10  * AppArmor policy is based around profiles, which contain the rules a
13  * visible set of profiles or by following a profiles attachment rules.
16  * visible profiles.  Each namespace contains a special "unconfined" profile,
29  *	null-XXXX-YYYY - special automatically generated learning profiles
33  *	user-XXXX - user defined profiles
39  * The namespace contains the set of visible profiles that are considered
41  * the namespace so that for example a chroot can have its own set of profiles
44  * -  it allows for sub profiles or hats, which allows an application to run
50  * - it allows for binary hierarchy of profiles, so that execution history
146  * __add_profile - add a profiles to list and label tree
206 	__aa_profile_list_release(&profile->base.profiles);  in __remove_profile()
214  * __aa_profile_list_release - remove all profiles on the list and put refs
215  * @head: list of profiles  (NOT NULL)
302 	/* free children profiles */  in aa_free_profile()
470 		profile = __find_child(&parent->base.profiles, name);  in aa_find_child()
501 		profile = __strn_find_child(&policy->profiles, hname,  in __lookup_parent()
523  *          place holder profiles.
540 		profile = __strn_find_child(&policy->profiles, hname,  in __create_missing_ancestors()
583 		profile = __strn_find_child(&base->profiles, hname,  in __lookupn_profile()
594 		return __strn_find_child(&base->profiles, hname, n);  in __lookupn_profile()
702  * null profiles are added to the profile list but the list does not
751 	p = __find_child(&parent->base.profiles, bname);  in aa_new_learning_profile()
756 		__add_profile(&parent->base.profiles, profile);  in aa_new_learning_profile()
994 	if (!list_empty(&old->base.profiles)) {  in __replace_profile()
996 		list_splice_init_rcu(&old->base.profiles, &lh, synchronize_rcu);  in __replace_profile()
1002 			p = __find_child(&new->base.profiles, child->base.name);  in __replace_profile()
1014 			list_add_rcu(&child->base.list, &new->base.profiles);  in __replace_profile()
1124 	/* ensure that profiles are all for the same ns  in aa_replace_profiles()
1125 	 * TODO: update locking to remove this constraint. All profiles in  in aa_replace_profiles()
1305 				lh = &parent->base.profiles;  in aa_replace_profiles()
1307 				lh = &ns->base.profiles;  in aa_replace_profiles()
1333 	/* audit status that rest of profiles in the atomic set failed too */  in aa_replace_profiles()