apparmor: compute xmatch permissions on profile load
authorMike Salvatore <mike.salvatore@canonical.com>
Sun, 31 May 2020 14:52:06 +0000 (10:52 -0400)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 3 Oct 2022 21:49:02 +0000 (14:49 -0700)
commitb5b57993504f91785fa70e002e5e494fb549726e
tree3d3a6cc40d0949486554351e6889ed5fc594fb98
parent408d53e923bd852d5d80243a642004163db53a87
apparmor: compute xmatch permissions on profile load

Rather than computing xmatch permissions each time access is requested,
these permissions can be computed once on profile load and stored for
lookup.

Signed-off-by: Mike Salvatore <mike.salvatore@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c
security/apparmor/include/policy.h
security/apparmor/policy.c
security/apparmor/policy_unpack.c