mirror of
https://github.com/checkpoint-restore/criu
synced 2025-08-21 17:37:39 +00:00
8d992a680e
Support for apparmor namespaces and stacking is coming to Ubuntu kernels in 16.10, and should hopefully be upstreamed Soon (TM) :). The basic idea is similar to how cgroups are done: we can restore the apparmor namespace and profile blobs independently of the tasks, and then at the end we can just set the task's label appropriately. This means the code that moves tasks under a label stays the same, and the only new code is the stuff that dumps and restores the policy blobs that are in the namespace that were loaded by the container. Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
17 lines
296 B
Protocol Buffer
17 lines
296 B
Protocol Buffer
syntax = "proto2";
|
|
|
|
message aa_policy {
|
|
required string name = 1;
|
|
required bytes blob = 2;
|
|
}
|
|
|
|
message aa_namespace {
|
|
required string name = 1;
|
|
repeated aa_policy policies = 2;
|
|
repeated aa_namespace namespaces = 3;
|
|
}
|
|
|
|
message apparmor_entry {
|
|
repeated aa_namespace namespaces = 1;
|
|
}
|