John Johansen 5ac8c355ae apparmor: allow introspecting the loaded policy pre internal transform ...

Store loaded policy and allow introspecting it through apparmorfs. This
has several uses from debugging, policy validation, and policy checkpoint
and restore for containers.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2017-01-16 01:18:42 -08:00

..

include

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

.gitignore

AppArmor: remove af_names.h from .gitignore

2012-09-01 08:35:34 -07:00

apparmorfs.c

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

audit.c

apparmor: split apparmor policy namespaces code into its own file

2017-01-16 00:42:15 -08:00

capability.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

context.c

apparmor: rename replacedby to proxy

2017-01-16 01:18:19 -08:00

crypto.c

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

domain.c

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

file.c

apparmor: use designated initializers

2017-01-15 20:00:32 -08:00

ipc.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

Kconfig

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16 01:18:24 -08:00

lib.c

apparmor: update policy_destroy to use new debug asserts

2017-01-16 01:18:27 -08:00

lsm.c

apparmor: add ns being viewed as a param to policy_admin_capable()

2017-01-16 01:18:40 -08:00

Makefile

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00

match.c

apparmor: add a default null dfa

2017-01-16 01:18:34 -08:00

nulldfa.in

apparmor: add a default null dfa

2017-01-16 01:18:34 -08:00

path.c

apparmor: internal paths should be treated as disconnected

2016-07-12 08:43:10 -07:00

policy_ns.c

apparmor: track ns level so it can be used to help in view checks

2017-01-16 01:18:36 -08:00

policy_unpack.c

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

policy.c

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

procattr.c

apparmor: allow ns visibility question to consider subnses

2017-01-16 01:18:22 -08:00

resource.c

apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task

2016-07-12 08:43:10 -07:00

secid.c

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00