The sid is not going to be a direct property of a profile anymore, instead it will be directly related to the label, and the profile will pickup a label back reference. For null-profiles replace the use of sid with a per namespace unique id. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com>
		
			
				
	
	
		
			26 lines
		
	
	
	
		
			604 B
			
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			26 lines
		
	
	
	
		
			604 B
			
		
	
	
	
		
			C
		
	
	
	
	
	
/*
 | 
						|
 * AppArmor security module
 | 
						|
 *
 | 
						|
 * This file contains AppArmor security identifier (sid) definitions
 | 
						|
 *
 | 
						|
 * Copyright 2009-2010 Canonical Ltd.
 | 
						|
 *
 | 
						|
 * This program is free software; you can redistribute it and/or
 | 
						|
 * modify it under the terms of the GNU General Public License as
 | 
						|
 * published by the Free Software Foundation, version 2 of the
 | 
						|
 * License.
 | 
						|
 */
 | 
						|
 | 
						|
#ifndef __AA_SID_H
 | 
						|
#define __AA_SID_H
 | 
						|
 | 
						|
#include <linux/types.h>
 | 
						|
 | 
						|
/* sid value that will not be allocated */
 | 
						|
#define AA_SID_INVALID 0
 | 
						|
#define AA_SID_ALLOC AA_SID_INVALID
 | 
						|
 | 
						|
u32 aa_alloc_sid(void);
 | 
						|
void aa_free_sid(u32 sid);
 | 
						|
 | 
						|
#endif /* __AA_SID_H */
 |