apparmor: add the ability for policy to specify a permission table
authorJohn Johansen <john.johansen@canonical.com>
Fri, 26 Aug 2022 15:53:42 +0000 (08:53 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 3 Oct 2022 21:49:03 +0000 (14:49 -0700)
commitfd1b2b95a21177eaa9e26989637e477be4d93b2f
tree99fb028cb7d245e96c8664ad420e937ef86719e0
parent371e50a0b19f9765bfb9e4f172e72f4e9a4625bc
apparmor: add the ability for policy to specify a permission table

Currently permissions are encoded in the dfa accept entries that are
then mapped to an internal permission structure. This limits the
permissions that userspace can specify, so allow userspace to directly
specify the permission table.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/include/policy.h
security/apparmor/policy_unpack.c