kernel/linux.git/security/apparmor/include/procattr.h, branch v6.18.21Linux kernel stable tree (mirror)https://git.radix-linux.su/kernel/linux.git/atom?h=v6.18.212023-11-13T03:54:42+00:00AppArmor: Add selfattr hooks2023-11-13T03:54:42+00:00Casey Schauflercasey@schaufler-ca.com2023-09-12T20:56:54+00:00urn:sha1:223981db9bafb80f558162c148f261e2ff043dbe
Add hooks for setselfattr and getselfattr. These hooks are not very
different from their setprocattr and getprocattr equivalents, and
much of the code is shared.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: John Johansen <john.johansen@canonical.com>
[PM: forward ported beyond v6.6 due merge window changes]
Signed-off-by: Paul Moore <paul@paul-moore.com>
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 4412019-06-05T15:37:17+00:00Thomas Gleixnertglx@linutronix.de2019-06-01T08:08:55+00:00urn:sha1:b886d83c5b621abc84ff9616f14c529be3f6b147
Based on 1 normalized pattern(s):
this program is free software you can redistribute it and or modify
it under the terms of the gnu general public license as published by
the free software foundation version 2 of the license
extracted by the scancode license scanner the SPDX license identifier
GPL-2.0-only
has been chosen to replace the boilerplate/reference in 315 file(s).
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Reviewed-by: Allison Randal <allison@lohutok.net>
Reviewed-by: Armijn Hemel <armijn@tjaldur.nl>
Cc: linux-spdx@vger.kernel.org
Link: https://lkml.kernel.org/r/20190531190115.503150771@linutronix.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
apparmor: switch getprocattr to using label_print fns()2017-06-11T00:11:39+00:00John Johansenjohn.johansen@canonical.com2017-06-09T19:47:17+00:00urn:sha1:76a1d263aba3c97db7a2ba673059e0f17d983efb
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: convert aa_change_XXX bool parameters to flags2017-06-11T00:11:36+00:00John Johansenjohn.johansen@canonical.com2017-06-09T18:36:48+00:00urn:sha1:df8073c67fd8acb7e79f203ba4c0fa456bb82762
Instead of passing multiple booleans consolidate on a single flags
field.
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: remove "permipc" command2013-04-28T07:36:32+00:00John Johansenjohn.johansen@canonical.com2013-02-19T00:06:34+00:00urn:sha1:4b7c331fc2eceaa4da5ded41c0b2eca3fd924444
The "permipc" command is unused and unfinished, remove it.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
AppArmor: userspace interfaces2010-08-02T05:35:13+00:00John Johansenjohn.johansen@canonical.com2010-07-29T21:48:03+00:00urn:sha1:63e2b423771ab0bc7ad4d407f3f6517c6d05cdc0
The /proc/<pid>/attr/* interface is used for process introspection and
commands. While the apparmorfs interface is used for global introspection
and loading and removing policy.
The interface currently only contains the files necessary for loading
policy, and will be extended in the future to include sysfs style
single per file introspection inteface.
The old AppArmor 2.4 interface files have been removed into a compatibility
patch, that distros can use to maintain backwards compatibility.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>