apparmor: use the dfa to do label parse string splitting

2018-02-09T19:30:01Z

The current split scheme is actually wrong in that it splits ///& where that is invalid and should fail. Use the dfa to do a proper bounded split without having to worry about getting the string processing right in code. Signed-off-by: John Johansen Acked-by: Seth Arnold

kernel.git/security/apparmor/stacksplitdfa.in, branch linux-5.9.y

apparmor: use the dfa to do label parse string splitting