]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: make export of raw binary profile to userspace optional
authorJohn Johansen <john.johansen@canonical.com>
Mon, 1 Feb 2021 11:43:18 +0000 (03:43 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Sat, 9 Jul 2022 22:13:59 +0000 (15:13 -0700)
commitaaad3d7bbed96a4002bb6c4c008b1259d89945f9
treeb16d5eda5b6e54da16541ec8f7d911411f409ef5
parent38bae3693466cf5c37419769eef9822e54b24d30
apparmor: make export of raw binary profile to userspace optional

Embedded systems have limited space and don't need the introspection
or checkpoint restore capability provided by exporting the raw
profile binary data so make it so make it a config option.

This will reduce run time memory use and also speed up policy loads.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/Kconfig
security/apparmor/apparmorfs.c
security/apparmor/include/apparmor.h
security/apparmor/include/apparmorfs.h
security/apparmor/lsm.c
security/apparmor/policy.c
security/apparmor/policy_unpack.c