John Johansen 6e0654d20e apparmor: use the dfa to do label parse string splitting ...

The current split scheme is actually wrong in that it splits
  ///&

where that is invalid and should fail. Use the dfa to do a proper
bounded split without having to worry about getting the string
processing right in code.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>

2018-02-09 11:30:01 -08:00

..

apparmor.h

apparmor: add mount mediation

2017-09-22 13:00:57 -07:00

apparmorfs.h

apparmor: add policy revision file interface

2017-06-10 17:11:27 -07:00

audit.h

apparmor: fix resource audit messages when auditing peer

2018-02-09 11:30:00 -08:00

capability.h

apparmor: move capability checks to using labels

2017-06-10 17:11:40 -07:00

context.h

apparmor: switch from profiles to using labels on contexts

2017-06-10 17:11:38 -07:00

crypto.h

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

domain.h

+ Features

2017-09-23 05:33:29 -10:00

file.h

apparmor: Refactor to remove bprm_secureexec hook

2017-08-01 12:03:06 -07:00

ipc.h

apparmor: add the ability to mediate signals

2017-09-22 13:00:57 -07:00

label.h

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

lib.h

Rename superblock flags (MS_xyz -> SB_xyz)

2017-11-27 13:05:09 -08:00

match.h

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

mount.h

apparmor: add mount mediation

2017-09-22 13:00:57 -07:00

path.h

apparmor: Move path lookup to using preallocated buffers

2017-06-08 11:29:34 -07:00

perms.h

apparmor: fix ptrace label match when matching stacked labels

2018-01-12 15:49:59 -08:00

policy_ns.h

apparmor: switch from profiles to using labels on contexts

2017-06-10 17:11:38 -07:00

policy_unpack.h

apparmor: split load data into management struct and data blob

2018-02-09 11:30:00 -08:00

policy.h

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

procattr.h

apparmor: switch getprocattr to using label_print fns()

2017-06-10 17:11:39 -07:00

resource.h

apparmor: move resource checks to using labels

2017-06-10 17:11:40 -07:00

secid.h

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00

sig_names.h

apparmor: fix logging of the existence test for signals

2018-02-09 11:30:00 -08:00