]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commitdiff
apparmor: export that basic profile namespaces are supported
authorJohn Johansen <john.johansen@canonical.com>
Sat, 10 Jun 2017 00:25:03 +0000 (17:25 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 11 Jun 2017 00:11:48 +0000 (17:11 -0700)
Allow userspace to detect that basic profile policy namespaces are
available.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c

index 229845009a95c0768eb0ce2523c8278b7c4490f6..853c2ec8e0c9521e53fe2c6edecb0b7913cfad26 100644 (file)
@@ -2151,6 +2151,12 @@ static struct aa_sfs_entry aa_sfs_entry_policy[] = {
        { }
 };
 
+static struct aa_sfs_entry aa_sfs_entry_ns[] = {
+       AA_SFS_FILE_BOOLEAN("profile",          1),
+       AA_SFS_FILE_BOOLEAN("pivot_root",       1),
+       { }
+};
+
 static struct aa_sfs_entry aa_sfs_entry_query_label[] = {
        AA_SFS_FILE_STRING("perms", "allow deny audit quiet"),
        AA_SFS_FILE_BOOLEAN("data",             1),
@@ -2166,6 +2172,7 @@ static struct aa_sfs_entry aa_sfs_entry_features[] = {
        AA_SFS_DIR("policy",                    aa_sfs_entry_policy),
        AA_SFS_DIR("domain",                    aa_sfs_entry_domain),
        AA_SFS_DIR("file",                      aa_sfs_entry_file),
+       AA_SFS_DIR("namespaces",                aa_sfs_entry_ns),
        AA_SFS_FILE_U64("capability",           VFS_CAP_FLAGS_MASK),
        AA_SFS_DIR("rlimit",                    aa_sfs_entry_rlimit),
        AA_SFS_DIR("caps",                      aa_sfs_entry_caps),