tree ed4981a6a37076e2258d868a677ddcd8a976d63a
parent e2f76ad7d2859e333609c775fda707f205d93fd8
author John Johansen <john.johansen@canonical.com> 1653385092 -0700
committer John Johansen <john.johansen@canonical.com> 1657755441 -0700

apparmor: add a kernel label to use on kernel objects

Separate kernel objects from unconfined. This is done so we can
distinguish between the two in debugging, auditing and in preparation
for being able to replace unconfined, which is not appropriate for the
kernel.

The kernel label will continue to behave similar to unconfined.

Acked-by: Jon Tourville <jon.tourville@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>