security/apparmor/label.c

561  * This checks for subset but taking into account unconfined. IF
562  * @sub contains an unconfined profile that does not have a matching
563  * unconfined in @set then this will not cause the test to fail.
564  * Conversely we don't care about an unconfined in @set that is not in
1522 				return snprintf(str, size, "%s", "unconfined");
1527 	if ((flags & FLAG_SHOW_MODE) && profile != profile->ns->unconfined) {
1553 			if (profile == profile->ns->unconfined)
1554 				/* special case unconfined so stacks with
1555 				 * unconfined don't report as mixed. ie.
1556 				 * profile_foo//&:ns1:unconfined (mixed)
1569 		/* everything was unconfined */
1575 /* if any visible label is not unconfined the display_mode returns true */
1586 			    profile != profile->ns->unconfined)
1589 		/* only ns->unconfined in set of profiles in ns */
1649 			return snprintf(str, size, "%s", "unconfined");
1654 	 * is not displayed for 'unconfined' in the current ns
1874 			    base != &root_ns->unconfined->label))