[apparmor] dconf patches

[William Hua]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

If I may, I'd like to revive the old dconf confinement patches that we started over a year ago, but were never merged.

All necessary patches are attached, as well as an extra test profile and program. I've refreshed them to work properly against kernel 4.6.4 and current AppArmor trunk.

Thank you,
Will
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=q8UD
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-UBUNTU-SAUCE-apparmor-add-data-query-support.patch
Type: text/x-patch
Size: 11173 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Split-aa_query_label-into-a-base-aa_query_cmd-and-it.patch
Type: text/x-patch
Size: 8696 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-base-function-to-query-generic-label-data-under-.patch
Type: text/x-patch
Size: 7858 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Make-some-parameters-of-parser-interface-constant.patch
Type: text/x-patch
Size: 1605 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0008.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-Add-support-for-dconf-confinement.patch
Type: text/x-patch
Size: 39753 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0009.bin>
-------------- next part --------------
#include <tunables/global>

/home/william/Code/apparmor/test/dconf-test {
  #include <abstractions/apparmor_api/examine>
  #include <abstractions/apparmor_api/introspect>
  #include <abstractions/base>
  #include <abstractions/bash>

  /sys/kernel/security/apparmor/.access rw,
  owner @{HOME}/** rw,

  dconf /a r,
  dconf /b/c/ r,
  dconf /d rw,
  dconf /e/f/ rw,
  audit dconf /g r,
  audit dconf /h/i/ r,
  audit dconf /j rw,
  audit dconf /k/l/ rw,
}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dconf-test.c
Type: text/x-csrc
Size: 2610 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0001.c>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-UBUNTU-SAUCE-apparmor-add-data-query-support.patch.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0007.pgp>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Split-aa_query_label-into-a-base-aa_query_cmd-and-it.patch.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0008.pgp>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-base-function-to-query-generic-label-data-under-.patch.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0009.pgp>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Make-some-parameters-of-parser-interface-constant.patch.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0010.pgp>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-Add-support-for-dconf-confinement.patch.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0011.pgp>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dconf-test.profile.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0012.pgp>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dconf-test.c.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160802/30a831a0/attachment-0013.pgp>