summaryrefslogtreecommitdiff
path: root/security/apparmor/include/policy.h
AgeCommit message (Expand)AuthorFilesLines
2022-07-19apparmor: allow label to carry debug flagsJohn Johansen1-0/+4
2022-07-19apparmor: fix overlapping attachment computationJohn Johansen1-1/+1
2021-02-07apparmor: update policy capable checks to use a labelJohn Johansen1-2/+4
2019-06-19apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen1-1/+10
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner1-5/+1
2018-10-03apparmor: Parse secmark policyMatthew Garrett1-0/+3
2018-03-14apparmor: remove POLICY_MEDIATES_SAFEJohn Johansen1-11/+1
2018-03-14apparmor: add base infastructure for socket mediationJohn Johansen1-0/+11
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen1-2/+0
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett1-0/+6
2017-10-26Revert "apparmor: add base infastructure for socket mediation"Linus Torvalds1-13/+0
2017-09-22apparmor: add base infastructure for socket mediationJohn Johansen1-0/+13
2017-06-11apparmor: switch from profiles to using labels on contextsJohn Johansen1-78/+32
2017-06-11apparmor: add fn to test if profile supports a given mediation classJohn Johansen1-0/+10
2017-06-11apparmor: provide finer control over policy managementJohn Johansen1-2/+6
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen1-0/+1
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen1-0/+2
2017-02-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-142/+57
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+16
2017-01-16apparmor: change op from int to const char *John Johansen1-1/+2
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen1-3/+4
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen1-2/+3
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()John Johansen1-1/+1
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen1-1/+1
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen1-1/+3
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen1-1/+1
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen1-1/+2
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen1-1/+1
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen1-1/+2
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen1-0/+2
2017-01-16apparmor: add strn version of lookup_profile fnJohn Johansen1-0/+2
2017-01-16apparmor: rename replacedby to proxyJohn Johansen1-10/+10
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen1-3/+3
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen1-4/+4
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-106/+6
2017-01-16apparmor: split out shared policy_XXX fns to libJohn Johansen1-13/+0
2017-01-16apparmor: move lib definitions into separate lib includeJohn Johansen1-0/+1
2017-01-14locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra1-2/+2
2016-07-12apparmor: fix module parameters can be changed after policy is lockedJohn Johansen1-0/+2
2013-09-30apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen1-1/+3
2013-08-14apparmor: add the ability to report a sha1 hash of loaded policyJohn Johansen1-0/+1
2013-08-14apparmor: add an optional profile attachment string for profilesJohn Johansen1-0/+2
2013-08-14apparmor: add interface files for profiles and namespacesJohn Johansen1-2/+19
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen1-3/+3
2013-08-14apparmor: make free_profile available outside of policy.cJohn Johansen1-0/+1
2013-08-14apparmor: rework namespace free pathJohn Johansen1-8/+4
2013-08-14apparmor: update how unconfined is handledJohn Johansen1-41/+39
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen1-22/+56
2013-08-14apparmor: convert profile lists to RCU based lockingJohn Johansen1-3/+42
2013-04-28apparmor: remove sid from profilesJohn Johansen1-2/+2