John JohansenandSasha Levin 32928c1749 apparmor: refcount the pdb ...

[ Upstream commit 98b824ff89 ]

With the move to permission tables the dfa is no longer a stand
alone entity when used, needing a minimum of a permission table.
However it still could be shared among different pdbs each using
a different permission table.

Instead of duping the permission table when sharing a pdb, add a
refcount to the pdb so it can be easily shared.

Reviewed-by: Georgia Garcia <georgia.garcia@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Stable-dep-of: a4c9efa4db ("apparmor: make label_match return a consistent value")
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-04 07:20:24 -05:00

..

apparmor.h

…

apparmorfs.h

…

audit.h

…

capability.h

…

cred.h

…

crypto.h

…

domain.h

…

file.h

…

ipc.h

…

label.h

…

lib.h

apparmor: refcount the pdb

2026-03-04 07:20:24 -05:00

match.h

apparmor: refcount the pdb

2026-03-04 07:20:24 -05:00

mount.h

…

net.h

…

path.h

…

perms.h

…

policy_compat.h

…

policy_ns.h

…

policy_unpack.h

…

policy.h

apparmor: refcount the pdb

2026-03-04 07:20:24 -05:00

procattr.h

…

resource.h

…

secid.h

…

sig_names.h

…

task.h

…