AppArmor policy needs to be able to be resolved based on the policy namespace a task is confined by. Add a base apparmorfs filesystem that (like nsfs) will exist as a kern mount and be accessed via jump_link through a securityfs file. Setup the base apparmorfs fns and data, but don't use it yet.
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -80,6 +80,8 @@ · 79 unmodified lines | |||
| 80 | #define BTRFS_TEST_MAGIC 0x73727279 | 80 | #define BTRFS_TEST_MAGIC 0x73727279 |
| 81 | #define NSFS_MAGIC 0x6e736673 | 81 | #define NSFS_MAGIC 0x6e736673 |
| 82 | #define BPF_FS_MAGIC 0xcafe4a11 | 82 | #define BPF_FS_MAGIC 0xcafe4a11 |
| 83 | #define AAFS_MAGIC 0x5a3c69f0 | ||
| 84 | |||
| 83 | /* Since UDF 2.01 is ISO 13346 based... */ | 85 | /* Since UDF 2.01 is ISO 13346 based... */ |
| 84 | #define UDF_SUPER_MAGIC 0x15013346 | 86 | #define UDF_SUPER_MAGIC 0x15013346 |
| 85 | #define BALLOON_KVM_MAGIC 0x13661366 | 87 | #define BALLOON_KVM_MAGIC 0x13661366 |