[apparmor] Making AppArmor work with new mount context API

David Howells dhowells at redhat.com
Thu Jan 11 17:22:26 UTC 2018


John Johansen <john.johansen at canonical.com> wrote:

> I am not sure which is the quickest approach to get apparmor out of
> the way for the new mount API.

For the moment, the attached patch compiles.  It will need folding into the
main patch.  I've pushed my tree out to:

	git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git

on branch init_task.

Currently, it's using the sb_mount LSM hook to check remount, but this will
need to be changed once the user interface is solidified.  THe problem is
getting the target path through to apparmor.

David



More information about the AppArmor mailing list