apparmor: prepare to support newer versions of policy
authorJohn Johansen <john.johansen@canonical.com>
Mon, 16 Jan 2017 08:42:39 +0000 (00:42 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 16 Jan 2017 09:18:32 +0000 (01:18 -0800)
commit474d6b75106229025ab6b7bbabf2f9c246e928e1
tree9f2b5a9d15a299476e0dd8408db44e01fa30e180
parent5ebfb12822656beec5c56b362d44e4db81c8e1eb
apparmor: prepare to support newer versions of policy

Newer policy encodes more than just version in the version tag,
so add masking to make sure the comparison remains correct.

Note: this is fully compatible with older policy as it will never set
the bits being masked out.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c
security/apparmor/policy_unpack.c