kernel/security/apparmor/procattr.c, branch linux-5.3.y

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05T15:37:17Z

Based on 1 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license as published by the free software foundation version 2 of the license extracted by the scancode license scanner the SPDX license identifier GPL-2.0-only has been chosen to replace the boilerplate/reference in 315 file(s). Signed-off-by: Thomas Gleixner Reviewed-by: Allison Randal Reviewed-by: Armijn Hemel Cc: linux-spdx@vger.kernel.org Link: https://lkml.kernel.org/r/20190531190115.503150771@linutronix.de Signed-off-by: Greg Kroah-Hartman

apparmor: move context.h to cred.h

2018-02-09T19:30:01Z

Now that file contexts have been moved into file, and task context fns() and data have been split from the context, only the cred context remains in context.h so rename to cred.h to better reflect what it deals with. Signed-off-by: John Johansen

apparmor: switch getprocattr to using label_print fns()

2017-06-11T00:11:39Z

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38Z

Begin the actual switch to using domain labels by storing them on the context and converting the label to a singular profile where possible. Signed-off-by: John Johansen

apparmor: convert aa_change_XXX bool parameters to flags

2017-06-11T00:11:36Z

Instead of passing multiple booleans consolidate on a single flags field. Signed-off-by: John Johansen

apparmor: convert to profile block critical sections

2017-06-11T00:11:34Z

There are still a few places where profile replacement fails to update and a stale profile is used for mediation. Fix this by moving to accessing the current label through a critical section that will always ensure mediation is using the current label regardless of whether the tasks cred has been updated or not. Signed-off-by: John Johansen

apparmor: convert change_profile to use fqname later to give better control

2017-01-16T09:18:49Z

Moving the use of fqname to later allows learning profiles to be based on the fqname request instead of just the hname. It also allows cleaning up some of the name parsing and lookup by allowing the use of the fqlookupn_profile() lib fn. Signed-off-by: John Johansen

apparmor: fix change_hat debug output

2017-01-16T09:18:48Z

Signed-off-by: John Johansen

apparmor: change op from int to const char *

2017-01-16T09:18:46Z

Having ops be an integer that is an index into an op name table is awkward and brittle. Every op change requires an edit for both the op constant and a string in the table. Instead switch to using const strings directly, eliminating the need for the table that needs to be kept in sync. Signed-off-by: John Johansen

apparmor: allow ns visibility question to consider subnses

2017-01-16T09:18:22Z

Signed-off-by: John Johansen