-06-08 12:51:52 -07:00
policy_unpack.c apparmor: move to per loaddata files, instead of replicating in profiles 2017-06-08 12:51:49 -07:00
procattr.c apparmor: convert change_profile to use fqname later to give better control 2017-01-16 01:18:49 -08:00
resource.c apparmor: rename apparmor file fns and data to indicate use 2017-06-08 12:51:52 -07:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00