mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-19 23:37:50 +07:00
58acf9d911
the policy_lock parameter is a one way switch that prevents policy from being further modified. Unfortunately some of the module parameters can effectively modify policy by turning off enforcement. split policy_admin_capable into a view check and a full admin check, and update the admin check to test the policy_lock parameter. Signed-off-by: John Johansen <john.johansen@canonical.com> |
||
---|---|---|
.. | ||
apparmor.h | ||
apparmorfs.h | ||
audit.h | ||
capability.h | ||
context.h | ||
crypto.h | ||
domain.h | ||
file.h | ||
ipc.h | ||
match.h | ||
path.h | ||
policy_unpack.h | ||
policy.h | ||
procattr.h | ||
resource.h | ||
sid.h |