linux.git/security/apparmor/domain.c, branch v3.12

apparmor: allow setting any profile into the unconfined state

2013-08-14T18:42:07+00:00

Allow emulating the default profile behavior from boot, by allowing
loading of a profile in the unconfined state into a new NS.

Signed-off-by: John Johansen 
Acked-by: Seth Arnold

apparmor: update how unconfined is handled

2013-08-14T18:42:06+00:00

ns->unconfined is being used read side without locking, nor rcu but is
being updated when a namespace is removed. This works for the root ns
which is never removed but has a race window and can cause failures when
children namespaces are removed.

Also ns and ns->unconfined have a circular refcounting dependency that
is problematic and must be broken. Currently this is done incorrectly
when the namespace is destroyed.

Fix this by forward referencing unconfined via the replacedby infrastructure
instead of directly updating the ns->unconfined pointer.

Remove the circular refcount dependency by making the ns and its unconfined
profile share the same refcount.

Signed-off-by: John Johansen 
Acked-by: Seth Arnold

apparmor: change how profile replacement update is done

2013-08-14T18:42:06+00:00

remove the use of replaced by chaining and move to profile invalidation
and lookup to handle task replacement.

Replacement chaining can result in large chains of profiles being pinned
in memory when one profile in the chain is use. With implicit labeling
this will be even more of a problem, so move to a direct lookup method.

Signed-off-by: John Johansen

apparmor: convert profile lists to RCU based locking

2013-08-14T18:42:06+00:00

Signed-off-by: John Johansen

apparmor: localize getting the security context to a few macros

2013-04-28T07:39:35+00:00

Signed-off-by: John Johansen 
Acked-by: Seth Arnold

apparmor: use common fn to clear task_context for domain transitions

2013-04-28T07:36:20+00:00

Signed-off-by: John Johansen 
Acked-by: Steve Beattie

apparmor: add utility function to get an arbitrary tasks profile.

2013-04-28T07:35:53+00:00

Signed-off-by: John Johansen 
Acked-by: Steve Beattie

apparmor: Remove -W1 warnings

2013-04-28T07:35:18+00:00

Signed-off-by: John Johansen 
Acked-By: Steve Beattie

apparmor: fix auditing of domain transition failures due to incomplete policy

2013-04-28T07:35:04+00:00

When policy specifies a transition to a profile that is not currently
loaded, it result in exec being denied.  However the failure is not being
audited correctly because the audit code is treating this as an allowed
permission and thus not reporting it.

Signed-off-by: John Johansen 
Acked-By: Steve Beattie

new helper: file_inode(file)

2013-02-23T04:31:31+00:00

Signed-off-by: Al Viro