mirror of
https://github.com/checkpoint-restore/criu
synced 2025-08-22 01:51:51 +00:00
8d992a680e
Support for apparmor namespaces and stacking is coming to Ubuntu kernels in 16.10, and should hopefully be upstreamed Soon (TM) :). The basic idea is similar to how cgroups are done: we can restore the apparmor namespace and profile blobs independently of the tasks, and then at the end we can just set the task's label appropriately. This means the code that moves tasks under a label stays the same, and the only new code is the stuff that dumps and restores the policy blobs that are in the namespace that were loaded by the container. Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
12 lines
229 B
C
12 lines
229 B
C
#ifndef __CR_APPARMOR_H__
|
|
#define __CR_APPARMOR_H__
|
|
|
|
int collect_aa_namespace(char *profile);
|
|
int dump_aa_namespaces(void);
|
|
|
|
bool check_aa_ns_dumping(void);
|
|
|
|
int prepare_apparmor_namespaces(void);
|
|
|
|
#endif /* __CR_APPARMOR_H__ */
|