apparmor: add the base fns() for domain labels

Begin moving apparmor to using broader domain labels, that will allow
run time computation of domain type splitting via "stacking" of
profiles into a domain label vec.

Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
John Johansen 2017-06-09 06:19:19 -07:00
parent 192ca6b55a
commit f1bd904175
2 changed files with 2561 additions and 0 deletions

2120
security/apparmor/label.c Normal file

File diff suppressed because it is too large Load diff