John Johansen 6604d4c1c1 apparmor: allow policydb to be used as the file dfa ...

Newer policy will combine the file and policydb dfas, allowing for
better optimizations. However to support older policy we need to
keep the ability to address the "file" dfa separately. So dup
the policydb as if it is the file dfa and set the appropriate start
state.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2017-01-16 01:18:33 -08:00

..

include

apparmor: add get_dfa() fn

2017-01-16 01:18:32 -08:00

.gitignore

AppArmor: remove af_names.h from .gitignore

2012-09-01 08:35:34 -07:00

apparmorfs.c

apparmor: prepare to support newer versions of policy

2017-01-16 01:18:32 -08:00

audit.c

apparmor: split apparmor policy namespaces code into its own file

2017-01-16 00:42:15 -08:00

capability.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

context.c

apparmor: rename replacedby to proxy

2017-01-16 01:18:19 -08:00

crypto.c

apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling

2016-07-27 17:39:26 +10:00

domain.c

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

file.c

apparmor: use designated initializers

2017-01-15 20:00:32 -08:00

ipc.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

Kconfig

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16 01:18:24 -08:00

lib.c

apparmor: update policy_destroy to use new debug asserts

2017-01-16 01:18:27 -08:00

lsm.c

apparmor: remove paranoid load switch

2017-01-16 01:18:30 -08:00

Makefile

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00

match.c

apparmor: move lib definitions into separate lib include

2017-01-16 00:42:13 -08:00

path.c

apparmor: internal paths should be treated as disconnected

2016-07-12 08:43:10 -07:00

policy_ns.c

apparmor: pass gfp_t parameter into profile allocation

2017-01-16 01:18:29 -08:00

policy_unpack.c

apparmor: allow policydb to be used as the file dfa

2017-01-16 01:18:33 -08:00

policy.c

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

procattr.c

apparmor: allow ns visibility question to consider subnses

2017-01-16 01:18:22 -08:00

resource.c

apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task

2016-07-12 08:43:10 -07:00

secid.c

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00