linux-toradex.git/security/apparmor/procattr.c, branch v4.12-rc4

apparmor: convert change_profile to use fqname later to give better control

2017-01-16T09:18:49+00:00

Moving the use of fqname to later allows learning profiles to be based
on the fqname request instead of just the hname. It also allows cleaning
up some of the name parsing and lookup by allowing the use of
the fqlookupn_profile() lib fn.

Signed-off-by: John Johansen

apparmor: fix change_hat debug output

2017-01-16T09:18:48+00:00

Signed-off-by: John Johansen

apparmor: change op from int to const char *

2017-01-16T09:18:46+00:00

Having ops be an integer that is an index into an op name table is
awkward and brittle. Every op change requires an edit for both the
op constant and a string in the table. Instead switch to using const
strings directly, eliminating the need for the table that needs to
be kept in sync.

Signed-off-by: John Johansen

apparmor: allow ns visibility question to consider subnses

2017-01-16T09:18:22+00:00

Signed-off-by: John Johansen

apparmor: rename namespace to ns to improve code line lengths

2017-01-16T08:42:16+00:00

Signed-off-by: John Johansen

apparmor: split apparmor policy namespaces code into its own file

2017-01-16T08:42:15+00:00

Policy namespaces will be diverging from profile management and
expanding so put it in its own file.

Signed-off-by: John Johansen

apparmor: add interface files for profiles and namespaces

2013-08-14T18:42:07+00:00

Add basic interface files to access namespace and profile information.
The interface files are created when a profile is loaded and removed
when the profile or namespace is removed.

Signed-off-by: John Johansen

apparmor: remove "permipc" command

2013-04-28T07:36:32+00:00

The "permipc" command is unused and unfinished, remove it.

Signed-off-by: John Johansen 
Acked-by: Kees Cook

apparmor: sparse fix: include procattr.h in procattr.c

2011-09-09T23:56:29+00:00

Fix sparse warnings:
security/apparmor/procattr.c:35:5: warning: symbol 'aa_getprocattr' was not declared. Should it be static?
security/apparmor/procattr.c:113:5: warning: symbol 'aa_setprocattr_changehat' was not declared. Should it be static?
security/apparmor/procattr.c:158:5: warning: symbol 'aa_setprocattr_changeprofile' was not declared. Should it be static?
security/apparmor/procattr.c:166:5: warning: symbol 'aa_setprocattr_permipc' was not declared. Should it be static?

Signed-off-by: James Morris 
Acked-by: John Johansen

AppArmor: userspace interfaces

2010-08-02T05:35:13+00:00

The /proc//attr/* interface is used for process introspection and
commands.  While the apparmorfs interface is used for global introspection
and loading and removing policy.

The interface currently only contains the files necessary for loading
policy, and will be extended in the future to include sysfs style
single per file introspection inteface.

The old AppArmor 2.4 interface files have been removed into a compatibility
patch, that distros can use to maintain backwards compatibility.

Signed-off-by: John Johansen 
Signed-off-by: James Morris