| commit | c88d4c7b049e87998ac0a9f455aa545cc895ef92 | |
| author | John Johansen <john.johansen@canonical.com> | |
| Thu, 29 Jul 2010 21:48:00 +0000 (29 14:48 -0700) | ||
| committer | James Morris <jmorris@namei.org> | |
| Mon, 2 Aug 2010 05:38:37 +0000 (2 15:38 +1000) | ||
| tree | 1859582b4afec1116b6831ea89ae27c35209991a | treesnapshot (tar.gz zip) |
| parent | 736ec752d95e91e77cc0e8c97c057ab076ac2f51 | commitdiff |
AppArmor: core policy routines
The basic routines and defines for AppArmor policy. AppArmor policy
is defined by a few basic components.
profiles - the basic unit of confinement contain all the information
to enforce policy on a task
Profiles tend to be named after an executable that they
will attach to but this is not required.
namespaces - a container for a set of profiles that will be used
during attachment and transitions between profiles.
sids - which provide a unique id for each profile
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
The basic routines and defines for AppArmor policy. AppArmor policy
is defined by a few basic components.
profiles - the basic unit of confinement contain all the information
to enforce policy on a task
Profiles tend to be named after an executable that they
will attach to but this is not required.
namespaces - a container for a set of profiles that will be used
during attachment and transitions between profiles.
sids - which provide a unique id for each profile
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
| security/apparmor/include/policy.h | [new file with mode: 0644] | blob |
| security/apparmor/include/sid.h | [new file with mode: 0644] | blob |
| security/apparmor/policy.c | [new file with mode: 0644] | blob |
| security/apparmor/sid.c | [new file with mode: 0644] | blob |