summaryrefslogtreecommitdiff
path: root/security/apparmor/include
AgeCommit message (Expand)AuthorFilesLines
2018-01-13apparmor: fix ptrace label match when matching stacked labelsJohn Johansen1-0/+3
2017-12-01Merge tag 'apparmor-pr-2017-11-30' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-5/+7
2017-11-28apparmor: fix oops in audit_signal_cb hookJohn Johansen1-5/+7
2017-11-28Rename superblock flags (MS_xyz -> SB_xyz)Linus Torvalds1-1/+1
2017-11-07Merge branch 'linus' into locking/core, to resolve conflictsIngo Molnar4-147/+11
2017-10-26Revert "apparmor: add base infastructure for socket mediation"Linus Torvalds4-147/+11
2017-10-10locking/rwsem, security/apparmor: Replace homebrew use of write_can_lock() wi...Will Deacon1-11/+0
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds10-11/+326
2017-09-22apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen1-1/+4
2017-09-22apparmor: add base infastructure for socket mediationJohn Johansen4-11/+147
2017-09-22apparmor: make policy_unpack able to audit different info messagesJohn Johansen1-2/+2
2017-09-22apparmor: add support for absolute root view based labelsJohn Johansen1-0/+1
2017-09-22apparmor: add mount mediationJohn Johansen4-0/+71
2017-09-22apparmor: add the ability to mediate signalsJohn Johansen4-0/+104
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook2-4/+0
2017-06-11apparmor: add domain label stacking info to apparmorfsJohn Johansen2-0/+3
2017-06-11apparmor: move exec domain mediation to using labelsJohn Johansen1-1/+86
2017-06-11apparmor: mediate files when they are receivedJohn Johansen1-0/+1
2017-06-11apparmor: move path_link mediation to using labelsJohn Johansen1-1/+1
2017-06-11apparmor: refactor path name lookup and permission checks around labelsJohn Johansen1-1/+4
2017-06-11apparmor: update aa_audit_file() to use labelsJohn Johansen1-1/+2
2017-06-11apparmor: move aa_file_perm() to use labelsJohn Johansen1-8/+21
2017-06-11apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen1-0/+6
2017-06-11apparmor: move ptrace checks to using labelsJohn Johansen2-5/+6
2017-06-11apparmor: add cross check permission helper macrosJohn Johansen1-1/+41
2017-06-11apparmor: move resource checks to using labelsJohn Johansen1-2/+2
2017-06-11apparmor: move capability checks to using labelsJohn Johansen1-2/+4
2017-06-11apparmor: switch getprocattr to using label_print fns()John Johansen1-1/+1
2017-06-11apparmor: switch from profiles to using labels on contextsJohn Johansen6-166/+132
2017-06-11apparmor: add the base fns() for domain labelsJohn Johansen1-0/+441
2017-06-11apparmor: revalidate files during execJohn Johansen2-0/+3
2017-06-11apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen1-5/+12
2017-06-11apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen2-8/+8
2017-06-11apparmor: share profile name on replacementJohn Johansen1-1/+31
2017-06-11apparmor: convert to profile block critical sectionsJohn Johansen1-23/+100
2017-06-11apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen1-2/+0
2017-06-11apparmor: add namespace lookup fns()John Johansen1-0/+13
2017-06-11apparmor: switch from file_perms to aa_permsJohn Johansen2-22/+5
2017-06-11apparmor: add gerneric permissions struct and support fnsJohn Johansen2-2/+36
2017-06-11apparmor: add fn to test if profile supports a given mediation classJohn Johansen1-0/+10
2017-06-11apparmor: add policy revision file interfaceJohn Johansen2-0/+3
2017-06-11apparmor: provide finer control over policy managementJohn Johansen1-2/+6
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen2-21/+53
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen3-19/+42
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen1-2/+2
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen3-31/+31
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen3-4/+72
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen1-2/+2
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen2-1/+4
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen1-0/+1