Age | Commit message (Expand) | Author | Files | Lines |
2019-03-14 | apparmor: Fix aa_label_build() error handling for failed merges | John Johansen | 1 | -1/+4 |
2017-09-23 | Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern... | Linus Torvalds | 1 | -2/+2 |
2017-09-22 | apparmor: add mount mediation | John Johansen | 1 | -2/+2 |
2017-08-01 | apparmor: Refactor to remove bprm_secureexec hook | Kees Cook | 1 | -18/+1 |
2017-08-01 | exec: Rename bprm->cred_prepared to called_set_creds | Kees Cook | 1 | -1/+1 |
2017-06-11 | apparmor: move change_profile mediation to using labels | John Johansen | 1 | -68/+123 |
2017-06-11 | apparmor: move change_hat mediation to using labels | John Johansen | 1 | -102/+201 |
2017-06-11 | apparmor: move exec domain mediation to using labels | John Johansen | 1 | -258/+592 |
2017-06-11 | apparmor: update aa_audit_file() to use labels | John Johansen | 1 | -2/+4 |
2017-06-11 | apparmor: move ptrace checks to using labels | John Johansen | 1 | -7/+10 |
2017-06-11 | apparmor: switch from profiles to using labels on contexts | John Johansen | 1 | -35/+42 |
2017-06-11 | apparmor: convert aa_change_XXX bool parameters to flags | John Johansen | 1 | -13/+13 |
2017-06-11 | apparmor: convert to profile block critical sections | John Johansen | 1 | -2/+3 |
2017-06-11 | apparmor: move bprm_committing_creds/committed_creds to lsm.c | John Johansen | 1 | -30/+0 |
2017-06-11 | apparmor: switch from file_perms to aa_perms | John Johansen | 1 | -9/+9 |
2017-06-08 | apparmor: Move path lookup to using preallocated buffers | John Johansen | 1 | -3/+5 |
2017-06-08 | apparmor: allow profiles to provide info to disconnected paths | John Johansen | 1 | -1/+1 |
2017-02-24 | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi... | Linus Torvalds | 1 | -1/+1 |
2017-01-24 | exec: Remove LSM_UNSAFE_PTRACE_CAP | Eric W. Biederman | 1 | -1/+1 |
2017-01-16 | apparmor: convert change_profile to use fqname later to give better control | John Johansen | 1 | -42/+19 |
2017-01-16 | apparmor: change aad apparmor_audit_data macro to a fn macro | John Johansen | 1 | -7/+6 |
2017-01-16 | apparmor: change op from int to const char * | John Johansen | 1 | -2/+2 |
2017-01-16 | apparmor: rename context abreviation cxt to the more standard ctx | John Johansen | 1 | -21/+21 |
2017-01-16 | apparmor: name null-XXX profiles after the executable | John Johansen | 1 | -3/+5 |
2017-01-16 | apparmor: rename namespace to ns to improve code line lengths | John Johansen | 1 | -12/+12 |
2017-01-16 | apparmor: split apparmor policy namespaces code into its own file | John Johansen | 1 | -0/+1 |
2016-11-21 | apparmor: fix change_hat not finding hat after policy replacement | John Johansen | 1 | -2/+4 |
2016-07-12 | apparmor: ensure the target profile name is always audited | John Johansen | 1 | -11/+9 |
2016-07-12 | apparmor: exec should not be returning ENOENT when it denies | John Johansen | 1 | -1/+1 |
2015-05-12 | LSM: Switch to lists of hooks | Casey Schaufler | 1 | -8/+4 |
2014-07-18 | sched: move no_new_privs into new atomic flags | Kees Cook | 1 | -2/+2 |
2013-10-30 | apparmor: remove the "task" arg from may_change_ptraced_domain() | Oleg Nesterov | 1 | -8/+6 |
2013-10-30 | apparmor: fix capability to not use the current task, during reporting | John Johansen | 1 | -1/+1 |
2013-08-14 | apparmor: allow setting any profile into the unconfined state | John Johansen | 1 | -2/+2 |
2013-08-14 | apparmor: update how unconfined is handled | John Johansen | 1 | -1/+1 |
2013-08-14 | apparmor: change how profile replacement update is done | John Johansen | 1 | -2/+2 |
2013-08-14 | apparmor: convert profile lists to RCU based locking | John Johansen | 1 | -4/+10 |
2013-04-28 | apparmor: localize getting the security context to a few macros | John Johansen | 1 | -3/+3 |
2013-04-28 | apparmor: use common fn to clear task_context for domain transitions | John Johansen | 1 | -5/+1 |
2013-04-28 | apparmor: add utility function to get an arbitrary tasks profile. | John Johansen | 1 | -7/+3 |
2013-04-28 | apparmor: Remove -W1 warnings | John Johansen | 1 | -2/+0 |
2013-04-28 | apparmor: fix auditing of domain transition failures due to incomplete policy | John Johansen | 1 | -0/+2 |
2013-02-23 | new helper: file_inode(file) | Al Viro | 1 | -2/+2 |
2012-09-21 | userns: Convert apparmor to use kuid and kgid where appropriate | Eric W. Biederman | 1 | -2/+2 |
2012-04-14 | Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVS | John Johansen | 1 | -4/+35 |
2012-04-14 | Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs | Andy Lutomirski | 1 | -0/+4 |
2012-03-27 | apparmor: Fix change_onexec when called from a confined task | John Johansen | 1 | -1/+2 |
2012-03-14 | AppArmor: Move path failure information into aa_get_name and rename | John Johansen | 1 | -3/+2 |
2011-07-28 | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 1 | -1/+1 |
2011-06-29 | AppArmor: Fix reference to rcu protected pointer outside of rcu_read_lock | John Johansen | 1 | -1/+1 |