linux-toradex.git/security/apparmor/include/context.h, branch v4.12-rc4

apparmor: rename context abreviation cxt to the more standard ctx

2017-01-16T09:18:45+00:00

Signed-off-by: John Johansen

apparmor: add ns being viewed as a param to policy_view_capable()

2017-01-16T09:18:39+00:00

Prepare for a tighter pairing of user namespaces and apparmor policy
namespaces, by making the ns to be viewed available and checking
that the user namespace level is the same as the policy ns level.

This strict pairing will be relaxed once true support of user namespaces
lands.

Signed-off-by: John Johansen

apparmor: rename PFLAG_INVALID to PFLAG_STALE

2017-01-16T09:16:37+00:00

Invalid does not convey the meaning of the flag anymore so rename it.

Signed-off-by: John Johansen

apparmor: change how profile replacement update is done

2013-08-14T18:42:06+00:00

remove the use of replaced by chaining and move to profile invalidation
and lookup to handle task replacement.

Replacement chaining can result in large chains of profiles being pinned
in memory when one profile in the chain is use. With implicit labeling
this will be even more of a problem, so move to a direct lookup method.

Signed-off-by: John Johansen

apparmor: localize getting the security context to a few macros

2013-04-28T07:39:35+00:00

Signed-off-by: John Johansen 
Acked-by: Seth Arnold

apparmor: use common fn to clear task_context for domain transitions

2013-04-28T07:36:20+00:00

Signed-off-by: John Johansen 
Acked-by: Steve Beattie

apparmor: add utility function to get an arbitrary tasks profile.

2013-04-28T07:35:53+00:00

Signed-off-by: John Johansen 
Acked-by: Steve Beattie

AppArmor: contexts used in attaching policy to system objects

2010-08-02T05:35:12+00:00

AppArmor contexts attach profiles and state to tasks, files, etc. when
a direct profile reference is not sufficient.

Signed-off-by: John Johansen 
Signed-off-by: James Morris