]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
apparmor: extend policydb permission set by making use of the xbits
authorJohn Johansen <john.johansen@canonical.com>
Tue, 10 May 2022 09:21:22 +0000 (02:21 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 3 Oct 2022 21:49:03 +0000 (14:49 -0700)
commit3c076531c5529c94cee330dffc4615ad02bb6edb
tree85911e5c6d42a3e27f14334637d83be61b183b6b
parent1cf26c3d2c4c2098e39a9905174d7842b531e693
apparmor: extend policydb permission set by making use of the xbits

The policydb permission set has left the xbits unused. Make them
available for mediation.

Note: that this does not bring full auditing control of the
permissions as there are not enough bits. The quieting of denials is
provided as that is used more than forced auditing of allowed
permissions.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/policy_unpack.c