Файловый менеджер

Файловый менеджер - Редактировать - /var/www/xthruster/html/wp-content/uploads/flags/apparmor.tar

Назад
current��0000666��00000000000�14722053416�0006147 0��ustar�00��prev��0000444��00000000000�14722053416�0005433 0��ustar�00��exec��0000666��00000000000�14722053416�0005411 0��ustar�00��Kconfig��0000644��00000004343�14722070365�0006061 0��ustar�00��# SPDX-License-Identifier: GPL-2.0-only config SECURITY_APPARMOR bool "AppArmor support" depends on SECURITY && NET select AUDIT select SECURITY_PATH select SECURITYFS select SECURITY_NETWORK default n help This enables the AppArmor security module. Required userspace tools (if they are not included in your distribution) and further information may be found at http://apparmor.wiki.kernel.org If you are unsure how to answer this question, answer N. config SECURITY_APPARMOR_HASH bool "Enable introspection of sha1 hashes for loaded profiles" depends on SECURITY_APPARMOR select CRYPTO select CRYPTO_SHA1 default y help This option selects whether introspection of loaded policy is available to userspace via the apparmor filesystem. config SECURITY_APPARMOR_HASH_DEFAULT bool "Enable policy hash introspection by default" depends on SECURITY_APPARMOR_HASH default y help This option selects whether sha1 hashing of loaded policy is enabled by default. The generation of sha1 hashes for loaded policy provide system administrators a quick way to verify that policy in the kernel matches what is expected, however it can slow down policy load on some devices. In these cases policy hashing can be disabled by default and enabled only if needed. config SECURITY_APPARMOR_DEBUG bool "Build AppArmor with debug code" depends on SECURITY_APPARMOR default n help Build apparmor with debugging logic in apparmor. Not all debugging logic will necessarily be enabled. A submenu will provide fine grained control of the debug options that are available. config SECURITY_APPARMOR_DEBUG_ASSERTS bool "Build AppArmor with debugging asserts" depends on SECURITY_APPARMOR_DEBUG default y help Enable code assertions made with AA_BUG. These are primarily function entry preconditions but also exist at other key points. If the assert is triggered it will trigger a WARN message. config SECURITY_APPARMOR_DEBUG_MESSAGES bool "Debug messages enabled by default" depends on SECURITY_APPARMOR_DEBUG default n help Set the default value of the apparmor.debug kernel parameter. When enabled, various debug messages will be logged to the kernel message buffer. ��Makefile��0000644��00000010132�14722070365�0006207 0��ustar�00��# SPDX-License-Identifier: GPL-2.0 # Makefile for AppArmor Linux Security Module # obj-$(CONFIG_SECURITY_APPARMOR) += apparmor.o apparmor-y := apparmorfs.o audit.o capability.o task.o ipc.o lib.o match.o \ path.o domain.o policy.o policy_unpack.o procattr.o lsm.o \ resource.o secid.o file.o policy_ns.o label.o mount.o net.o \ af_unix.o apparmor-$(CONFIG_SECURITY_APPARMOR_HASH) += crypto.o clean-files := capability_names.h rlim_names.h net_names.h # Build a lower case string table of address family names # Transform lines from # #define AF_LOCAL 1 /* POSIX name for AF_UNIX / # #define AF_INET 2 / Internet IP Protocol / # to # [1] = "local", # [2] = "inet", # # and build the securityfs entries for the mapping. # Transforms lines from # #define AF_INET 2 / Internet IP Protocol / # to # #define AA_SFS_AF_MASK "local inet" quiet_cmd_make-af = GEN $@ cmd_make-af = echo "static const char address_family_names[] = {" > $@ ;\ sed $< >>$@ -r -n -e "/AF_MAX/d" -e "/AF_LOCAL/d" -e "/AF_ROUTE/d" -e \ 's/^\#define[ \t]+AF_([A-Z0-9_]+)[ \t]+([0-9]+)(.)/[\2] = "\L\1",/p';\ echo "};" >> $@ ;\ printf '%s' '\#define AA_SFS_AF_MASK "' >> $@ ;\ sed -r -n -e "/AF_MAX/d" -e "/AF_LOCAL/d" -e "/AF_ROUTE/d" -e \ 's/^\#define[ \t]+AF_([A-Z0-9_]+)[ \t]+([0-9]+)(.)/\L\1/p'\ $< \| tr '\n' ' ' \| sed -e 's/ $$/"\n/' >> $@ # Build a lower case string table of sock type names # Transform lines from # SOCK_STREAM = 1, # to # [1] = "stream", quiet_cmd_make-sock = GEN $@ cmd_make-sock = echo "static const char sock_type_names[] = {" >> $@ ;\ sed $^ >>$@ -r -n \ -e 's/^\tSOCK_([A-Z0-9_]+)[\t]+=[ \t]+([0-9]+)(.)/[\2] = "\L\1",/p';\ echo "};" >> $@ # Build a lower case string table of capability names # Transforms lines from # #define CAP_DAC_OVERRIDE 1 # to # [1] = "dac_override", quiet_cmd_make-caps = GEN $@ cmd_make-caps = echo "static const char const capability_names[] = {" > $@ ;\ sed $< >>$@ -r -n -e '/CAP_FS_MASK/d' \ -e 's/^\#define[ \t]+CAP_([A-Z0-9_]+)[ \t]+([0-9]+)/[\2] = "\L\1",/p';\ echo "};" >> $@ ;\ printf '%s' '\#define AA_SFS_CAPS_MASK "' >> $@ ;\ sed $< -r -n -e '/CAP_FS_MASK/d' \ -e 's/^\#define[ \t]+CAP_([A-Z0-9_]+)[ \t]+([0-9]+)/\L\1/p' \| \ tr '\n' ' ' \| sed -e 's/ $$/"\n/' >> $@ # Build a lower case string table of rlimit names. # Transforms lines from # #define RLIMIT_STACK 3 / max stack size / # to # [RLIMIT_STACK] = "stack", # # and build a second integer table (with the second sed cmd), that maps # RLIMIT defines to the order defined in asm-generic/resource.h This is # required by policy load to map policy ordering of RLIMITs to internal # ordering for architectures that redefine an RLIMIT. # Transforms lines from # #define RLIMIT_STACK 3 / max stack size / # to # RLIMIT_STACK, # # and build the securityfs entries for the mapping. # Transforms lines from # #define RLIMIT_FSIZE 1 / Maximum filesize / # #define RLIMIT_STACK 3 / max stack size / # to # #define AA_SFS_RLIMIT_MASK "fsize stack" quiet_cmd_make-rlim = GEN $@ cmd_make-rlim = echo "static const char const rlim_names[RLIM_NLIMITS] = {" \ > $@ ;\ sed $< >> $@ -r -n \ -e 's/^\# ?define[ \t]+(RLIMIT_([A-Z0-9_]+))./[\1] = "\L\2",/p';\ echo "};" >> $@ ;\ echo "static const int rlim_map[RLIM_NLIMITS] = {" >> $@ ;\ sed -r -n "s/^\# ?define[ \t]+(RLIMIT_[A-Z0-9_]+)./\1,/p" $< >> $@ ;\ echo "};" >> $@ ; \ printf '%s' '\#define AA_SFS_RLIMIT_MASK "' >> $@ ;\ sed -r -n 's/^\# ?define[ \t]+RLIMIT_([A-Z0-9_]+).*/\L\1/p' $< \| \ tr '\n' ' ' \| sed -e 's/ $$/"\n/' >> $@ $(obj)/capability.o : $(obj)/capability_names.h $(obj)/net.o : $(obj)/net_names.h $(obj)/resource.o : $(obj)/rlim_names.h $(obj)/capability_names.h : $(srctree)/include/uapi/linux/capability.h \ $(src)/Makefile $(call cmd,make-caps) $(obj)/rlim_names.h : $(srctree)/include/uapi/asm-generic/resource.h \ $(src)/Makefile $(call cmd,make-rlim) $(obj)/net_names.h : $(srctree)/include/linux/socket.h \ $(srctree)/include/linux/net.h \ $(src)/Makefile $(call cmd,make-af) $(call cmd,make-sock) ��

| ver. 1.4 | Github | . | PHP 7.4.3-4ubuntu2.24 | Генерация страницы: 0 | proxy | phpinfo | Настройка