linux_dsm_epyc7002/security/apparmor
John Johansen 474d6b7510 apparmor: prepare to support newer versions of policy
Newer policy encodes more than just version in the version tag,
so add masking to make sure the comparison remains correct.

Note: this is fully compatible with older policy as it will never set
the bits being masked out.

Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:32 -08:00
..
include apparmor: name null-XXX profiles after the executable 2017-01-16 01:18:30 -08:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c apparmor: prepare to support newer versions of policy 2017-01-16 01:18:32 -08:00
audit.c apparmor: split apparmor policy namespaces code into its own file 2017-01-16 00:42:15 -08:00
capability.c apparmor: fix capability to not use the current task, during reporting 2013-10-29 21:33:37 -07:00
context.c apparmor: rename replacedby to proxy 2017-01-16 01:18:19 -08:00
crypto.c apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling 2016-07-27 17:39:26 +10:00
domain.c apparmor: name null-XXX profiles after the executable 2017-01-16 01:18:30 -08:00
file.c apparmor: use designated initializers 2017-01-15 20:00:32 -08:00
ipc.c apparmor: fix capability to not use the current task, during reporting 2013-10-29 21:33:37 -07:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
lib.c apparmor: update policy_destroy to use new debug asserts 2017-01-16 01:18:27 -08:00
lsm.c apparmor: remove paranoid load switch 2017-01-16 01:18:30 -08:00
Makefile apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00
match.c apparmor: move lib definitions into separate lib include 2017-01-16 00:42:13 -08:00
path.c apparmor: internal paths should be treated as disconnected 2016-07-12 08:43:10 -07:00
policy_ns.c apparmor: pass gfp_t parameter into profile allocation 2017-01-16 01:18:29 -08:00
policy_unpack.c apparmor: prepare to support newer versions of policy 2017-01-16 01:18:32 -08:00
policy.c apparmor: name null-XXX profiles after the executable 2017-01-16 01:18:30 -08:00
procattr.c apparmor: allow ns visibility question to consider subnses 2017-01-16 01:18:22 -08:00
resource.c apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task 2016-07-12 08:43:10 -07:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00