projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e2f76ad) | patch
apparmor: add a kernel label to use on kernel objects
authorJohn Johansen <john.johansen@canonical.com>
Tue, 24 May 2022 09:38:12 +0000 (02:38 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Wed, 13 Jul 2022 23:37:21 +0000 (16:37 -0700)
commit95c0581f9bfdfbe97126ba1c7f5650a9dd064dda
treeed4981a6a37076e2258d868a677ddcd8a976d63atree | snapshot
parente2f76ad7d2859e333609c775fda707f205d93fd8commit | diff
apparmor: add a kernel label to use on kernel objects

Separate kernel objects from unconfined. This is done so we can
distinguish between the two in debugging, auditing and in preparation
for being able to replace unconfined, which is not appropriate for the
kernel.

The kernel label will continue to behave similar to unconfined.

Acked-by: Jon Tourville <jon.tourville@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/include/policy_ns.h diff | blob | history
security/apparmor/lsm.c diff | blob | history
security/apparmor/net.c diff | blob | history
security/apparmor/policy_ns.c diff | blob | history
Domain: System / Kernel;