Message	SHA1
apparmor: change how profile replacement update is done ... remove the use of replaced by chaining and move to profile invalidation and lookup to handle task replacement. Replacement chaining can result in large chains of profiles being pinned in memory when one profile in the chain is use. With implicit labeling this will be even more of a problem, so move to a direct lookup method. Signed-off-by: John Johansen <john.johansen@canonical.com> John Johansen   commited 2013-08-14 11:42:06 -07:00	77b071b340
apparmor: localize getting the security context to a few macros ... Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com> John Johansen   commited 2013-04-28 00:39:35 -07:00	214beacaa7
apparmor: use common fn to clear task_context for domain transitions ... Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> John Johansen   commited 2013-04-28 00:36:20 -07:00	7a2871b566
apparmor: add utility function to get an arbitrary tasks profile. ... Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> John Johansen   commited 2013-04-28 00:35:53 -07:00	3cfcc19e0b
AppArmor: contexts used in attaching policy to system objects ... AppArmor contexts attach profiles and state to tasks, files, etc. when a direct profile reference is not sufficient. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org> John Johansen   authored and   James Morris   commited 2010-08-02 15:35:12 +10:00	c75afcd153