[Patch v2 0/8] securityfs: add the ability to support symlinks

From: John Johansen
Date: Thu May 25 2017 - 11:32:49 EST


v2 - adjust for Kees's feedback
- use kvzlloc() instead of memset
- split [PATCH 3/3] apparmor: virtualize the policy/ directory
into 6 patches

Currently securityfs does not support the creation/use of symlinks.

AppArmor would like to be able to use symlinks to map some policy
relationships between profiles and the data set it was loaded from
(patch 2), and to create a specialized magic policy namespace
dir that maps the policy/ directory to the policy namespace that a
task is confined by.

The following patchset adds symlink support to securityfs and then
updates apparmor to leverage them.