linux.git/security/apparmor/file.c, branch v4.13

apparmor: put back designators in struct initialisers

2017-06-28T05:50:43+00:00

Fixes: 8014370f1257 ("apparmor: move path_link mediation to using labels")
Signed-off-by: Stephen Rothwell 
Acked-by: John Johansen 
Acked-by: Kees Cook 
Signed-off-by: James Morris

apparmor: rework file permission to cache file access in file->ctx

2017-06-11T00:11:44+00:00

This is a temporary step, towards using the file->ctx for delegation,
and also helps speed up file queries, until the permission lookup
cache is introduced.

Signed-off-by: John Johansen

apparmor: move path_link mediation to using labels

2017-06-11T00:11:44+00:00

Signed-off-by: John Johansen

apparmor: refactor path name lookup and permission checks around labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: update aa_audit_file() to use labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: move aa_file_perm() to use labels

2017-06-11T00:11:42+00:00

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38+00:00

Begin the actual switch to using domain labels by storing them on
the context and converting the label to a singular profile where
possible.

Signed-off-by: John Johansen

apparmor: revalidate files during exec

2017-06-11T00:11:37+00:00

Instead of running file revalidation lazily when read/write are called
copy selinux and revalidate the file table on exec. This avoids
extra mediation overhead in read/write and also prevents file handles
being passed through to a grand child unchecked.

Signed-off-by: John Johansen

apparmor: switch from file_perms to aa_perms

2017-06-11T00:11:30+00:00

Signed-off-by: John Johansen

apparmor: add gerneric permissions struct and support fns

2017-06-11T00:11:30+00:00

Signed-off-by: John Johansen