apparmor: add namespace lookup fns()

Browse source

Currently lookups are restricted to a single ns component in the
path. However when namespaces are allowed to have separate views, and
scopes this will not be sufficient, as it will be possible to have
a multiple component ns path in scope.

Add some ns lookup fns() to allow this and use them.

Signed-off-by: John Johansen <john.johansen@canonical.com>

...

This commit is contained in:

John Johansen 2017-06-02 17:44:27 -07:00

parent ae3b316536

commit 3664268f19

3 changed files with 73 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

13

security/apparmor/include/policy_ns.h

View file

10

security/apparmor/policy.c

View file

54

security/apparmor/policy_ns.c

View file