apparmor: allow label to carry debug flags
authorJohn Johansen <john.johansen@canonical.com>
Sat, 26 Mar 2022 08:46:18 +0000 (01:46 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Tue, 19 Jul 2022 09:55:45 +0000 (02:55 -0700)
commitc1ed5da197652318341fd36333d45e8e6d5c3359
tree683644f81fe3f38082ddc519a8d7d798e183ab70
parent2504db207146543736e877241f3b3de005cbe056
apparmor: allow label to carry debug flags

Allow labels to have debug flags that can be used to trigger debug output
only from profiles/labels that are marked. This can help reduce debug
output by allowing debug to be target to a specific confinement condition.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/include/label.h
security/apparmor/include/path.h
security/apparmor/include/policy.h
security/apparmor/include/policy_unpack.h
security/apparmor/label.c
security/apparmor/policy_unpack.c