apparmor: update policy capable checks to use a label
authorJohn Johansen <john.johansen@canonical.com>
Wed, 1 Jul 2020 00:00:11 +0000 (17:00 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 7 Feb 2021 12:13:54 +0000 (04:13 -0800)
commit92de220a7f336367127351da58cff691da5bb17b
treed246001003718f842a473e2f57367eb69051be61
parent5268d795d6888b202ad9f2b16a254cd00d0de77b
apparmor: update policy capable checks to use a label

Previously the policy capable checks assumed they were using the
current task. Make them take the task label so the query can be
made against an arbitrary task.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c
security/apparmor/include/label.h
security/apparmor/include/policy.h
security/apparmor/lsm.c
security/apparmor/policy.c