Commit Graph
5 Commits
Author SHA1 Message Date
John Johansen 77b071b340 apparmor: change how profile replacement update is done
remove the use of replaced by chaining and move to profile invalidation
and lookup to handle task replacement.

Replacement chaining can result in large chains of profiles being pinned
in memory when one profile in the chain is use. With implicit labeling
this will be even more of a problem, so move to a direct lookup method.

Signed-off-by: John Johansen <[email protected]>
2013-08-14 11:42:06 -07:00
John Johansen 214beacaa7 apparmor: localize getting the security context to a few macros
Signed-off-by: John Johansen <[email protected]>
Acked-by: Seth Arnold <[email protected]>
2013-04-28 00:39:35 -07:00
John Johansen 7a2871b566 apparmor: use common fn to clear task_context for domain transitions
Signed-off-by: John Johansen <[email protected]>
Acked-by: Steve Beattie <[email protected]>
2013-04-28 00:36:20 -07:00
John Johansen 3cfcc19e0b apparmor: add utility function to get an arbitrary tasks profile.
Signed-off-by: John Johansen <[email protected]>
Acked-by: Steve Beattie <[email protected]>
2013-04-28 00:35:53 -07:00
John Johansen c75afcd153 AppArmor: contexts used in attaching policy to system objects
AppArmor contexts attach profiles and state to tasks, files, etc. when
a direct profile reference is not sufficient.

Signed-off-by: John Johansen <[email protected]>
Signed-off-by: James Morris <[email protected]>
2010-08-02 15:35:12 +10:00