10  * AppArmor policy is based around profiles, which contain the rules a
13  * visible set of profiles or by following a profiles attachment rules.
16  * visible profiles.  Each namespace contains a special "unconfined" profile,
29  *	null-XXXX-YYYY - special automatically generated learning profiles
33  *	user-XXXX - user defined profiles
39  * The namespace contains the set of visible profiles that are considered
41  * the namespace so that for example a chroot can have its own set of profiles
44  * -  it allows for sub profiles or hats, which allows an application to run
50  * - it allows for binary hierarchy of profiles, so that execution history
138  * __add_profile - add a profiles to list and label tree
198 	__aa_profile_list_release(&profile->base.profiles);  in __remove_profile()
206  * __aa_profile_list_release - remove all profiles on the list and put refs
207  * @head: list of profiles  (NOT NULL)
288 	/* free children profiles */  in aa_free_profile()
421 		profile = __find_child(&parent->base.profiles, name);  in aa_find_child()
452 		profile = __strn_find_child(&policy->profiles, hname,  in __lookup_parent()
474  *          place holder profiles.
491 		profile = __strn_find_child(&policy->profiles, hname,  in __create_missing_ancestors()
534 		profile = __strn_find_child(&base->profiles, hname,  in __lookupn_profile()
545 		return __strn_find_child(&base->profiles, hname, n);  in __lookupn_profile()
651  * null profiles are added to the profile list but the list does not
697 	p = __find_child(&parent->base.profiles, bname);  in aa_new_learning_profile()
702 		__add_profile(&parent->base.profiles, profile);  in aa_new_learning_profile()
940 	if (!list_empty(&old->base.profiles)) {  in __replace_profile()
942 		list_splice_init_rcu(&old->base.profiles, &lh, synchronize_rcu);  in __replace_profile()
948 			p = __find_child(&new->base.profiles, child->base.name);  in __replace_profile()
960 			list_add_rcu(&child->base.list, &new->base.profiles);  in __replace_profile()
1070 	/* ensure that profiles are all for the same ns  in aa_replace_profiles()
1071 	 * TODO: update locking to remove this constaint. All profiles in  in aa_replace_profiles()
1251 				lh = &parent->base.profiles;  in aa_replace_profiles()
1253 				lh = &ns->base.profiles;  in aa_replace_profiles()
1279 	/* audit status that rest of profiles in the atomic set failed too */  in aa_replace_profiles()