linux/security/apparmor/include/lib.h, branch v4.11

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2017-02-21T20:49:56Z

Pull security layer updates from James Morris: "Highlights: - major AppArmor update: policy namespaces & lots of fixes - add /sys/kernel/security/lsm node for easy detection of loaded LSMs - SELinux cgroupfs labeling support - SELinux context mounts on tmpfs, ramfs, devpts within user namespaces - improved TPM 2.0 support" * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (117 commits) tpm: declare tpm2_get_pcr_allocation() as static tpm: Fix expected number of response bytes of TPM1.2 PCR Extend tpm xen: drop unneeded chip variable tpm: fix misspelled "facilitate" in module parameter description tpm_tis: fix the error handling of init_tis() KEYS: Use memzero_explicit() for secret data KEYS: Fix an error code in request_master_key() sign-file: fix build error in sign-file.c with libressl selinux: allow changing labels for cgroupfs selinux: fix off-by-one in setprocattr tpm: silence an array overflow warning tpm: fix the type of owned field in cap_t tpm: add securityfs support for TPM 2.0 firmware event log tpm: enhance read_log_of() to support Physical TPM event log tpm: enhance TPM 2.0 PCR extend to support multiple banks tpm: implement TPM 2.0 capability to get active PCR banks tpm: fix RC value check in tpm2_seal_trusted tpm_tis: fix iTPM probe via probe_itpm() function tpm: Begin the process to deprecate user_read_timer tpm: remove tpm_read_index and tpm_write_index from tpm.h ...

apparmor: pass gfp param into aa_policy_init()

2017-01-16T09:18:27Z

Signed-off-by: John Johansen

apparmor: constify policy name and hname

2017-01-16T09:18:26Z

Signed-off-by: John Johansen

apparmor: rename hname_tail to basename

2017-01-16T09:18:25Z

Rename to the shorter and more familiar shell cmd name Signed-off-by: John Johansen

apparmor: rename mediated_filesystem() to path_mediated_fs()

2017-01-16T09:18:24Z

Rename to indicate the test is only about whether path mediation is used, not whether other types of mediation might be used. Signed-off-by: John Johansen

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16T09:18:24Z

Signed-off-by: John Johansen

apparmor: add macro for bug asserts to check that a lock is held

2017-01-16T09:18:23Z

Signed-off-by: John Johansen

apparmor: add lib fn to find the "split" for fqnames

2017-01-16T09:18:21Z

Signed-off-by: John Johansen

apparmor: split out shared policy_XXX fns to lib

2017-01-16T08:42:14Z

Signed-off-by: John Johansen

apparmor: move lib definitions into separate lib include

2017-01-16T08:42:13Z

Signed-off-by: John Johansen