Tyler Hicks e3ea1ca59a apparmor: sysctl to enable unprivileged user ns AppArmor policy loading ... If this sysctl is set to non-zero and a process with CAP_MAC_ADMIN in the root namespace has created an AppArmor policy namespace, unprivileged processes will be able to change to a profile in the newly created AppArmor policy namespace and, if the profile allows CAP_MAC_ADMIN and appropriate file permissions, will be able to load policy in the respective policy namespace. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com>		2017-01-16 01:18:52 -08:00
..
include	apparmor: support querying extended trusted helper extra data	2017-01-16 01:18:51 -08:00
.gitignore	AppArmor: remove af_names.h from .gitignore	2012-09-01 08:35:34 -07:00
apparmorfs.c	apparmor: support querying extended trusted helper extra data	2017-01-16 01:18:51 -08:00
audit.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
capability.c	apparmor: update cap audit to check SECURITY_CAP_NOAUDIT	2017-01-16 01:18:50 -08:00
context.c	apparmor: rename context abreviation cxt to the more standard ctx	2017-01-16 01:18:45 -08:00
crypto.c	apparmor: allow introspecting the loaded policy pre internal transform	2017-01-16 01:18:42 -08:00
domain.c	apparmor: convert change_profile to use fqname later to give better control	2017-01-16 01:18:49 -08:00
file.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
ipc.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
Kconfig	apparmor: add debug assert AA_BUG and Kconfig to control debug info	2017-01-16 01:18:24 -08:00
lib.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
lsm.c	apparmor: sysctl to enable unprivileged user ns AppArmor policy loading	2017-01-16 01:18:52 -08:00
Makefile	apparmor: rename sid to secid	2017-01-16 00:42:17 -08:00
match.c	apparmor: add a default null dfa	2017-01-16 01:18:34 -08:00
nulldfa.in	apparmor: add a default null dfa	2017-01-16 01:18:34 -08:00
path.c	apparmor: internal paths should be treated as disconnected	2016-07-12 08:43:10 -07:00
policy_ns.c	apparmor: track ns level so it can be used to help in view checks	2017-01-16 01:18:36 -08:00
policy_unpack.c	apparmor: support querying extended trusted helper extra data	2017-01-16 01:18:51 -08:00
policy.c	apparmor: sysctl to enable unprivileged user ns AppArmor policy loading	2017-01-16 01:18:52 -08:00
procattr.c	apparmor: convert change_profile to use fqname later to give better control	2017-01-16 01:18:49 -08:00
resource.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
secid.c	apparmor: rename sid to secid	2017-01-16 00:42:17 -08:00