forked from luck/tmp_suning_uos_patched
c29bceb396
Add support for AppArmor to explicitly fail requested domain transitions if NO_NEW_PRIVS is set and the task is not unconfined. Transitions from unconfined are still allowed because this always results in a reduction of privileges. Acked-by: Eric Paris <eparis@redhat.com> Signed-off-by: Will Drewry <wad@chromium.org> Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Andy Lutomirski <luto@amacapital.net> v18: new acked-by, new description Signed-off-by: James Morris <james.l.morris@oracle.com> |
||
|---|---|---|
| .. | ||
| include | ||
| .gitignore | ||
| apparmorfs.c | ||
| audit.c | ||
| capability.c | ||
| context.c | ||
| domain.c | ||
| file.c | ||
| ipc.c | ||
| Kconfig | ||
| lib.c | ||
| lsm.c | ||
| Makefile | ||
| match.c | ||
| path.c | ||
| policy_unpack.c | ||
| policy.c | ||
| procattr.c | ||
| resource.c | ||
| sid.c | ||