| Message ID | d51ede4b-45c9-c7dd-f92d-3d65996a29a4@canonical.com |
|---|---|
| State | New |
| Headers | show
Return-Path: <kernel-team-bounces@lists.ubuntu.com> X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) by ozlabs.org (Postfix) with ESMTP id 3skr3x5wgrz9sRZ; Thu, 29 Sep 2016 07:11:41 +1000 (AEST) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.76) (envelope-from <kernel-team-bounces@lists.ubuntu.com>) id 1bpM8f-00053u-5C; Wed, 28 Sep 2016 21:11:37 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by huckleberry.canonical.com with esmtp (Exim 4.76) (envelope-from <john.johansen@canonical.com>) id 1bpM8Z-00053e-Rc for kernel-team@lists.ubuntu.com; Wed, 28 Sep 2016 21:11:31 +0000 Received: from static-50-53-49-26.bvtn.or.frontiernet.net ([50.53.49.26] helo=[192.168.192.153]) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from <john.johansen@canonical.com>) id 1bpM8Z-0002dU-EC; Wed, 28 Sep 2016 21:11:31 +0000 To: Kernel team list <kernel-team@lists.ubuntu.com> From: John Johansen <john.johansen@canonical.com> Subject: yakkety: pull-request apparmor: check point/restore support for lxc/lxd Organization: Canonical Message-ID: <d51ede4b-45c9-c7dd-f92d-3d65996a29a4@canonical.com> Date: Wed, 28 Sep 2016 14:11:28 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 Cc: Andy Whitcroft <apw@canonical.com> X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.14 Precedence: list List-Id: Kernel team discussions <kernel-team.lists.ubuntu.com> List-Unsubscribe: <https://lists.ubuntu.com/mailman/options/kernel-team>, <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe> List-Archive: <https://lists.ubuntu.com/archives/kernel-team> List-Post: <mailto:kernel-team@lists.ubuntu.com> List-Help: <mailto:kernel-team-request@lists.ubuntu.com?subject=help> List-Subscribe: <https://lists.ubuntu.com/mailman/listinfo/kernel-team>, <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: kernel-team-bounces@lists.ubuntu.com |
please pull the following set of patches for apparmor They add checkpoint/restore support to apparmor to support lxc/d for https://bugs.launchpad.net/snappy/+bug/1611078 --- The following changes since commit fef251ab034337890a085831eaf1ef624d93609e: UBUNTU: [Config] CONFIG_ZONE_DMA=y for generic (2016-09-28 10:18:28 -0600) are available in the git repository at: ssh://kernel.ubuntu.com/srv/kernel.ubuntu.com/git/jj/ubuntu-yakkety.git v4.8-aa3.5 for you to fetch changes up to 8a419831c3839815881f548a527f111708540767: apparmor: bump domain stacking version to 1.2 (2016-09-28 14:01:38 -0700) ---------------------------------------------------------------- John Johansen (11): apparmor: add interface to be able to grab loaded policy securityfs: update interface to allow inode_ops, and setup from vfs fns apparmor: refactor aa_prepare_ns into prepare_ns and create_ns routines apparmor: add __aa_find_ns fn apparmor: add mkdir/rmdir interface to manage policy namespaces apparmor: fix oops in pivot_root mediation apparmor: fix warning that fn build_pivotroot discards const apparmor: add interface to advertise status of current task stacking apparmor: update policy permissions to consider ns being viewed/managed apparmor: add per ns policy management interface apparmor: bump domain stacking version to 1.2 include/linux/security.h | 32 +- security/apparmor/apparmorfs.c | 502 +++++++++++++++++++++++++++--- security/apparmor/crypto.c | 37 +++ security/apparmor/include/apparmorfs.h | 14 +- security/apparmor/include/crypto.h | 5 + security/apparmor/include/policy.h | 14 +- security/apparmor/include/policy_ns.h | 23 ++ security/apparmor/include/policy_unpack.h | 27 +- security/apparmor/lsm.c | 22 +- security/apparmor/mount.c | 9 +- security/apparmor/policy.c | 57 ++-- security/apparmor/policy_ns.c | 110 ++++--- security/apparmor/policy_unpack.c | 29 +- security/inode.c | 103 ++++-- 14 files changed, 824 insertions(+), 160 deletions(-)