mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 06:16:03 +00:00
Code Issues Releases Wiki Activity

let a profile control a tasks rlimits

Browse Source
This commit is contained in:
John Johansen
2008-04-06 18:55:46 +00:00
parent 34f2c96700
commit ecf6b55baf
5 changed files with 211 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
parser/parser.h
View File

@@ -18,6 +18,7 @@
*/
#include <netinet/in.h>
#include <sys/resource.h>
#include "pcre/internal.h"
#include "immunix.h"
#include "libapparmor_re/apparmor_re.h"
@@ -62,6 +63,11 @@ struct aa_network_entry {
struct aa_network_entry *next;
};
struct aa_rlimits {
unsigned int specified; /* limits that are set */
rlim_t limits[RLIMIT_NLIMITS];
};
struct codomain {
char *namespace;
char *name; /* codomain name */
@@ -84,6 +90,8 @@ struct codomain {
unsigned int *deny_network;
unsigned int *quiet_network;
struct aa_rlimits rlimits;
struct cod_entry *entries;
void *hat_table;
//struct codomain *next;
@@ -92,7 +100,7 @@ struct codomain {
int dfarule_count;
void *dfa;
size_t dfa_size;
} ;
};
struct cod_global_entry {
struct cod_entry *entry;
@@ -204,6 +212,7 @@ extern char *processquoted(char *string, int len);
extern char *processunquoted(char *string, int len);
extern int get_keyword_token(const char *keyword);
extern int name_to_capability(const char *keyword);
extern int get_rlimit(const char *name);
extern char *process_var(const char *var);
extern int parse_mode(const char *mode);
extern struct cod_entry *new_entry(char *namespace, char *id, int mode,