Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-09-22 | apparmor: add support for absolute root view based labels | John Johansen | |
With apparmor policy virtualization based on policy namespace View's we don't generally want/need absolute root based views, however there are cases like debugging and some secid based conversions where using a root based view is important. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> | |||
2017-06-10 | apparmor: add the base fns() for domain labels | John Johansen | |
Begin moving apparmor to using broader domain labels, that will allow run time computation of domain type splitting via "stacking" of profiles into a domain label vec. Signed-off-by: John Johansen <john.johansen@canonical.com> |