kernel/linux.git/security/apparmor/include/audit.h, branch linux-4.13.y

apparmor: add domain label stacking info to apparmorfs

2017-06-11T00:11:47+00:00

Now that the domain label transition is complete advertise it to userspace. Signed-off-by: John Johansen

apparmor: mediate files when they are received

2017-06-11T00:11:45+00:00

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38+00:00

Begin the actual switch to using domain labels by storing them on the context and converting the label to a singular profile where possible. Signed-off-by: John Johansen

apparmor: revalidate files during exec

2017-06-11T00:11:37+00:00

Instead of running file revalidation lazily when read/write are called copy selinux and revalidate the file table on exec. This avoids extra mediation overhead in read/write and also prevents file handles being passed through to a grand child unchecked. Signed-off-by: John Johansen

apparmor: add gerneric permissions struct and support fns

2017-06-11T00:11:30+00:00

Signed-off-by: John Johansen

apparmor: change aad apparmor_audit_data macro to a fn macro

2017-01-16T09:18:47+00:00

The aad macro can replace aad strings when it is not intended to. Switch to a fn macro so it is only applied when intended. Also at the same time cleanup audit_data initialization by putting common boiler plate behind a macro, and dropping the gfp_t parameter which will become useless. Signed-off-by: John Johansen

apparmor: change op from int to const char *

2017-01-16T09:18:46+00:00

Having ops be an integer that is an index into an op name table is awkward and brittle. Every op change requires an edit for both the op constant and a string in the table. Instead switch to using const strings directly, eliminating the need for the table that needs to be kept in sync. Signed-off-by: John Johansen

apparmor: add ns name to the audit data for policy loads

2017-01-16T09:18:41+00:00

Signed-off-by: John Johansen

apparmor: remove parent task info from audit logging

2013-10-30T04:34:04+00:00

The reporting of the parent task info is a vestage from old versions of apparmor. The need for this information was removed by unique null- profiles before apparmor was upstreamed so remove this info from logging. Signed-off-by: John Johansen

apparmor: add interface files for profiles and namespaces

2013-08-14T18:42:07+00:00

Add basic interface files to access namespace and profile information. The interface files are created when a profile is loaded and removed when the profile or namespace is removed. Signed-off-by: John Johansen