| commit | 95c0581f9bfdfbe97126ba1c7f5650a9dd064dda | [log] [tgz] |
|---|---|---|
| author | John Johansen <john.johansen@canonical.com> | Tue May 24 02:38:12 2022 -0700 |
| committer | John Johansen <john.johansen@canonical.com> | Wed Jul 13 16:37:21 2022 -0700 |
| tree | ed4981a6a37076e2258d868a677ddcd8a976d63a | |
| parent | e2f76ad7d2859e333609c775fda707f205d93fd8 [diff] |
apparmor: add a kernel label to use on kernel objects Separate kernel objects from unconfined. This is done so we can distinguish between the two in debugging, auditing and in preparation for being able to replace unconfined, which is not appropriate for the kernel. The kernel label will continue to behave similar to unconfined. Acked-by: Jon Tourville <jon.tourville@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com>