kernel/linux.git/security/apparmor/include/secid.h, branch v5.0.15

apparmor: Add a wildcard secid

2018-10-03T13:18:17+00:00

Reserve a secid value that we can use as a wildcard, allowing us to define policy that's expected to match against all secids. Signed-off-by: Matthew Garrett Signed-off-by: John Johansen

apparmor: fixup secid map conversion to using IDR

2018-06-07T08:50:49+00:00

The IDR conversion did not handle an error case for when allocating a mapping fails, and it did not ensure that mappings did not allocate or use a 0 value, which is used as an invalid secid. Which is used when a mapping fails. Fixes: 3ae7eb49a2be ("apparmor: Use an IDR to allocate apparmor secids") Signed-off-by: John Johansen

apparmor: add support for mapping secids and using secctxes

2018-05-02T07:48:55+00:00

Use a radix tree to provide a map between the secid and the label, and along with it a basic ability to provide secctx conversion. Shared/cached secctx will be added later. Signed-off-by: John Johansen

apparmor: rename sid to secid

2017-01-16T08:42:17+00:00

Move to common terminology with other LSMs and kernel infrastucture Signed-off-by: John Johansen