averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-08-24 07:35:46 +02:00
Code Issues Packages Projects Releases Wiki Activity
506,942 Commits 116 Branches 5,734 Tags
24d4e7f642882a8a13da170b4ba86eec8fa91bf2
Commit Graph
3 Commits
Author SHA1 Message Date
John Johansen 038165070a apparmor: allow setting any profile into the unconfined state 
Allow emulating the default profile behavior from boot, by allowing
loading of a profile in the unconfined state into a new NS.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
 2013-08-14 11:42:07 -07:00
John Johansen dd51c84857 apparmor: provide base for multiple profiles to be replaced at once 
previously profiles had to be loaded one at a time, which could result
in cases where a replacement of a set would partially succeed, and then fail
resulting in inconsistent policy.

Allow multiple profiles to replaced "atomically" so that the replacement
either succeeds or fails for the entire set of profiles.

Signed-off-by: John Johansen <john.johansen@canonical.com>
 2013-08-14 11:42:06 -07:00
John Johansen 736ec752d9 AppArmor: policy routines for loading and unpacking policy 
AppArmor policy is loaded in a platform independent flattened binary
stream.  Verify and unpack the data converting it to the internal
format needed for enforcement.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
 2010-08-02 15:38:36 +10:00