summaryrefslogtreecommitdiff
path: root/security/apparmor/domain.c
AgeCommit message (Expand)AuthorFilesLines
2021-01-24apparmor: handle idmapped mountsChristian Brauner1-3/+6
2021-01-24xattr: handle idmapped mountsTycho Andersen1-2/+2
2020-08-24treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-08-07mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long1-2/+2
2020-06-08Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-25/+14
2020-06-05Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds1-5/+2
2020-05-22apparmor: fix potential label refcnt leak in aa_change_profileXiyu Yang1-2/+1
2020-05-20exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman1-5/+2
2020-01-21apparmor: remove duplicate check of xattrs on profile attachment.John Johansen1-17/+0
2020-01-21apparmor: add outofband transition and use it in xattr matchJohn Johansen1-4/+9
2020-01-21apparmor: fix nnp subset test for unconfinedJohn Johansen1-4/+5
2020-01-05apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen1-39/+43
2019-12-03Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-26/+20
2019-11-23apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen1-1/+1
2019-06-20apparmor: Switch to GFP_KERNEL where possibleSebastian Andrzej Siewior1-10/+10
2019-06-20apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior1-16/+10
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner1-5/+1
2019-03-07Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-2/+2
2019-02-22security: mark expected switch fall-throughs and add a missing breakGustavo A. R. Silva1-1/+1
2019-02-01apparmor: Fix aa_label_build() error handling for failed mergesJohn Johansen1-1/+4
2019-01-09AppArmor: Abstract use of cred security blobCasey Schaufler1-1/+1
2018-07-20apparmor: Fix failure to audit context info in build_change_hatJohn Johansen1-1/+1
2018-05-03apparmor: fix typo "loosen"Zygmunt Krynicki1-1/+1
2018-03-24apparmor: fix error returns checks by making size a ssize_tColin Ian King1-1/+1
2018-02-09apparmor: improve overlapping domain attachment resolutionJohn Johansen1-13/+17
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen1-16/+36
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett1-25/+127
2018-02-09apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen1-65/+98
2018-02-09apparmor: move context.h to cred.hJohn Johansen1-1/+1
2018-02-09apparmor: move task related defines and fns to task.X filesJohn Johansen1-2/+2
2018-02-09apparmor: rename tctx to ctxJohn Johansen1-8/+8
2018-02-09apparmor: drop cred_ctx and reference the label directlyJohn Johansen1-9/+5
2018-02-09apparmor: move task domain change info to task securityJohn Johansen1-6/+8
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen1-3/+3
2018-01-13apparmor: Fix regression in profile conflict logicMatthew Garrett1-4/+5
2017-11-21apparmor: fix locking when creating a new complain profile.John Johansen1-3/+15
2017-11-21apparmor: fix profile attachment for special unconfined profilesJohn Johansen1-1/+3
2017-11-21apparmor: ensure that undecidable profile attachments failJohn Johansen1-14/+32
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-2/+2
2017-09-22apparmor: add mount mediationJohn Johansen1-2/+2
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook1-18/+1
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-06-11apparmor: move change_profile mediation to using labelsJohn Johansen1-68/+123
2017-06-11apparmor: move change_hat mediation to using labelsJohn Johansen1-102/+201
2017-06-11apparmor: move exec domain mediation to using labelsJohn Johansen1-258/+592
2017-06-11apparmor: update aa_audit_file() to use labelsJohn Johansen1-2/+4
2017-06-11apparmor: move ptrace checks to using labelsJohn Johansen1-7/+10
2017-06-11apparmor: switch from profiles to using labels on contextsJohn Johansen1-35/+42
2017-06-11apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen1-13/+13
2017-06-11apparmor: convert to profile block critical sectionsJohn Johansen1-2/+3