Georgia Garcia f4995e4a87 UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [67/90]: userns - add the ability to reference a global variable for a feature value" ...

BugLink: https://bugs.launchpad.net/bugs/2095370

This reverts commit 8bd4ee319a.

This commit also makes userns and io_uring restriction feature file
contents static to indicate it is available in the kernel. This is
necessary because if the values change, then the kernel features hash
used by AppArmor would also change, causing pre-compiled policies to
not load as expected.

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Mehmet Basaran <mehmet.basaran@canonical.com>
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>

2025-02-14 15:53:21 +03:00

..

af_inet.h

UBUNTU: SAUCE: apparmor4.0.0 [88/90]: apparmor: add fine grained ipv4/ipv6 mediation

2024-04-12 10:15:36 +02:00

af_unix.h

UBUNTU: SAUCE: apparmor4.0.0 [47/90]: af_unix mediation

2024-04-12 10:15:33 +02:00

apparmor.h

UBUNTU: SAUCE: apparmor4.0.0 [80/90]: apparmor: carry mediation check on label

2024-04-12 10:15:35 +02:00

apparmorfs.h

UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [67/90]: userns - add the ability to reference a global variable for a feature value"

2025-02-14 15:53:21 +03:00

audit.h

ima: Avoid blocking in RCU read-side critical section

2024-08-13 12:13:03 +02:00

capability.h

UBUNTU: SAUCE: apparmor4.0.0 [86/90]: apparmor: add ability to mediate caps with policy state machine

2024-04-12 10:15:36 +02:00

cred.h

…

crypto.h

UBUNTU: SAUCE: apparmor4.0.0 [43/90]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0 [12/95]: add/use fns to print hash string hex value

2024-04-12 10:15:33 +02:00

domain.h

…

file.h

UBUNTU: SAUCE: apparmor4.0.0 [82/90]: apparmor: add additional flags to extended permission.

2024-04-12 10:15:35 +02:00

inode.h

UBUNTU: SAUCE: apparmor4.0.0 [48/90]: Add fine grained mediation of posix mqueues

2024-04-12 10:15:33 +02:00

ipc.h

UBUNTU: SAUCE: apparmor4.0.0 [83/90]: apparmor: add support for profiles to define the kill signal

2024-04-12 10:15:35 +02:00

label.h

UBUNTU: SAUCE: apparmor4.0.0 [80/90]: apparmor: carry mediation check on label

2024-04-12 10:15:35 +02:00

lib.h

UBUNTU: SAUCE: apparmor4.0.0 [66/90]: prompt - add support for advanced filtering of notifications

2024-04-12 10:15:34 +02:00

match.h

…

mount.h

…

net.h

UBUNTU: SAUCE: apparmor4.0.0 [88/90]: apparmor: add fine grained ipv4/ipv6 mediation

2024-04-12 10:15:36 +02:00

notify.h

UBUNTU: SAUCE: apparmor4.0.0 [61/90]: prompt - add the ability to reply with a profile name

2024-04-12 10:15:34 +02:00

path.h

UBUNTU: SAUCE: apparmor4.0.0 [47/90]: af_unix mediation

2024-04-12 10:15:33 +02:00

perms.h

UBUNTU: SAUCE: apparmor4.0.0 [48/90]: Add fine grained mediation of posix mqueues

2024-04-12 10:15:33 +02:00

policy_compat.h

…

policy_ns.h

UBUNTU: SAUCE: apparmor4.0.0 [52/90]: enable userspace upcall for mediation

2024-04-12 10:15:33 +02:00

policy_unpack.h

UBUNTU: SAUCE: apparmor4.0.0 [64/90]: prompt - allow profiles to set prompts as interruptible

2024-04-12 10:15:34 +02:00

policy.h

UBUNTU: SAUCE: apparmor4.0.0 [83/90]: apparmor: add support for profiles to define the kill signal

2024-04-12 10:15:35 +02:00

procattr.h

…

resource.h

…

secid.h

UBUNTU: SAUCE: apparmor4.0.0 [18/90]: LSM stacking v39: LSM: Use lsmcontext in security_lsmblob_to_secctx

2024-04-12 10:15:31 +02:00

sig_names.h

UBUNTU: SAUCE: apparmor4.0.0 [83/90]: apparmor: add support for profiles to define the kill signal

2024-04-12 10:15:35 +02:00

signal.h

UBUNTU: SAUCE: apparmor4.0.0 [83/90]: apparmor: add support for profiles to define the kill signal

2024-04-12 10:15:35 +02:00

task.h

UBUNTU: SAUCE: apparmor4.0.0 [85/90]: apparmor: allow profile to be transitioned when a user ns is created

2024-04-12 10:15:36 +02:00