linux.git/security/apparmor/policy.c, branch v4.13 Linux kernel source tree apparmor: switch from profiles to using labels on contexts 2017-06-11T00:11:38+00:00 John Johansen john.johansen@canonical.com 2017-06-09T15:14:28+00:00 637f688dc3dc304a89f441d76f49a0e35bc49c08 Begin the actual switch to using domain labels by storing them on the context and converting the label to a singular profile where possible. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Begin the actual switch to using domain labels by storing them on
the context and converting the label to a singular profile where
possible.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: cleanup remove unused and not fully implemented profile rename 2017-06-11T00:11:36+00:00 John Johansen john.johansen@canonical.com 2017-06-09T14:24:18+00:00 dca91402e999aa0824c4144ad216bd61dd4fe3ff Remove the partially implemented code, until this can be properly implemented. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Remove the partially implemented code, until this can be properly
implemented.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: refactor updating profiles to the newest parent 2017-06-11T00:11:35+00:00 John Johansen john.johansen@canonical.com 2017-06-09T14:16:46+00:00 435222bc1bcc11636f4159fd3ce9e481ab7f2c7c Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: share profile name on replacement 2017-06-11T00:11:35+00:00 John Johansen john.johansen@canonical.com 2017-06-09T14:09:05+00:00 a1bd627b46d169268a0ee5960899fb5be960a317 The profile names are the same, leverage this. Signed-off-by: John Johansen <john.johansen@canonical.com> 
The profile names are the same, leverage this.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: fix policy load/remove semantics 2017-06-11T00:11:32+00:00 John Johansen john.johansen@canonical.com 2017-06-04T19:22:22+00:00 60285eb3e7c8827e00e2f2b54561a8cca07d802f The namespace being passed into the replace/remove profiles fns() is not the view, but the namespace specified by the inode from the file hook (if present) or the loading tasks ns, if accessing the top level virtualized load/replace file interface. Signed-off-by: John Johansen <john.johansen@canonical.com> 
The namespace being passed into the replace/remove profiles fns() is
not the view, but the namespace specified by the inode from the
file hook (if present) or the loading tasks ns, if accessing the
top level virtualized load/replace file interface.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add namespace lookup fns() 2017-06-11T00:11:32+00:00 John Johansen john.johansen@canonical.com 2017-06-03T00:44:27+00:00 3664268f19ea07bec55df92fe53ff9ed28968bcc Currently lookups are restricted to a single ns component in the path. However when namespaces are allowed to have separate views, and scopes this will not be sufficient, as it will be possible to have a multiple component ns path in scope. Add some ns lookup fns() to allow this and use them. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Currently lookups are restricted to a single ns component in the
path. However when namespaces are allowed to have separate views, and
scopes this will not be sufficient, as it will be possible to have
a multiple component ns path in scope.

Add some ns lookup fns() to allow this and use them.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: cleanup __find_child() 2017-06-11T00:11:31+00:00 John Johansen john.johansen@canonical.com 2017-06-02T20:50:22+00:00 ae3b31653691b9c5b572b99596de3dfcc8f05006 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: provide finer control over policy management 2017-06-11T00:11:20+00:00 John Johansen john.johansen@canonical.com 2017-05-26T08:45:08+00:00 18e99f191a8e66ec8fd06e4820de44bd9faa296a Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: rename apparmor file fns and data to indicate use 2017-06-08T19:51:52+00:00 John Johansen john.johansen@canonical.com 2017-05-25T13:23:42+00:00 c97204baf840bf850e14ef4f5f43251239ca43b6 prefixes are used for fns/data that are not static to apparmorfs.c with the prefixes being aafs - special magic apparmorfs for policy namespace data aa_sfs - for fns/data that go into securityfs aa_fs - for fns/data that may be used in the either of aafs or securityfs Signed-off-by: John Johansen <john.johansen@canonical.com> Reviewed-by: Seth Arnold <seth.arnold@canonical.com> Reviewed-by: Kees Cook <keescook@chromium.org> 
prefixes are used for fns/data that are not static to apparmorfs.c
with the prefixes being
  aafs   - special magic apparmorfs for policy namespace data
  aa_sfs - for fns/data that go into securityfs
  aa_fs  - for fns/data that may be used in the either of aafs or
           securityfs

Signed-off-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Seth Arnold <seth.arnold@canonical.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
apparmor: move to per loaddata files, instead of replicating in profiles 2017-06-08T19:51:49+00:00 John Johansen john.johansen@canonical.com 2017-05-09T07:08:41+00:00 5d5182cae40115c03933989473288e54afb39c7c The loaddata sets cover more than just a single profile and should be tracked at the ns level. Move the load data files under the namespace and reference the files from the profiles via a symlink. Signed-off-by: John Johansen <john.johansen@canonical.com> Reviewed-by: Seth Arnold <seth.arnold@canonical.com> Reviewed-by: Kees Cook <keescook@chromium.org> 
The loaddata sets cover more than just a single profile and should
be tracked at the ns level. Move the load data files under the namespace
and reference the files from the profiles via a symlink.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Seth Arnold <seth.arnold@canonical.com>
Reviewed-by: Kees Cook <keescook@chromium.org>