kernel.git/security/apparmor/apparmorfs.c, branch linux-4.13.y

apparmor: export that basic profile namespaces are supported

2017-06-11T00:11:48Z

Allow userspace to detect that basic profile policy namespaces are available. Signed-off-by: John Johansen

apparmor: add stacked domain labels interface

2017-06-11T00:11:48Z

Update the user interface to support the stacked change_profile transition. Signed-off-by: John Johansen

apparmor: add domain label stacking info to apparmorfs

2017-06-11T00:11:47Z

Now that the domain label transition is complete advertise it to userspace. Signed-off-by: John Johansen

apparmor: support v7 transition format compatible with label_parse

2017-06-11T00:11:45Z

Signed-off-by: John Johansen

apparmor: allow ptrace checks to be finer grained than just capability

2017-06-11T00:11:42Z

Signed-off-by: John Johansen

apparmor: update query interface to support label queries

2017-06-11T00:11:39Z

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38Z

Begin the actual switch to using domain labels by storing them on the context and converting the label to a singular profile where possible. Signed-off-by: John Johansen

apparmor: convert to profile block critical sections

2017-06-11T00:11:34Z

There are still a few places where profile replacement fails to update and a stale profile is used for mediation. Fix this by moving to accessing the current label through a critical section that will always ensure mediation is using the current label regardless of whether the tasks cred has been updated or not. Signed-off-by: John Johansen

apparmor: fix display of ns name

2017-06-11T00:11:33Z

The ns name being displayed should go through an ns view lookup. Signed-off-by: John Johansen

apparmor: fix apparmor_query data

2017-06-11T00:11:33Z

The data being queried isn't always the current profile and a lookup relative to the current profile should be done. Signed-off-by: John Johansen