summaryrefslogtreecommitdiff
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
9 daysapparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen1-2/+2
2026-08-16apparmor: fix deadlock in complain-mode change_hatJohn Johansen3-14/+37
2026-08-11apparmor: constify aa_label parameters on read-only query helpersJohn Johansen2-20/+23
2026-08-11apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen8-32/+37
2026-08-11apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen10-23/+25
2026-08-11apparmor: constify aa_perms parameters that are read-onlyJohn Johansen6-10/+11
2026-08-11apparmor: drop use of _confined variant for iterationJohn Johansen1-7/+7
2026-08-11apparmor: refactory mount to use check_permsJohn Johansen4-168/+144
2026-08-11apparmor: fix auditing of mount binary dataJohn Johansen1-2/+2
2026-08-11apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen4-10/+22
2026-08-11apparmor: mark static tables and structs as read onlyJohn Johansen8-20/+22
2026-08-11apparmor: fix error debug output in fn_label_buildJohn Johansen1-2/+2
2026-08-11apparmor: make table entry count last enum for static tablesJohn Johansen3-5/+5
2026-08-11apparmor: fix race condition in label replacementJohn Johansen1-12/+48
2026-08-11apparmor: refactor xattr attachment, to take the file pathJohn Johansen1-15/+19
2026-08-11apparmor: fix unconfined user namespace restriction forced stackJohn Johansen1-26/+54
2026-08-11apparmor: reserve mediation class for packet mediationJohn Johansen2-1/+2
2026-08-11apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen1-36/+33
2026-08-11apparmor: move netfilter functions next to the LSM network operationsJohn Johansen1-44/+46
2026-08-11apparmor: refactor network socket mediation to support compatibilityJohn Johansen1-8/+10
2026-08-11apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen2-13/+497
2026-08-11apparmor: refactor network sock mediation in preparation for inet mediationJohn Johansen6-22/+190
2026-08-11apparmor: make MEDIATES_AF_UNIX its own fnJohn Johansen3-9/+13
2026-08-11apparmor: fix error handling for copy_from_user in policy_updateJohn Johansen1-3/+3
2026-08-11apparmor: fix out-of-bounds write when null terminating a label vecHyunwoo Kim1-3/+3
2026-08-10apparmor: fix integer overflow in verify_tags() bounds checkFabrice Derepas1-1/+1
2026-08-08apparmor: optimize current_label_crit_section() with needputJohn Johansen5-58/+84
2026-08-07apparmor: fix cred UAF caused by begin_current_label_crit_section()Jann Horn3-9/+39
2026-08-06apparmor: use SEND_SIG_NOINFO instead of NULL in aa_audit()Oleg Nesterov1-1/+1
2026-08-03apparmor: Fix warning: 'decompress_zstd' defined but not usedJohn Johansen1-10/+6
2026-08-01apparmor: fix implicit declaration of function 'decompress_zstd'John Johansen1-6/+15
2026-07-30apparmor: Fix build failure when ZSTD_DECOMPRESS is not enabledJohn Johansen2-1/+26
2026-07-30apparmor: compressed_data not described in aa_get_data_from_compressedJohn Johansen1-1/+1
2026-07-23apparmor: switch website link to httpsBaruch Siach1-1/+1
2026-07-21apparmor: leverage audit_log_n_untrustedstring() when possiblePaul Moore1-4/+1
2026-07-16apparmor: replace decompress_zstd() prototype with its entityTetsuo Handa1-36/+36
2026-06-29apparmor: fix alternate loaders ability to load compressed policyJohn Johansen1-3/+34
2026-06-29apparmor: Initial support for compressed policiesMaxime Bélair5-10/+123
2026-06-29apparmor: make include headers self-containedRyan Lee7-0/+16
2026-06-29apparmor: fix net.h and policy.h circular include patternRyan Lee5-1/+4
2026-06-24apparmor: advertise the tcp fast open fix is appliedJohn Johansen1-0/+2
2026-06-23apparmor: mediate the implicit connect of TCP fast open sendmsgBryam Vargas1-1/+15
2026-06-15apparmor: fix label can not be immediately before a declarationJohn Johansen1-1/+2
2026-06-14apparmor: fix kernel-doc warningsRodrigo Zaiden2-2/+2
2026-06-14apparmor: replace get_zeroed_page() with kzalloc()Mike Rapoport (Microsoft)1-2/+3
2026-06-14security: apparmor: fix two spelling mistakesQingshuang Fu2-2/+2
2026-06-14apparmor: fix use-after-free in rawdata dedup loopRuslan Valiyev2-2/+25
2026-06-14apparmor: Fix inverted comparison in cache_hold_inc()Eduardo Vasconcelos1-1/+1
2026-06-14apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()Maciek Borzecki1-5/+5
2026-06-14apparmor: don't audit files pointing to aa_null.dentryGeorgia Garcia1-1/+1