apparmor: make export of raw binary profile to userspace optional
authorJohn Johansen <john.johansen@canonical.com>
Mon, 1 Feb 2021 11:43:18 +0000 (03:43 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Sat, 9 Jul 2022 22:13:59 +0000 (15:13 -0700)
commitd61c57fde81915c04b41982f66a159ccc014e799
treeb16d5eda5b6e54da16541ec8f7d911411f409ef5
parent65cc9c391c3c4096ccc47ecd8b9f58f470b57225
apparmor: make export of raw binary profile to userspace optional

Embedded systems have limited space and don't need the introspection
or checkpoint restore capability provided by exporting the raw
profile binary data so make it so make it a config option.

This will reduce run time memory use and also speed up policy loads.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/Kconfig
security/apparmor/apparmorfs.c
security/apparmor/include/apparmor.h
security/apparmor/include/apparmorfs.h
security/apparmor/lsm.c
security/apparmor/policy.c
security/apparmor/policy_unpack.c