summaryrefslogtreecommitdiff
path: root/security/apparmor/policy.c
AgeCommit message (Expand)AuthorFilesLines
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks1-1/+0
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+23
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-23/+19
2017-01-16apparmor: change op from int to const char *John Johansen1-3/+4
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-1/+1
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen1-11/+14
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen1-14/+40
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen1-7/+7
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen1-10/+24
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()John Johansen1-12/+10
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen1-3/+9
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen1-3/+22
2017-01-16apparmor: allow specifying the profile doing the managementJohn Johansen1-11/+21
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen1-3/+4
2017-01-16apparmor: add a default null dfaJohn Johansen1-0/+2
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen1-13/+40
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen1-5/+6
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen1-2/+4
2017-01-16apparmor: pass gfp param into aa_policy_init()John Johansen1-1/+1
2017-01-16apparmor: rename hname_tail to basenameJohn Johansen1-1/+1
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen1-0/+29
2017-01-16apparmor: add strn version of lookup_profile fnJohn Johansen1-11/+25
2017-01-16apparmor: rename replacedby to proxyJohn Johansen1-35/+35
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen1-1/+1
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen1-16/+16
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-284/+14
2017-01-16apparmor: split out shared policy_XXX fns to libJohn Johansen1-119/+4
2016-07-12apparmor: fix module parameters can be changed after policy is lockedJohn Johansen1-1/+17
2016-07-12apparmor: fix refcount race when finding a child profileJohn Johansen1-1/+3
2016-07-12apparmor: fix audit full profile hname on successful loadJohn Johansen1-1/+1
2016-07-12apparmor: fix log failures for all profiles in a setJohn Johansen1-10/+19
2016-07-12apparmor: fix put() parent ref after updating the active refJohn Johansen1-1/+1
2016-07-12apparmor: fix replacement bug that adds new child to old parentJohn Johansen1-1/+1
2016-07-12apparmor: fix refcount bug in profile replacementJohn Johansen1-2/+2
2013-10-16apparmor: fix memleak of the profile hashJohn Johansen1-0/+1
2013-09-30apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen1-1/+2
2013-08-14apparmor: add interface files for profiles and namespacesJohn Johansen1-12/+63
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen1-2/+4
2013-08-14apparmor: make free_profile available outside of policy.cJohn Johansen1-5/+4
2013-08-14apparmor: rework namespace free pathJohn Johansen1-27/+6
2013-08-14apparmor: update how unconfined is handledJohn Johansen1-41/+27
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen1-38/+47
2013-08-14apparmor: convert profile lists to RCU based lockingJohn Johansen1-104/+109
2013-08-14apparmor: provide base for multiple profiles to be replaced at onceJohn Johansen1-117/+183
2013-04-28apparmor: Fix smatch warning in aa_remove_profilesJohn Johansen1-8/+6
2013-04-28apparmor: move the free_profile fn ahead of aa_alloc_profileJohn Johansen1-75/+75
2013-04-28apparmor: remove sid from profilesJohn Johansen1-17/+6
2012-10-24apparmor: fix IRQ stack overflow during free_profileJohn Johansen1-1/+23
2012-05-22Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris1-1/+1
2012-05-18apparmor: fix profile lookup for unconfinedJohn Johansen1-0/+4