apparmor: compute policydb permission on profile load

Rather than computing policydb permissions for each access
permissions can be computed once on profile load and stored for lookup.

Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
John Johansen
2022-10-03 14:49:03 -07:00
parent e48ffd24c1
commit e2967ede22
9 changed files with 90 additions and 86 deletions
+1
View File
@@ -77,6 +77,7 @@ enum profile_mode {
struct aa_policydb {
/* Generic policy DFA specific rule types will be subsections of it */
struct aa_dfa *dfa;
struct aa_perms *perms;
unsigned int start[AA_CLASS_LAST + 1];
};