3 commits

Author	SHA1	Message	Date
John Johansen	038165070a	apparmor: allow setting any profile into the unconfined state ... Allow emulating the default profile behavior from boot, by allowing loading of a profile in the unconfined state into a new NS. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com>	2013-08-14 11:42:07 -07:00
John Johansen	dd51c84857	apparmor: provide base for multiple profiles to be replaced at once ... previously profiles had to be loaded one at a time, which could result in cases where a replacement of a set would partially succeed, and then fail resulting in inconsistent policy. Allow multiple profiles to replaced "atomically" so that the replacement either succeeds or fails for the entire set of profiles. Signed-off-by: John Johansen <john.johansen@canonical.com>	2013-08-14 11:42:06 -07:00
John Johansen	736ec752d9	AppArmor: policy routines for loading and unpacking policy ... AppArmor policy is loaded in a platform independent flattened binary stream. Verify and unpack the data converting it to the internal format needed for enforcement. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org>	2010-08-02 15:38:36 +10:00