apparmor: make export of raw binary profile to userspace optional
authorJohn Johansen <john.johansen@canonical.com>
Mon, 1 Feb 2021 11:43:18 +0000 (03:43 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Wed, 29 Dec 2021 01:23:38 +0000 (17:23 -0800)
commitabfb9c0725f274c75ca2a51684c2dd842a8dc254
treec6daa3418c43c3986ba71466e4b67fcd00b57d59
parent6a029e3d3e4af7b1bc5a8053a86604fdbd548034
apparmor: make export of raw binary profile to userspace optional

Embedded systems have limited space and don't need the introspection
or checkpoint restore capability provided by exporting the raw
profile binary data so make it so make it a config option.

This will reduce run time memory use and also speed up policy loads.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/Kconfig
security/apparmor/apparmorfs.c
security/apparmor/include/apparmor.h
security/apparmor/include/apparmorfs.h
security/apparmor/lsm.c
security/apparmor/policy.c
security/apparmor/policy_unpack.c