linux.git/security/apparmor/domain.c, branch v4.13

apparmor: move change_profile mediation to using labels

2017-06-11T00:11:47+00:00

Signed-off-by: John Johansen

apparmor: move change_hat mediation to using labels

2017-06-11T00:11:46+00:00

Signed-off-by: John Johansen

apparmor: move exec domain mediation to using labels

2017-06-11T00:11:46+00:00

Signed-off-by: John Johansen

apparmor: update aa_audit_file() to use labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: move ptrace checks to using labels

2017-06-11T00:11:41+00:00

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38+00:00

Begin the actual switch to using domain labels by storing them on
the context and converting the label to a singular profile where
possible.

Signed-off-by: John Johansen

apparmor: convert aa_change_XXX bool parameters to flags

2017-06-11T00:11:36+00:00

Instead of passing multiple booleans consolidate on a single flags
field.

Signed-off-by: John Johansen

apparmor: convert to profile block critical sections

2017-06-11T00:11:34+00:00

There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.

Signed-off-by: John Johansen

apparmor: move bprm_committing_creds/committed_creds to lsm.c

2017-06-11T00:11:34+00:00

There is no reason to have the small stubs that don't use domain
private functions in domain.c, instead move them to lsm.c and make
them static.

Signed-off-by: John Johansen

apparmor: switch from file_perms to aa_perms

2017-06-11T00:11:30+00:00

Signed-off-by: John Johansen