John Johansen a71ada3058 apparmor: add special .null file used to "close" fds at exec ...

Borrow the special null device file from selinux to "close" fds that
don't have sufficient permissions at exec time.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2017-01-16 01:18:35 -08:00

..

apparmor.h

apparmor: move lib definitions into separate lib include

2017-01-16 00:42:13 -08:00

apparmorfs.h

apparmor: add special .null file used to "close" fds at exec

2017-01-16 01:18:35 -08:00

audit.h

apparmor: remove parent task info from audit logging

2013-10-29 21:34:04 -07:00

capability.h

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

context.h

apparmor: rename PFLAG_INVALID to PFLAG_STALE

2017-01-16 01:16:37 -08:00

crypto.h

apparmor: add the ability to report a sha1 hash of loaded policy

2013-08-14 11:42:08 -07:00

domain.h

AppArmor: functions for domain transitions

2010-08-02 15:35:14 +10:00

file.h

apparmor: constify aa_path_link()

2016-03-28 00:47:26 -04:00

ipc.h

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

lib.h

apparmor: pass gfp param into aa_policy_init()

2017-01-16 01:18:27 -08:00

match.h

apparmor: add a default null dfa

2017-01-16 01:18:34 -08:00

path.h

[apparmor] constify struct path * in a bunch of helpers

2016-03-27 23:48:14 -04:00

policy_ns.h

apparmor: add special .null file used to "close" fds at exec

2017-01-16 01:18:35 -08:00

policy_unpack.h

apparmor: allow setting any profile into the unconfined state

2013-08-14 11:42:07 -07:00

policy.h

apparmor: name null-XXX profiles after the executable

2017-01-16 01:18:30 -08:00

procattr.h

apparmor: remove "permipc" command

2013-04-28 00:36:32 -07:00

resource.h

AppArmor: export known rlimit names/value mappings in securityfs

2012-02-27 11:38:19 -08:00

secid.h

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00