ee2351e4b0
apparmor: track ns level so it can be used to help in view checks
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:36 -08:00
30b026a8d1
apparmor: pass gfp_t parameter into profile allocation
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:29 -08:00
73688d1ed0
apparmor: refactor prepare_ns() and make usable from different views
...
prepare_ns() will need to be called from alternate views, and namespaces
will need to be created via different interfaces. So refactor and
allow specifying the view ns.
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:28 -08:00
d102d89571
apparmor: pass gfp param into aa_policy_init()
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:27 -08:00
92b6d8eff5
apparmor: allow ns visibility question to consider subnses
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:22 -08:00
31617ddfdd
apparmor: add fn to lookup profiles by fqname
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:22 -08:00
9a2d40c12d
apparmor: add strn version of aa_find_ns
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:20 -08:00
8399588a7f
apparmor: rename replacedby to proxy
...
Proxy is shorter and a better fit than replaceby, so rename it.
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:19 -08:00
98849dff90
apparmor: rename namespace to ns to improve code line lengths
...
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 00:42:16 -08:00
cff281f686
apparmor: split apparmor policy namespaces code into its own file
...
Policy namespaces will be diverging from profile management and
expanding so put it in its own file.
Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 00:42:15 -08:00
John Johansen