linux/security/apparmor/lib.c, branch v4.11

apparmor: change aad apparmor_audit_data macro to a fn macro

2017-01-16T09:18:47Z

The aad macro can replace aad strings when it is not intended to. Switch to a fn macro so it is only applied when intended. Also at the same time cleanup audit_data initialization by putting common boiler plate behind a macro, and dropping the gfp_t parameter which will become useless. Signed-off-by: John Johansen

apparmor: update policy_destroy to use new debug asserts

2017-01-16T09:18:27Z

Signed-off-by: John Johansen

apparmor: pass gfp param into aa_policy_init()

2017-01-16T09:18:27Z

Signed-off-by: John Johansen

apparmor: constify policy name and hname

2017-01-16T09:18:26Z

Signed-off-by: John Johansen

apparmor: rename hname_tail to basename

2017-01-16T09:18:25Z

Rename to the shorter and more familiar shell cmd name Signed-off-by: John Johansen

apparmor: add lib fn to find the "split" for fqnames

2017-01-16T09:18:21Z

Signed-off-by: John Johansen

apparmor: split out shared policy_XXX fns to lib

2017-01-16T08:42:14Z

Signed-off-by: John Johansen

apparmor: move lib definitions into separate lib include

2017-01-16T08:42:13Z

Signed-off-by: John Johansen

AppArmor: Use GFP_KERNEL for __aa_kvmalloc().

2017-01-15T21:41:09Z

Calling kmalloc(GFP_NOIO) with order == PAGE_ALLOC_COSTLY_ORDER is not recommended because it might fall into infinite retry loop without invoking the OOM killer. Since aa_dfa_unpack() is the only caller of kvzalloc() and aa_dfa_unpack() which is calling kvzalloc() via unpack_table() is doing kzalloc(GFP_KERNEL), it is safe to use GFP_KERNEL from __aa_kvmalloc(). Since aa_simple_write_to_buffer() is the only caller of kvmalloc() and aa_simple_write_to_buffer() is calling copy_from_user() which is GFP_KERNEL context (see memdup_user_nul()), it is safe to use GFP_KERNEL from __aa_kvmalloc(). Therefore, replace GFP_NOIO with GFP_KERNEL. Also, since we have vmalloc() fallback, add __GFP_NORETRY so that we don't invoke the OOM killer by kmalloc(GFP_KERNEL) with order == PAGE_ALLOC_COSTLY_ORDER. Signed-off-by: Tetsuo Handa Signed-off-by: John Johansen

nick kvfree() from apparmor

2014-05-06T18:02:53Z

too many places open-code it Signed-off-by: Al Viro