John Johansen 3a2dc8382a AppArmor: Fix security_task_setrlimit logic for 2.6.36 changes ...

2.6.36 introduced the abilitiy to specify the task that is having its
rlimits set.  Update mediation to ensure that confined tasks can only
set their own group_leader as expected by current policy.

Add TODO note about extending policy to support setting other tasks
rlimits.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>

2010-09-08 09:19:29 +10:00

..

apparmor.h

…

apparmorfs.h

AppArmor: userspace interfaces

2010-08-02 15:35:13 +10:00

audit.h

…

capability.h

AppArmor: mediation of non file objects

2010-08-02 15:38:35 +10:00

context.h

AppArmor: contexts used in attaching policy to system objects

2010-08-02 15:35:12 +10:00

domain.h

AppArmor: functions for domain transitions

2010-08-02 15:35:14 +10:00

file.h

AppArmor: file enforcement routines

2010-08-02 15:35:14 +10:00

ipc.h

AppArmor: mediation of non file objects

2010-08-02 15:38:35 +10:00

match.h

AppArmor: dfa match engine

2010-08-02 15:35:13 +10:00

path.h

…

policy_unpack.h

AppArmor: policy routines for loading and unpacking policy

2010-08-02 15:38:36 +10:00

policy.h

AppArmor: core policy routines

2010-08-02 15:38:37 +10:00

procattr.h

AppArmor: userspace interfaces

2010-08-02 15:35:13 +10:00

resource.h

AppArmor: Fix security_task_setrlimit logic for 2.6.36 changes

2010-09-08 09:19:29 +10:00

sid.h

AppArmor: core policy routines

2010-08-02 15:38:37 +10:00