tree 17cdd607014ece52ccafbbc472750b3d25a9f566
parent a6f233003b1af70132619bca386dfae1862a45e8
author John Johansen <john.johansen@canonical.com> 1484556170 -0800
committer John Johansen <john.johansen@canonical.com> 1484558319 -0800

apparmor: add ns being viewed as a param to policy_view_capable()

Prepare for a tighter pairing of user namespaces and apparmor policy
namespaces, by making the ns to be viewed available and checking
that the user namespace level is the same as the policy ns level.

This strict pairing will be relaxed once true support of user namespaces
lands.

Signed-off-by: John Johansen <john.johansen@canonical.com>