summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2022-10-04apparmor: add mediation class information to auditingJohn Johansen14-13/+48
2022-10-04apparmor: extend permissions to support a label and tag stringJohn Johansen7-27/+32
2022-10-04apparmor: isolate policy backwards compatibility to its own fileJohn Johansen5-287/+359
2022-10-04apparmor: extend xindex sizeJohn Johansen3-17/+16
2022-10-04apparmor: move dfa perm macros into policy_unpackJohn Johansen2-51/+49
2022-10-04apparmor: extend policydb permission set by making use of the xbitsJohn Johansen1-4/+27
2022-10-04apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen1-4/+9
2022-10-04apparmor: Fix abi check to include v8 abiJohn Johansen1-1/+1
2022-10-04apparmor: preparse for state being more than just an integerJohn Johansen15-102/+101
2022-10-04apparmor: convert policy lookup to use accept as an indexJohn Johansen7-24/+33
2022-10-04apparmor: cleanup shared permission structJohn Johansen2-12/+9
2022-10-04apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2-4/+7
2022-10-04apparmor: convert fperm lookup to use accept as an indexJohn Johansen2-19/+44
2022-10-04apparmor: convert xmatch to using the new shared policydb structJohn Johansen6-29/+28
2022-10-04apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen7-59/+40
2022-10-04apparmor: compute policydb permission on profile loadJohn Johansen9-86/+90
2022-10-04apparmor: convert xmatch to use aa_perms structureJohn Johansen3-7/+13
2022-10-04apparmor: rework and cleanup fperm computationJohn Johansen1-32/+38
2022-10-04apparmor: move fperm computation into policy_unpackJohn Johansen3-98/+98
2022-10-04apparmor: compute xmatch permissions on profile loadMike Salvatore4-3/+26
2022-10-04apparmor: compute file permissions on profile loadMike Salvatore5-48/+110
2022-10-04apparmor: expose compression level limits in sysfsJon Tourville1-0/+16
2022-10-04apparmor: use zstd compression for profile dataJon Tourville4-102/+81
2022-10-04apparmor: reserve mediation classesJohn Johansen1-1/+8
2022-10-04apparmor: fix lockdep warning when removing a namespaceJohn Johansen1-1/+1
2022-10-04apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui1-1/+3
2022-08-10Merge tag 'apparmor-pr-2022-08-08' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds29-338/+486
2022-08-03Merge tag 'linux-kselftest-kunit-5.20-rc1' of git://git.kernel.org/pub/scm/li...Linus Torvalds1-6/+6
2022-08-03Merge tag 'integrity-v6.0' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds1-29/+23
2022-08-03Merge tag 'safesetid-6.0' of https://github.com/micah-morton/linuxLinus Torvalds2-9/+35
2022-08-03Merge tag 'Smack-for-6.0' of https://github.com/cschaufler/smack-nextLinus Torvalds2-12/+2
2022-08-03Merge tag 'selinux-pr-20220801' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-13/+19
2022-08-03Merge tag 'hardening-v5.20-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2-1/+182
2022-08-01smack: Remove the redundant lsm_inode_allocXiu Jianfeng1-7/+0
2022-08-01smack: Replace kzalloc + strncpy with kstrndupGONG, Ruiqi1-5/+2
2022-08-01Merge tag 'x86_kdump_for_v6.0_rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-1/+1
2022-08-01Merge tag 'fs.idmapped.vfsuid.v5.20' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2-7/+10
2022-07-20apparmor: correct config reference to intended oneLukas Bulwahn1-1/+1
2022-07-20lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg1-0/+4
2022-07-19apparmor: move ptrace mediation to more logical task.{h,c}John Johansen5-128/+133
2022-07-19apparmor: extend policydb permission set by making use of the xbitsJohn Johansen4-5/+25
2022-07-19apparmor: allow label to carry debug flagsJohn Johansen6-8/+20
2022-07-19apparmor: fix overlapping attachment computationJohn Johansen2-2/+2
2022-07-19apparmor: fix setting unconfined mode on a loaded profileJohn Johansen1-5/+7
2022-07-19apparmor: Fix some kernel-doc commentsYang Li1-6/+6
2022-07-19apparmor: Mark alloc_unconfined() as staticSouptick Joarder (HPE)1-1/+1
2022-07-15LSM: SafeSetID: Add setgroups() security policy handlingMicah Morton1-9/+30
2022-07-15security: Add LSM hook to setgroups() syscallMicah Morton1-0/+5
2022-07-14Merge tag 'integrity-v5.19-fix' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-9/+10
2022-07-14apparmor: disable showing the mode as part of a secid to secctxJohn Johansen3-6/+20