summaryrefslogtreecommitdiff
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2025-07-16apparmor: Remove use of the double lockJohn Johansen5-102/+104
2025-07-16apparmor: update kernel doc comments for xxx_label_crit_sectionJohn Johansen1-0/+8
2025-07-16apparmor: make __begin_current_label_crit_section() indicate whether put is n...Mateusz Guzik3-41/+67
2025-07-16Revert "apparmor: use SHA-256 library API instead of crypto_shash API"John Johansen2-13/+75
2025-07-16apparmor: mitigate parser generating large xtablesJohn Johansen3-6/+45
2025-07-14apparmor: use SHA-256 library API instead of crypto_shash APIEric Biggers2-75/+13
2025-06-18apparmor: file never has NULL f_path.mntAl Viro1-1/+1
2025-05-26apparmor: Document that label must be last member in struct aa_profileJohn Johansen1-1/+8
2025-05-26apparmor: make debug_values_table staticJohn Johansen1-1/+1
2025-05-26apparmor: force auditing of conflicting attachment execs from confinedRyan Lee1-0/+9
2025-05-26apparmor: include conflicting attachment info for confined ix/ux fallbackRyan Lee1-2/+33
2025-05-26apparmor: move the "conflicting profile attachments" infostr to a const decla...Ryan Lee1-1/+3
2025-05-26apparmor: force audit on unconfined exec if info is set by find_attachRyan Lee1-0/+16
2025-05-26apparmor: make all generated string array headers const char *constRyan Lee1-2/+2
2025-05-26apparmor: fix loop detection used in conflicting attachment resolutionRyan Lee2-15/+12
2025-05-18apparmor: ensure WB_HISTORY_SIZE value is a power of 2Ryan Lee2-1/+3
2025-05-17apparmor: fix some kernel-doc issues in header filesRandy Dunlap5-8/+8
2025-05-17apparmor: Fix incorrect profile->signal range checkColin Ian King1-1/+1
2025-05-17apparmor: use SHA-256 library API instead of crypto_shash APIEric Biggers2-75/+13
2025-05-17security/apparmor: use kfree_sensitive() in unpack_secmark()Zilin Guan1-2/+2
2025-04-08VFS: rename lookup_one_len family to lookup_noperm and remove permission checkNeilBrown1-2/+2
2025-02-27Change inode_operations.mkdir to return struct dentry *NeilBrown1-4/+4
2025-02-10apparmor: Remove unused variable 'sock' in __file_sock_perm()Nathan Chancellor1-3/+0
2025-02-10apparmor: use the condition in AA_BUG_FMT even with debug disabledMateusz Guzik1-1/+5
2025-02-10apparmor: fix typos and spelling errorsTanya Agarwal5-9/+9
2025-02-10apparmor: Modify mismatched function nameJiapeng Chong1-1/+1
2025-02-10apparmor: Modify mismatched function nameJiapeng Chong1-1/+1
2025-02-10apparmor: Fix checking address of an array in accum_label_info()Nathan Chancellor1-1/+1
2025-01-28treewide: const qualify ctl_tables where applicableJoel Granados1-1/+1
2025-01-22Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-19/+22
2025-01-20Merge tag 'vfs-6.14-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2025-01-18apparmor: fix dbus permission queries to v9 ABIJohn Johansen1-0/+8
2025-01-18apparmor: gate make fine grained unix mediation behind v9 abiJohn Johansen4-10/+26
2025-01-18apparmor: add fine grained af_unix mediationJohn Johansen12-58/+1063
2025-01-18apparmor: in preparation for finer networking rules rework match_protJohn Johansen2-14/+75
2025-01-18apparmor: lift kernel socket check out of critical sectionJohn Johansen1-1/+5
2025-01-18apparmor: remove af_select macroJohn Johansen2-36/+9
2025-01-18apparmor: add ability to mediate caps with policy state machineJohn Johansen3-6/+62
2025-01-18apparmor: fix x_table_lookup when stacking is not the first entryJohn Johansen1-23/+29
2025-01-18apparmor: add support for profiles to define the kill signalJohn Johansen8-6/+34
2025-01-18apparmor: add additional flags to extended permission.John Johansen7-21/+54
2025-01-18apparmor: carry mediation check on labelJohn Johansen6-24/+68
2025-01-18apparmor: cleanup: refactor file_perm() to doc semantics of some checksJohn Johansen1-2/+15
2025-01-18apparmor: remove explicit restriction that unconfined cannot use change_hatJohn Johansen2-3/+18
2025-01-18apparmor: ensure labels with more than one entry have correct flagsJohn Johansen1-1/+2
2025-01-18apparmor: switch signal mediation to use RULE_MEDIATESJohn Johansen1-5/+5
2025-01-18apparmor: remove redundant unconfined check.John Johansen1-2/+1
2025-01-18apparmor: cleanup: attachment perm lookup to use lookup_perms()John Johansen1-8/+6
2025-01-18apparmor: Improve debug print infrastructureJohn Johansen9-34/+177
2025-01-18apparmor: Use str_yes_no() helper functionThorsten Blum1-4/+4
generated by cgit v1.2.3 (git 2.39.0) at 2026-05-01 07:31:50 +0300