efeee83a | 16-Jan-2017 |
John Johansen <john.johansen@canonical.com> |
apparmor: rename mediated_filesystem() to path_mediated_fs()
Rename to indicate the test is only about whether path mediation is used, not whether other types of mediation might be used.
Signed-off
apparmor: rename mediated_filesystem() to path_mediated_fs()
Rename to indicate the test is only about whether path mediation is used, not whether other types of mediation might be used.
Signed-off-by: John Johansen <john.johansen@canonical.com>
show more ...
|
58acf9d9 | 23-Jun-2016 |
John Johansen <john.johansen@canonical.com> |
apparmor: fix module parameters can be changed after policy is locked
the policy_lock parameter is a one way switch that prevents policy from being further modified. Unfortunately some of the module
apparmor: fix module parameters can be changed after policy is locked
the policy_lock parameter is a one way switch that prevents policy from being further modified. Unfortunately some of the module parameters can effectively modify policy by turning off enforcement.
split policy_admin_capable into a view check and a full admin check, and update the admin check to test the policy_lock parameter.
Signed-off-by: John Johansen <john.johansen@canonical.com>
show more ...
|