3 Commits

Author	SHA1	Message	Date
John Johansen	a4c3f89c9b	apparmor: fixup secid map conversion to using IDR ... The IDR conversion did not handle an error case for when allocating a mapping fails, and it did not ensure that mappings did not allocate or use a 0 value, which is used as an invalid secid. Which is used when a mapping fails. Fixes: 3ae7eb49a2be ("apparmor: Use an IDR to allocate apparmor secids") Signed-off-by: John Johansen <john.johansen@canonical.com>	2018-06-07 01:50:49 -07:00
John Johansen	c092921219	apparmor: add support for mapping secids and using secctxes ... Use a radix tree to provide a map between the secid and the label, and along with it a basic ability to provide secctx conversion. Shared/cached secctx will be added later. Signed-off-by: John Johansen <john.johansen@canonical.com>	2018-05-02 00:48:55 -07:00
John Johansen	121d4a91e3	apparmor: rename sid to secid ... Move to common terminology with other LSMs and kernel infrastucture Signed-off-by: John Johansen <john.johansen@canonical.com>	2017-01-16 00:42:17 -08:00