alistair23-linux/security/apparmor
John Johansen 6604d4c1c1 apparmor: allow policydb to be used as the file dfa
Newer policy will combine the file and policydb dfas, allowing for
better optimizations. However to support older policy we need to
keep the ability to address the "file" dfa separately. So dup
the policydb as if it is the file dfa and set the appropriate start
state.

Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:33 -08:00
..
include apparmor: add get_dfa() fn 2017-01-16 01:18:32 -08:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c apparmor: prepare to support newer versions of policy 2017-01-16 01:18:32 -08:00
audit.c apparmor: split apparmor policy namespaces code into its own file 2017-01-16 00:42:15 -08:00
capability.c apparmor: fix capability to not use the current task, during reporting 2013-10-29 21:33:37 -07:00
context.c apparmor: rename replacedby to proxy 2017-01-16 01:18:19 -08:00
crypto.c apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling 2016-07-27 17:39:26 +10:00
domain.c apparmor: name null-XXX profiles after the executable 2017-01-16 01:18:30 -08:00
file.c apparmor: use designated initializers 2017-01-15 20:00:32 -08:00
ipc.c apparmor: fix capability to not use the current task, during reporting 2013-10-29 21:33:37 -07:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
lib.c apparmor: update policy_destroy to use new debug asserts 2017-01-16 01:18:27 -08:00
lsm.c apparmor: remove paranoid load switch 2017-01-16 01:18:30 -08:00
Makefile apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00
match.c apparmor: move lib definitions into separate lib include 2017-01-16 00:42:13 -08:00
path.c apparmor: internal paths should be treated as disconnected 2016-07-12 08:43:10 -07:00
policy.c apparmor: name null-XXX profiles after the executable 2017-01-16 01:18:30 -08:00
policy_ns.c apparmor: pass gfp_t parameter into profile allocation 2017-01-16 01:18:29 -08:00
policy_unpack.c apparmor: allow policydb to be used as the file dfa 2017-01-16 01:18:33 -08:00
procattr.c apparmor: allow ns visibility question to consider subnses 2017-01-16 01:18:22 -08:00
resource.c apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task 2016-07-12 08:43:10 -07:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00