linux.git/security/apparmor/include/apparmorfs.h, branch v4.12 Linux kernel source tree apparmor: add per policy ns .load, .replace, .remove interface files 2017-01-16T09:18:44+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:42:58+00:00 b7fd2c0340eacbee892425e9007647568b7f2a3c Having per policy ns interface files helps with containers restoring policy. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Having per policy ns interface files helps with containers restoring
policy.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: allow introspecting the loaded policy pre internal transform 2017-01-16T09:18:42+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:42:55+00:00 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 Store loaded policy and allow introspecting it through apparmorfs. This has several uses from debugging, policy validation, and policy checkpoint and restore for containers. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Store loaded policy and allow introspecting it through apparmorfs. This
has several uses from debugging, policy validation, and policy checkpoint
and restore for containers.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add special .null file used to "close" fds at exec 2017-01-16T09:18:35+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:42:45+00:00 a71ada305801e940ff69c2c58489778760e5148b Borrow the special null device file from selinux to "close" fds that don't have sufficient permissions at exec time. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Borrow the special null device file from selinux to "close" fds that
don't have sufficient permissions at exec time.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: rename namespace to ns to improve code line lengths 2017-01-16T08:42:16+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:42:16+00:00 98849dff90e270af3b34889b9e08252544f40b5b Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add the ability to report a sha1 hash of loaded policy 2013-08-14T18:42:08+00:00 John Johansen john.johansen@canonical.com 2013-08-14T18:27:36+00:00 f8eb8a1324e81927b2c64823b2fc38386efd3fef Provide userspace the ability to introspect a sha1 hash value for each profile currently loaded. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 
Provide userspace the ability to introspect a sha1 hash value for each
profile currently loaded.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: add an optional profile attachment string for profiles 2013-08-14T18:42:07+00:00 John Johansen john.johansen@canonical.com 2013-07-11T04:17:43+00:00 556d0be74b19cb6288e5eb2f3216eac247d87968 Add the ability to take in and report a human readable profile attachment string for profiles so that attachment specifications can be easily inspected. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> 
Add the ability to take in and report a human readable profile attachment
string for profiles so that attachment specifications can be easily
inspected.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
apparmor: add interface files for profiles and namespaces 2013-08-14T18:42:07+00:00 John Johansen john.johansen@canonical.com 2013-07-11T04:13:43+00:00 0d259f043f5f60f74c4fd020aac190cb6450e918 Add basic interface files to access namespace and profile information. The interface files are created when a profile is loaded and removed when the profile or namespace is removed. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Add basic interface files to access namespace and profile information.
The interface files are created when a profile is loaded and removed
when the profile or namespace is removed.

Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: add "file" details to securityfs 2012-02-27T19:38:18+00:00 Kees Cook kees@ubuntu.com 2012-01-27T00:29:22+00:00 a9bf8e9fd561ba9ff1f0f2a1d96e439fcedaaaa4 Create the "file" directory in the securityfs for tracking features related to files. Signed-off-by: Kees Cook <kees@ubuntu.com> Signed-off-by: John Johansen <john.johansen@canonical.com> 
Create the "file" directory in the securityfs for tracking features
related to files.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: add initial "features" directory to securityfs 2012-02-27T19:38:17+00:00 Kees Cook kees@outflux.net 2012-01-27T00:29:21+00:00 e74abcf3359d0130e99a6511ac484a3ea9e6e988 This adds the "features" subdirectory to the AppArmor securityfs to display boolean features flags and the known capability mask. Signed-off-by: Kees Cook <kees@ubuntu.com> Signed-off-by: John Johansen <john.johansen@canonical.com> 
This adds the "features" subdirectory to the AppArmor securityfs
to display boolean features flags and the known capability mask.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
AppArmor: refactor securityfs to use structures 2012-02-27T19:38:09+00:00 Kees Cook kees@outflux.net 2012-01-27T00:29:20+00:00 9acd494be9387b0608612cd139967201dd7a4e12 Use a file tree structure to represent the AppArmor securityfs. Signed-off-by: Kees Cook <kees@ubuntu.com> Signed-off-by: John Johansen <john.johansen@canonical.com> 
Use a file tree structure to represent the AppArmor securityfs.

Signed-off-by: Kees Cook <kees@ubuntu.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>