summaryrefslogtreecommitdiff
path: root/security/apparmor/policy.c
AgeCommit message (Expand)AuthorFilesLines
2017-11-21apparmor: fix possible recursive lock warning in __aa_create_nsJohn Johansen1-4/+4
2017-11-21apparmor: fix leak of null profile name if profile allocation failsJohn Johansen1-1/+2
2017-09-22apparmor: fix race condition in null profile creationJohn Johansen1-3/+11
2017-09-22apparmor: move new_null_profile to after profile lookup fns()John Johansen1-79/+79
2017-06-11apparmor: switch from profiles to using labels on contextsJohn Johansen1-118/+90
2017-06-11apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen1-37/+2
2017-06-11apparmor: refactor updating profiles to the newest parentJohn Johansen1-4/+31
2017-06-11apparmor: share profile name on replacementJohn Johansen1-0/+9
2017-06-11apparmor: fix policy load/remove semanticsJohn Johansen1-11/+11
2017-06-11apparmor: add namespace lookup fns()John Johansen1-4/+6
2017-06-11apparmor: cleanup __find_child()John Johansen1-8/+8
2017-06-11apparmor: provide finer control over policy managementJohn Johansen1-13/+22
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen1-3/+3
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen1-1/+45
2017-04-07apparmor: fix invalid reference to index variable of iterator line 836John Johansen1-2/+4
2017-03-02sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar1-0/+1
2017-03-02sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar1-0/+1
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks1-1/+0
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+23
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-23/+19
2017-01-16apparmor: change op from int to const char *John Johansen1-3/+4
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-1/+1
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen1-11/+14
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen1-14/+40
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen1-7/+7
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen1-10/+24
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()John Johansen1-12/+10
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen1-3/+9
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen1-3/+22
2017-01-16apparmor: allow specifying the profile doing the managementJohn Johansen1-11/+21
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen1-3/+4
2017-01-16apparmor: add a default null dfaJohn Johansen1-0/+2
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen1-13/+40
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen1-5/+6
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen1-2/+4
2017-01-16apparmor: pass gfp param into aa_policy_init()John Johansen1-1/+1
2017-01-16apparmor: rename hname_tail to basenameJohn Johansen1-1/+1
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen1-0/+29
2017-01-16apparmor: add strn version of lookup_profile fnJohn Johansen1-11/+25
2017-01-16apparmor: rename replacedby to proxyJohn Johansen1-35/+35
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen1-1/+1
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen1-16/+16
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-284/+14
2017-01-16apparmor: split out shared policy_XXX fns to libJohn Johansen1-119/+4
2016-07-12apparmor: fix module parameters can be changed after policy is lockedJohn Johansen1-1/+17
2016-07-12apparmor: fix refcount race when finding a child profileJohn Johansen1-1/+3
2016-07-12apparmor: fix audit full profile hname on successful loadJohn Johansen1-1/+1
2016-07-12apparmor: fix log failures for all profiles in a setJohn Johansen1-10/+19
2016-07-12apparmor: fix put() parent ref after updating the active refJohn Johansen1-1/+1
2016-07-12apparmor: fix replacement bug that adds new child to old parentJohn Johansen1-1/+1