[apparmor] [PATCH 35/36] apparmor: add a features/dbus dir to securityfs interface

John Johansen john.johansen at canonical.com
Wed May 1 21:31:20 UTC 2013


Add a dbus directory to the apparmor securityfs features subdirectory to
contain a mask file with the supported D-Bus mediation rules.

Signed-off-by: Tyler Hicks <tyhicks at canonical.com>
Ackedy-by: John Johansen <john.johansen at canonical.com>
Acked-by: Seth Arnold <seth.arnold at canonical.com>
---
 security/apparmor/apparmorfs.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/security/apparmor/apparmorfs.c b/security/apparmor/apparmorfs.c
index e3bef94..5121596 100644
--- a/security/apparmor/apparmorfs.c
+++ b/security/apparmor/apparmorfs.c
@@ -902,6 +902,11 @@ static struct aa_fs_entry aa_fs_entry_namespaces[] = {
 	{ }
 };
 
+static struct aa_fs_entry aa_fs_entry_dbus[] = {
+	AA_FS_FILE_STRING("mask", "acquire send receive"),
+	{ }
+};
+
 static struct aa_fs_entry aa_fs_entry_features[] = {
 	AA_FS_DIR("policy",			aa_fs_entry_policy),
 	AA_FS_DIR("domain",			aa_fs_entry_domain),
@@ -911,6 +916,7 @@ static struct aa_fs_entry aa_fs_entry_features[] = {
 	AA_FS_DIR("namespaces",                 aa_fs_entry_namespaces),
 	AA_FS_FILE_U64("capability",		VFS_CAP_FLAGS_MASK),
 	AA_FS_DIR("rlimit",			aa_fs_entry_rlimit),
+	AA_FS_DIR("dbus",                       aa_fs_entry_dbus),
 	{ }
 };
 
-- 
1.8.1.2




More information about the AppArmor mailing list