apparmor: transition from a list of rules to a vector of rules
authorJohn Johansen <john.johansen@canonical.com>
Mon, 17 Feb 2025 09:46:37 +0000 (01:46 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 20 Jul 2025 09:31:06 +0000 (02:31 -0700)
commit9afdc6abb007d5a86f54e9f10870ac1468155ca5
treeca4322b73a8c95da56d8e0866ef2c490791ffdd1
parentf9c9dce01e9640d94a37304bddc97b738ee4ac35
apparmor: transition from a list of rules to a vector of rules

The set of rules on a profile is not dynamically extended, instead
if a new ruleset is needed a new version of the profile is created.
This allows us to use a vector of rules instead of a list, slightly
reducing memory usage and simplifying the code.

Signed-off-by: John Johansen <john.johansen@canonical.com>
15 files changed:
security/apparmor/af_unix.c
security/apparmor/apparmorfs.c
security/apparmor/capability.c
security/apparmor/domain.c
security/apparmor/file.c
security/apparmor/include/label.h
security/apparmor/include/policy.h
security/apparmor/ipc.c
security/apparmor/lsm.c
security/apparmor/mount.c
security/apparmor/net.c
security/apparmor/policy.c
security/apparmor/policy_unpack.c
security/apparmor/resource.c
security/apparmor/task.c