apparmor: add support for absolute root view based labels
authorJohn Johansen <john.johansen@canonical.com>
Sun, 6 Aug 2017 12:39:08 +0000 (05:39 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 22 Sep 2017 20:00:58 +0000 (13:00 -0700)
commit26b7899510ae243e392960704ebdba52d05fbb13
tree1a83d9bf79e3d404f7f5a9f8d7b203396432beec
parentf872af75d325cc449b6621a0d30a4f2ba77dd092
apparmor: add support for absolute root view based labels

With apparmor policy virtualization based on policy namespace View's
we don't generally want/need absolute root based views, however there
are cases like debugging and some secid based conversions where
using a root based view is important.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
security/apparmor/include/label.h
security/apparmor/label.c