summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include/apparmor.h
diff options
context:
space:
mode:
authorJohn Johansen2012-02-16 16:07:53 +0100
committerJohn Johansen2012-03-15 03:09:03 +0100
commitad5ff3db53c68c2f12936bc74ea5dfe0af943592 (patch)
tree72d9ac19fdca90d283a05f444870847ce5fb9f0c /security/apparmor/include/apparmor.h
parentAppArmor: Move path failure information into aa_get_name and rename (diff)
downloadkernel-qcow2-linux-ad5ff3db53c68c2f12936bc74ea5dfe0af943592.tar.gz
kernel-qcow2-linux-ad5ff3db53c68c2f12936bc74ea5dfe0af943592.tar.xz
kernel-qcow2-linux-ad5ff3db53c68c2f12936bc74ea5dfe0af943592.zip
AppArmor: Add ability to load extended policy
Add the base support for the new policy extensions. This does not bring any additional functionality, or change current semantics. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com>
Diffstat (limited to 'security/apparmor/include/apparmor.h')
-rw-r--r--security/apparmor/include/apparmor.h13
1 files changed, 13 insertions, 0 deletions
diff --git a/security/apparmor/include/apparmor.h b/security/apparmor/include/apparmor.h
index 248c408ddc1b..40aedd9f73ea 100644
--- a/security/apparmor/include/apparmor.h
+++ b/security/apparmor/include/apparmor.h
@@ -19,6 +19,19 @@
#include "match.h"
+/*
+ * Class of mediation types in the AppArmor policy db
+ */
+#define AA_CLASS_ENTRY 0
+#define AA_CLASS_UNKNOWN 1
+#define AA_CLASS_FILE 2
+#define AA_CLASS_CAP 3
+#define AA_CLASS_NET 4
+#define AA_CLASS_RLIMITS 5
+#define AA_CLASS_DOMAIN 6
+
+#define AA_CLASS_LAST AA_CLASS_DOMAIN
+
/* Control parameters settable through module/boot flags */
extern enum audit_mode aa_g_audit;
extern bool aa_g_audit_header;