apparmor: update policy capable checks to use a label

Browse source

Previously the policy capable checks assumed they were using the
current task. Make them take the task label so the query can be
made against an arbitrary task.

Signed-off-by: John Johansen <john.johansen@canonical.com>

...

This commit is contained in:

John Johansen 2020-06-30 17:00:11 -07:00

parent 5268d795d6

commit 92de220a7f

5 changed files with 51 additions and 23 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

security/apparmor/apparmorfs.c

View file

1

security/apparmor/include/label.h

View file

6

security/apparmor/include/policy.h

View file

22

security/apparmor/lsm.c

View file

41

security/apparmor/policy.c

View file