apparmor: convert policy lookup to use accept as an index
authorJohn Johansen <john.johansen@canonical.com>
Sat, 16 Jul 2022 08:53:46 +0000 (01:53 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 3 Oct 2022 21:49:03 +0000 (14:49 -0700)
commite844fe9b51c984472ea98be3b2d1201ba9ee3213
tree167bf6c3beeec74821dd3f2d54b77b3c37b3a361
parentbf690f59d0429c62de4db1234f16557eedcb39bf
apparmor: convert policy lookup to use accept as an index

Remap polidydb dfa accept table from embedded perms to an index, and
then move the perm lookup to use the accept entry as an index into the
perm table. This is done so that the perm table can be separated from
the dfa, allowing dfa accept to index to share expanded permission
sets.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c
security/apparmor/include/perms.h
security/apparmor/include/policy.h
security/apparmor/label.c
security/apparmor/mount.c
security/apparmor/net.c
security/apparmor/policy_unpack.c