| commit | c961ee5f21b202dea60b63eeef945730d92e46a6 | [log] [tgz] |
|---|---|---|
| author | John Johansen <john.johansen@canonical.com> | Thu May 25 06:35:38 2017 -0700 |
| committer | John Johansen <john.johansen@canonical.com> | Thu Jun 08 12:51:52 2017 -0700 |
| tree | 111ea19fa70a8cb34df79564b8e61e31bbb3afdc | |
| parent | 98407f0a0d378df27bfea79301a3aba42d7cea1c [diff] |
apparmor: convert from securityfs to apparmorfs for policy ns files Virtualize the apparmor policy/ directory so that the current namespace affects what part of policy is seen. To do this convert to using apparmorfs for policy namespace files and setup a magic symlink in the securityfs apparmor dir to access those files. Signed-off-by: John Johansen <john.johansen@canonical.com> Reviewed-by: Seth Arnold <seth.arnold@canonical.com> Reviewed-by: Kees Cook <keescook@chromium.org>