kernel/linux.git/security/apparmor/include/file.h, branch linux-4.13.y

apparmor: move path_link mediation to using labels

2017-06-11T00:11:44+00:00

Signed-off-by: John Johansen

apparmor: refactor path name lookup and permission checks around labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: update aa_audit_file() to use labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: move aa_file_perm() to use labels

2017-06-11T00:11:42+00:00

Signed-off-by: John Johansen

apparmor: revalidate files during exec

2017-06-11T00:11:37+00:00

Instead of running file revalidation lazily when read/write are called copy selinux and revalidate the file table on exec. This avoids extra mediation overhead in read/write and also prevents file handles being passed through to a grand child unchecked. Signed-off-by: John Johansen

apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()

2017-06-11T00:11:37+00:00

Signed-off-by: John Johansen

apparmor: switch from file_perms to aa_perms

2017-06-11T00:11:30+00:00

Signed-off-by: John Johansen

apparmor: rework perm mapping to a slightly broader set

2017-06-09T12:59:22+00:00

Signed-off-by: John Johansen

apparmor: move permissions into their own file to be more easily shared

2017-06-08T19:51:53+00:00

Signed-off-by: John Johansen

apparmor: move file context into file.h

2017-06-08T18:29:33+00:00

Signed-off-by: John Johansen