apparmor: switch from profiles to using labels on contexts
authorJohn Johansen <john.johansen@canonical.com>
Fri, 9 Jun 2017 15:14:28 +0000 (08:14 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 11 Jun 2017 00:11:38 +0000 (17:11 -0700)
commit637f688dc3dc304a89f441d76f49a0e35bc49c08
tree78fee8a7aa212140c4c6b6a9b722bbba61802cab
parentf1bd904175e8190ce14aedee37e207ab51fe3b30
apparmor: switch from profiles to using labels on contexts

Begin the actual switch to using domain labels by storing them on
the context and converting the label to a singular profile where
possible.

Signed-off-by: John Johansen <john.johansen@canonical.com>
20 files changed:
security/apparmor/Makefile
security/apparmor/apparmorfs.c
security/apparmor/audit.c
security/apparmor/context.c
security/apparmor/domain.c
security/apparmor/file.c
security/apparmor/include/apparmor.h
security/apparmor/include/audit.h
security/apparmor/include/context.h
security/apparmor/include/perms.h
security/apparmor/include/policy.h
security/apparmor/include/policy_ns.h
security/apparmor/ipc.c
security/apparmor/lib.c
security/apparmor/lsm.c
security/apparmor/policy.c
security/apparmor/policy_ns.c
security/apparmor/policy_unpack.c
security/apparmor/procattr.c
security/apparmor/resource.c