linux.git/security/apparmor/policy.c, branch v4.14 Linux kernel source tree apparmor: fix race condition in null profile creation 2017-09-22T20:00:58+00:00 John Johansen john.johansen@canonical.com 2017-08-16T12:40:49+00:00 290638a52a808d658bd04b746b3ca46886c157e0 There is a race when null- profile is being created between the initial lookup/creation of the profile and lock/addition of the profile. This could result in multiple version of a profile being added to the list which need to be removed/replaced. Since these are learning profile their is no affect on mediation. Signed-off-by: John Johansen <john.johansen@canonical.com> 
There is a race when null- profile is being created between the
initial lookup/creation of the profile and lock/addition of the
profile. This could result in multiple version of a profile being
added to the list which need to be removed/replaced.

Since these are learning profile their is no affect on mediation.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move new_null_profile to after profile lookup fns() 2017-09-22T20:00:58+00:00 John Johansen john.johansen@canonical.com 2017-08-16T15:59:57+00:00 d07881d2edb0ab783846730629ac2faeaafdf4f1 new_null_profile will need to use some of the profile lookup fns() so move instead of doing forward fn declarations. Signed-off-by: John Johansen <john.johansen@canonical.com> 
new_null_profile will need to use some of the profile lookup fns()
so move instead of doing forward fn declarations.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: switch from profiles to using labels on contexts 2017-06-11T00:11:38+00:00 John Johansen john.johansen@canonical.com 2017-06-09T15:14:28+00:00 637f688dc3dc304a89f441d76f49a0e35bc49c08 Begin the actual switch to using domain labels by storing them on the context and converting the label to a singular profile where possible. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Begin the actual switch to using domain labels by storing them on
the context and converting the label to a singular profile where
possible.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: cleanup remove unused and not fully implemented profile rename 2017-06-11T00:11:36+00:00 John Johansen john.johansen@canonical.com 2017-06-09T14:24:18+00:00 dca91402e999aa0824c4144ad216bd61dd4fe3ff Remove the partially implemented code, until this can be properly implemented. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Remove the partially implemented code, until this can be properly
implemented.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: refactor updating profiles to the newest parent 2017-06-11T00:11:35+00:00 John Johansen john.johansen@canonical.com 2017-06-09T14:16:46+00:00 435222bc1bcc11636f4159fd3ce9e481ab7f2c7c Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: share profile name on replacement 2017-06-11T00:11:35+00:00 John Johansen john.johansen@canonical.com 2017-06-09T14:09:05+00:00 a1bd627b46d169268a0ee5960899fb5be960a317 The profile names are the same, leverage this. Signed-off-by: John Johansen <john.johansen@canonical.com> 
The profile names are the same, leverage this.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: fix policy load/remove semantics 2017-06-11T00:11:32+00:00 John Johansen john.johansen@canonical.com 2017-06-04T19:22:22+00:00 60285eb3e7c8827e00e2f2b54561a8cca07d802f The namespace being passed into the replace/remove profiles fns() is not the view, but the namespace specified by the inode from the file hook (if present) or the loading tasks ns, if accessing the top level virtualized load/replace file interface. Signed-off-by: John Johansen <john.johansen@canonical.com> 
The namespace being passed into the replace/remove profiles fns() is
not the view, but the namespace specified by the inode from the
file hook (if present) or the loading tasks ns, if accessing the
top level virtualized load/replace file interface.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add namespace lookup fns() 2017-06-11T00:11:32+00:00 John Johansen john.johansen@canonical.com 2017-06-03T00:44:27+00:00 3664268f19ea07bec55df92fe53ff9ed28968bcc Currently lookups are restricted to a single ns component in the path. However when namespaces are allowed to have separate views, and scopes this will not be sufficient, as it will be possible to have a multiple component ns path in scope. Add some ns lookup fns() to allow this and use them. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Currently lookups are restricted to a single ns component in the
path. However when namespaces are allowed to have separate views, and
scopes this will not be sufficient, as it will be possible to have
a multiple component ns path in scope.

Add some ns lookup fns() to allow this and use them.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: cleanup __find_child() 2017-06-11T00:11:31+00:00 John Johansen john.johansen@canonical.com 2017-06-02T20:50:22+00:00 ae3b31653691b9c5b572b99596de3dfcc8f05006 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: provide finer control over policy management 2017-06-11T00:11:20+00:00 John Johansen john.johansen@canonical.com 2017-05-26T08:45:08+00:00 18e99f191a8e66ec8fd06e4820de44bd9faa296a Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>