linux-toradex.git/security/apparmor/include/policy_unpack.h, branch v4.1 Linux kernel for Apalis and Colibri modules apparmor: allow setting any profile into the unconfined state 2013-08-14T18:42:07+00:00 John Johansen john.johansen@canonical.com 2013-07-11T04:12:43+00:00 038165070aa55375d4bdd2f84b34a486feca63d6 Allow emulating the default profile behavior from boot, by allowing loading of a profile in the unconfined state into a new NS. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 
Allow emulating the default profile behavior from boot, by allowing
loading of a profile in the unconfined state into a new NS.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: provide base for multiple profiles to be replaced at once 2013-08-14T18:42:06+00:00 John Johansen john.johansen@canonical.com 2013-07-11T04:05:43+00:00 dd51c84857630e77c139afe4d9bba65fc051dc3f previously profiles had to be loaded one at a time, which could result in cases where a replacement of a set would partially succeed, and then fail resulting in inconsistent policy. Allow multiple profiles to replaced "atomically" so that the replacement either succeeds or fails for the entire set of profiles. Signed-off-by: John Johansen <john.johansen@canonical.com> 
previously profiles had to be loaded one at a time, which could result
in cases where a replacement of a set would partially succeed, and then fail
resulting in inconsistent policy.

Allow multiple profiles to replaced "atomically" so that the replacement
either succeeds or fails for the entire set of profiles.

Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: policy routines for loading and unpacking policy 2010-08-02T05:38:36+00:00 John Johansen john.johansen@canonical.com 2010-07-29T21:48:02+00:00 736ec752d95e91e77cc0e8c97c057ab076ac2f51 AppArmor policy is loaded in a platform independent flattened binary stream. Verify and unpack the data converting it to the internal format needed for enforcement. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org> 
AppArmor policy is loaded in a platform independent flattened binary
stream.  Verify and unpack the data converting it to the internal
format needed for enforcement.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>