kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
2020-06-30	apparmor: don't try to replace stale label in ptraceme check	Jann Horn	1	-2/+2
2020-01-27	apparmor: don't try to replace stale label in ptrace access check	Jann Horn	1	-2/+2
2017-10-26	Revert "apparmor: add base infastructure for socket mediation"	Linus Torvalds	1	-387/+0
2017-09-23	Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...	Linus Torvalds	1	-0/+472
2017-09-22	apparmor: add base infastructure for socket mediation	John Johansen	1	-0/+387
2017-09-22	apparmor: add mount mediation	John Johansen	1	-0/+64
2017-09-22	apparmor: add the ability to mediate signals	John Johansen	1	-0/+21
2017-08-01	apparmor: Refactor to remove bprm_secureexec hook	Kees Cook	1	-1/+0
2017-06-11	apparmor: add stacked domain labels interface	John Johansen	1	-0/+5
2017-06-11	apparmor: mediate files when they are received	John Johansen	1	-0/+6
2017-06-11	apparmor: move path_link mediation to using labels	John Johansen	1	-2/+1
2017-06-11	apparmor: refactor path name lookup and permission checks around labels	John Johansen	1	-9/+4
2017-06-11	apparmor: move aa_file_perm() to use labels	John Johansen	1	-21/+3
2017-06-11	apparmor: move ptrace checks to using labels	John Johansen	1	-2/+21
2017-06-11	apparmor: move resource checks to using labels	John Johansen	1	-4/+2
2017-06-11	apparmor: move capability checks to using labels	John Johansen	1	-6/+14
2017-06-11	apparmor: switch getprocattr to using label_print fns()	John Johansen	1	-1/+1
2017-06-11	apparmor: switch from profiles to using labels on contexts	John Johansen	1	-62/+72
2017-06-11	apparmor: revalidate files during exec	John Johansen	1	-0/+6
2017-06-11	apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()	John Johansen	1	-6/+4
2017-06-11	apparmor: convert aa_change_XXX bool parameters to flags	John Johansen	1	-8/+5
2017-06-11	apparmor: convert to profile block critical sections	John Johansen	1	-12/+29
2017-06-11	apparmor: move bprm_committing_creds/committed_creds to lsm.c	John Johansen	1	-0/+30
2017-06-11	apparmor: provide information about path buffer size at boot	John Johansen	1	-2/+9
2017-06-09	apparmor: rework perm mapping to a slightly broader set	John Johansen	1	-5/+5
2017-04-07	apparmor: Make path_max parameter readonly	John Johansen	1	-1/+1
2017-04-07	apparmor: fix parameters so that the permission test is bypassed at boot	John Johansen	1	-25/+22
2017-04-07	security/apparmor/lsm.c: set debug messages	Valentin Rothberg	1	-1/+1
2017-03-06	security: mark LSM hooks as __ro_after_init	James Morris	1	-1/+1
2017-02-10	Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...	James Morris	1	-5/+2
2017-01-19	LSM: Add /sys/kernel/security/lsm	Casey Schaufler	1	-1/+2
2017-01-17	apparmor: fix undefined reference to `aa_g_hash_policy'	John Johansen	1	-1/+1
2017-01-16	apparmor: replace remaining BUG_ON() asserts with AA_BUG()	John Johansen	1	-1/+1
2017-01-16	apparmor: add check for apparmor enabled in module parameters missing it	John Johansen	1	-0/+10
2017-01-16	apparmor: add per cpu work buffers to avoid allocating buffers at every hook	John Johansen	1	-1/+50
2017-01-16	apparmor: sysctl to enable unprivileged user ns AppArmor policy loading	Tyler Hicks	1	-0/+47
2017-01-16	apparmor: support querying extended trusted helper extra data	William Hua	1	-0/+1
2017-01-16	apparmor: make computing policy hashes conditional on kernel parameter	John Johansen	1	-23/+23
2017-01-16	apparmor: convert change_profile to use fqname later to give better control	John Johansen	1	-6/+6
2017-01-16	apparmor: change aad apparmor_audit_data macro to a fn macro	John Johansen	1	-8/+4
2017-01-16	apparmor: change op from int to const char *	John Johansen	1	-7/+8
2017-01-16	apparmor: rename context abreviation cxt to the more standard ctx	John Johansen	1	-35/+37
2017-01-16	apparmor: add ns being viewed as a param to policy_admin_capable()	John Johansen	1	-6/+6
2017-01-16	apparmor: add ns being viewed as a param to policy_view_capable()	John Johansen	1	-4/+4
2017-01-16	apparmor: add a default null dfa	John Johansen	1	-0/+7
2017-01-16	apparmor: remove paranoid load switch	John Johansen	1	-2/+3
2017-01-16	apparmor: rename mediated_filesystem() to path_mediated_fs()	John Johansen	1	-7/+7
2017-01-16	apparmor: add debug assert AA_BUG and Kconfig to control debug info	John Johansen	1	-1/+1
2017-01-16	apparmor: split apparmor policy namespaces code into its own file	John Johansen	1	-0/+1
2017-01-16	apparmor: use designated initializers	Kees Cook	1	-3/+5