linux.git/security/apparmor/include/apparmorfs.h, branch v3.14 Linux kernel source tree apparmor: add the ability to report a sha1 hash of loaded policy 2013-08-14T18:42:08+00:00 John Johansen john.johansen@canonical.com 2013-08-14T18:27:36+00:00 f8eb8a1324e81927b2c64823b2fc38386efd3fef Provide userspace the ability to introspect a sha1 hash value for each profile currently loaded. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 
Provide userspace the ability to introspect a sha1 hash value for each
profile currently loaded.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: add an optional profile attachment string for profiles 2013-08-14T18:42:07+00:00 John Johansen john.johansen@canonical.com 2013-07-11T04:17:43+00:00 556d0be74b19cb6288e5eb2f3216eac247d87968 Add the ability to take in and report a human readable profile attachment string for profiles so that attachment specifications can be easily inspected. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 
Add the ability to take in and report a human readable profile attachment
string for profiles so that attachment specifications can be easily
inspected.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: add interface files for profiles and namespaces 2013-08-14T18:42:07+00:00 John Johansen john.johansen@canonical.com 2013-07-11T04:13:43+00:00 0d259f043f5f60f74c4fd020aac190cb6450e918 Add basic interface files to access namespace and profile information. The interface files are created when a profile is loaded and removed when the profile or namespace is removed. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Add basic interface files to access namespace and profile information.
The interface files are created when a profile is loaded and removed
when the profile or namespace is removed.

Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: add "file" details to securityfs 2012-02-27T19:38:18+00:00 Kees Cook kees@ubuntu.com 2012-01-27T00:29:22+00:00 a9bf8e9fd561ba9ff1f0f2a1d96e439fcedaaaa4 Create the "file" directory in the securityfs for tracking features related to files. Signed-off-by: Kees Cook <kees@ubuntu.com> Signed-off-by: John Johansen <john.johansen@canonical.com> 
Create the "file" directory in the securityfs for tracking features
related to files.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: add initial "features" directory to securityfs 2012-02-27T19:38:17+00:00 Kees Cook kees@outflux.net 2012-01-27T00:29:21+00:00 e74abcf3359d0130e99a6511ac484a3ea9e6e988 This adds the "features" subdirectory to the AppArmor securityfs to display boolean features flags and the known capability mask. Signed-off-by: Kees Cook <kees@ubuntu.com> Signed-off-by: John Johansen <john.johansen@canonical.com> 
This adds the "features" subdirectory to the AppArmor securityfs
to display boolean features flags and the known capability mask.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: refactor securityfs to use structures 2012-02-27T19:38:09+00:00 Kees Cook kees@outflux.net 2012-01-27T00:29:20+00:00 9acd494be9387b0608612cd139967201dd7a4e12 Use a file tree structure to represent the AppArmor securityfs. Signed-off-by: Kees Cook <kees@ubuntu.com> Signed-off-by: John Johansen <john.johansen@canonical.com> 
Use a file tree structure to represent the AppArmor securityfs.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: userspace interfaces 2010-08-02T05:35:13+00:00 John Johansen john.johansen@canonical.com 2010-07-29T21:48:03+00:00 63e2b423771ab0bc7ad4d407f3f6517c6d05cdc0 The /proc/<pid>/attr/* interface is used for process introspection and commands. While the apparmorfs interface is used for global introspection and loading and removing policy. The interface currently only contains the files necessary for loading policy, and will be extended in the future to include sysfs style single per file introspection inteface. The old AppArmor 2.4 interface files have been removed into a compatibility patch, that distros can use to maintain backwards compatibility. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org> 
The /proc/<pid>/attr/* interface is used for process introspection and
commands.  While the apparmorfs interface is used for global introspection
and loading and removing policy.

The interface currently only contains the files necessary for loading
policy, and will be extended in the future to include sysfs style
single per file introspection inteface.

The old AppArmor 2.4 interface files have been removed into a compatibility
patch, that distros can use to maintain backwards compatibility.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>