]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
apparmor: add additional flags to extended permission.
authorJohn Johansen <john.johansen@canonical.com>
Sun, 23 Jul 2023 09:30:33 +0000 (02:30 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sat, 18 Jan 2025 14:47:12 +0000 (06:47 -0800)
commit2e12c5f060176ede209673e4f63ea5d0e3c5814c
tree1ba485036de4844ba0d4ff93230b41c605c20677
parentde4754c801f4ceefc6ce0d13480c506e0a91b449
apparmor: add additional flags to extended permission.

This is a step towards merging the file and policy state machines.

With the switch to extended permissions the state machine's ACCEPT2
table became unused freeing it up to store state specific flags. The
first flags to be stored are FLAG_OWNER and FLAG other which paves the
way towards merging the file and policydb perms into a single
permission table.

Currently Lookups based on the objects ownership conditional will
still need separate fns, this will be address in a following patch.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c
security/apparmor/domain.c
security/apparmor/file.c
security/apparmor/include/file.h
security/apparmor/include/policy.h
security/apparmor/policy_compat.c
security/apparmor/policy_unpack.c