apparmor: add fn to test if profile supports a given mediation class (b5b2557c) · Commits · e / devices / android_kernel_oneplus_sm8150

security/apparmor/include/policy.h

+10 −0

Original line number	Diff line number	Diff line
		@@ -222,6 +222,16 @@ void __aa_profile_list_release(struct list_head *head);

		#define unconfined(X) ((X)->mode == APPARMOR_UNCONFINED)

		#define PROFILE_MEDIATES(P, T) ((P)->policy.start[(T)])
		/* safe version of POLICY_MEDIATES for full range input */
		static inline unsigned int PROFILE_MEDIATES_SAFE(struct aa_profile *profile,
		unsigned char class)
		{
		if (profile->policy.dfa)
		return aa_dfa_match_len(profile->policy.dfa,
		profile->policy.start[0], &class, 1);
		return 0;
		}

		/**
		* aa_get_profile - increment refcount on profile @p