linux-stable.git/security/apparmor/include/label.h, branch linux-4.15.y Linux kernel stable tree apparmor: add support for absolute root view based labels 2017-09-22T20:00:58+00:00 John Johansen john.johansen@canonical.com 2017-08-06T12:39:08+00:00 26b7899510ae243e392960704ebdba52d05fbb13 With apparmor policy virtualization based on policy namespace View's we don't generally want/need absolute root based views, however there are cases like debugging and some secid based conversions where using a root based view is important. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 
With apparmor policy virtualization based on policy namespace View's
we don't generally want/need absolute root based views, however there
are cases like debugging and some secid based conversions where
using a root based view is important.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: add the base fns() for domain labels 2017-06-11T00:11:38+00:00 John Johansen john.johansen@canonical.com 2017-06-09T13:19:19+00:00 f1bd904175e8190ce14aedee37e207ab51fe3b30 Begin moving apparmor to using broader domain labels, that will allow run time computation of domain type splitting via "stacking" of profiles into a domain label vec. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Begin moving apparmor to using broader domain labels, that will allow
run time computation of domain type splitting via "stacking" of
profiles into a domain label vec.

Signed-off-by: John Johansen <john.johansen@canonical.com>