linux-stable.git/security/apparmor/context.c, branch master

apparmor: move task related defines and fns to task.X files

2018-02-09T19:30:01+00:00

Signed-off-by: John Johansen

apparmor: rename tctx to ctx

2018-02-09T19:30:01+00:00

now that cred_ctx has been removed we can rename task_ctxs from tctx
without causing confusion.

Signed-off-by: John Johansen

apparmor: drop cred_ctx and reference the label directly

2018-02-09T19:30:01+00:00

With the task domain change information now stored in the task->security
context, the cred->security context only stores the label. We can get
rid of the cred_ctx and directly reference the label, removing a layer
of indirection, and unneeded extra allocations.

Signed-off-by: John Johansen

apparmor: move task domain change info to task security

2018-02-09T19:30:01+00:00

The task domain change info is task specific and its and abuse of
the cred to store the information in there. Now that a task->security
field exists store it in the proper place.

Signed-off-by: John Johansen

apparmor: rename task_ctx to the more accurate cred_ctx

2018-02-09T19:30:01+00:00

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38+00:00

Begin the actual switch to using domain labels by storing them on
the context and converting the label to a singular profile where
possible.

Signed-off-by: John Johansen

apparmor: convert to profile block critical sections

2017-06-11T00:11:34+00:00

There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.

Signed-off-by: John Johansen

apparmor: replace remaining BUG_ON() asserts with AA_BUG()

2017-01-16T09:18:56+00:00

AA_BUG() uses WARN and won't break the kernel like BUG_ON().

Signed-off-by: John Johansen

apparmor: rename context abreviation cxt to the more standard ctx

2017-01-16T09:18:45+00:00

Signed-off-by: John Johansen

apparmor: fail task profile update if current_cred isn't real_cred

2017-01-16T09:18:45+00:00

Trying to update the task cred while the task current cred is not the
real cred will result in an error at the cred layer. Avoid this by
failing early and delaying the update.

Signed-off-by: John Johansen