commit | 2bd8dbbf22fe9eb2a99273436f815d49ceb23a8f | [log] [tgz] |
---|---|---|
author | John Johansen <john.johansen@canonical.com> | Mon Jan 16 00:42:50 2017 -0800 |
committer | John Johansen <john.johansen@canonical.com> | Mon Jan 16 01:18:39 2017 -0800 |
tree | 17cdd607014ece52ccafbbc472750b3d25a9f566 | |
parent | a6f233003b1af70132619bca386dfae1862a45e8 [diff] |
apparmor: add ns being viewed as a param to policy_view_capable() Prepare for a tighter pairing of user namespaces and apparmor policy namespaces, by making the ns to be viewed available and checking that the user namespace level is the same as the policy ns level. This strict pairing will be relaxed once true support of user namespaces lands. Signed-off-by: John Johansen <john.johansen@canonical.com>