tree f883525ee2c10d846c0f9f4c6fcb01208bee5a26
parent 4da05cc08da3f2058cecbe42ed9f4803d669730a
author John Johansen <john.johansen@canonical.com> 1361232754 -0800
committer John Johansen <john.johansen@canonical.com> 1367134652 -0700

apparmor: reserve and mask off the top 8 bits of the base field

The top 8 bits of the base field have never been used, in fact can't
be used, by the current 'dfa16' format.  However they will be used in the
future as flags, so mask them off when using base as an index value.

Note: the use of the top 8 bits, without masking is trapped by the verify
      checks that base entries are within the size bounds.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>