diff options
| author | John Johansen <john.johansen@canonical.com> | 2010-07-29 23:48:00 +0200 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2010-08-02 07:38:37 +0200 |
| commit | c88d4c7b049e87998ac0a9f455aa545cc895ef92 (patch) | |
| tree | 1859582b4afec1116b6831ea89ae27c35209991a /security/apparmor/include/sid.h | |
| parent | AppArmor: policy routines for loading and unpacking policy (diff) | |
| download | linux-c88d4c7b049e87998ac0a9f455aa545cc895ef92.tar.xz linux-c88d4c7b049e87998ac0a9f455aa545cc895ef92.zip | |
AppArmor: core policy routines
The basic routines and defines for AppArmor policy. AppArmor policy
is defined by a few basic components.
profiles - the basic unit of confinement contain all the information
to enforce policy on a task
Profiles tend to be named after an executable that they
will attach to but this is not required.
namespaces - a container for a set of profiles that will be used
during attachment and transitions between profiles.
sids - which provide a unique id for each profile
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/apparmor/include/sid.h')
| -rw-r--r-- | security/apparmor/include/sid.h | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/security/apparmor/include/sid.h b/security/apparmor/include/sid.h new file mode 100644 index 000000000000..020db35c3010 --- /dev/null +++ b/security/apparmor/include/sid.h @@ -0,0 +1,24 @@ +/* + * AppArmor security module + * + * This file contains AppArmor security identifier (sid) definitions + * + * Copyright 2009-2010 Canonical Ltd. + * + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License as + * published by the Free Software Foundation, version 2 of the + * License. + */ + +#ifndef __AA_SID_H +#define __AA_SID_H + +#include <linux/types.h> + +struct aa_profile; + +u32 aa_alloc_sid(void); +void aa_free_sid(u32 sid); + +#endif /* __AA_SID_H */ |