summaryrefslogtreecommitdiff
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2017-06-08apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen1-17/+336
2017-06-08apparmor: use macro template to simplify namespace seq_filesJohn Johansen1-29/+24
2017-06-08apparmor: use macro template to simplify profile seq_filesJohn Johansen1-61/+36
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen7-69/+409
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen4-86/+53
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen6-17/+34
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen2-1/+2
2017-06-08apparmor: move file context into file.hJohn Johansen2-32/+32
2017-06-08security/apparmor: Use POSIX-compatible "printf '%s'"Thomas Schneider1-2/+2
2017-06-08apparmor: Fix error cod in __aa_fs_profile_mkdir()Dan Carpenter1-2/+4
2017-06-08apparmorfs: Use seq_putc() in two functionsMarkus Elfring1-2/+2
2017-06-08apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()Markus Elfring1-4/+3
2017-05-09apparmorfs: replace CURRENT_TIME with current_time()Deepa Dinamani1-1/+1
2017-05-09mm: introduce kv[mz]alloc helpersMichal Hocko5-44/+3
2017-04-07apparmor: Make path_max parameter readonlyJohn Johansen1-1/+1
2017-04-07apparmor: fix parameters so that the permission test is bypassed at bootJohn Johansen2-26/+23
2017-04-07apparmor: fix invalid reference to index variable of iterator line 836John Johansen1-2/+4
2017-04-07apparmor: use SHASH_DESC_ON_STACKNicolas Iooss1-19/+13
2017-04-07security/apparmor/lsm.c: set debug messagesValentin Rothberg1-1/+1
2017-04-07apparmor: fix boolreturn.cocci warningskbuild test robot1-2/+2
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-03-02sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar1-0/+1
2017-03-02sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar1-0/+1
2017-02-24Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-1/+1
2017-02-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds35-1521/+2794
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-5/+2
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman1-1/+1
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-1/+2
2017-01-17apparmor: fix undefined reference to `aa_g_hash_policy'John Johansen1-1/+1
2017-01-16apparmor: replace remaining BUG_ON() asserts with AA_BUG()John Johansen4-5/+5
2017-01-16apparmor: fix restricted endian type warnings for policy unpackJohn Johansen1-6/+6
2017-01-16apparmor: fix restricted endian type warnings for dfa unpackJohn Johansen2-12/+12
2017-01-16apparmor: add check for apparmor enabled in module parameters missing itJohn Johansen1-0/+10
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen2-1/+103
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks2-1/+47
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua5-0/+245
2017-01-16apparmor: update cap audit to check SECURITY_CAP_NOAUDITJohn Johansen1-6/+10
2017-01-16apparmor: make computing policy hashes conditional on kernel parameterJohn Johansen2-29/+32
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen5-66/+28
2017-01-16apparmor: fix change_hat debug outputJohn Johansen1-4/+5
2017-01-16apparmor: remove unused op parameter from simple_write_to_buffer()John Johansen1-6/+3
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen12-161/+155
2017-01-16apparmor: change op from int to const char *John Johansen10-134/+84
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen5-144/+150
2017-01-16apparmor: fail task profile update if current_cred isn't real_credJohn Johansen1-0/+3
2017-01-16apparmor: add per policy ns .load, .replace, .remove interface filesJohn Johansen2-22/+130
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen3-16/+21
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen3-24/+77
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen8-58/+278
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen2-10/+25
generated by cgit v1.2.3 (git 2.39.0) at 2024-11-20 04:30:07 +0300