linux/security/apparmor/include, branch v4.13Mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
https://git.shady.money/linux/atom?h=v4.132017-06-11T00:11:47Zapparmor: add domain label stacking info to apparmorfs2017-06-11T00:11:47ZJohn Johansenjohn.johansen@canonical.com2017-06-10T00:11:17Zurn:sha1:40cde7fcc344bc77c1ec9d291dcc35ab12f078aa
Now that the domain label transition is complete advertise it to
userspace.
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move exec domain mediation to using labels2017-06-11T00:11:46ZJohn Johansenjohn.johansen@canonical.com2017-06-09T23:55:04Zurn:sha1:93c98a484c4900f0d2c65c16466d45f90ea5b175
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: mediate files when they are received2017-06-11T00:11:45ZJohn Johansenjohn.johansen@canonical.com2017-06-10T00:15:56Zurn:sha1:064dc9472fa2bc31a7b178882bd7eff782c3d239
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move path_link mediation to using labels2017-06-11T00:11:44ZJohn Johansenjohn.johansen@canonical.com2017-06-09T23:06:21Zurn:sha1:8014370f1257619226b79cb6de8e28563fbbc070
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: refactor path name lookup and permission checks around labels2017-06-11T00:11:43ZJohn Johansenjohn.johansen@canonical.com2017-06-09T23:02:25Zurn:sha1:aebd873e8d3e34757c9295eef074d1be229f5893
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: update aa_audit_file() to use labels2017-06-11T00:11:43ZJohn Johansenjohn.johansen@canonical.com2017-06-09T22:48:20Zurn:sha1:98c3d182321d489d8bfaa596127020ec3027edb2
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move aa_file_perm() to use labels2017-06-11T00:11:42ZJohn Johansenjohn.johansen@canonical.com2017-06-09T21:59:51Zurn:sha1:190a95189eb9e2233ed71a85cd6dd0c8efc9d392
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: allow ptrace checks to be finer grained than just capability2017-06-11T00:11:42ZJohn Johansenjohn.johansen@canonical.com2017-06-09T21:38:35Zurn:sha1:290f458a4f16f9cf6cb6562b249e69fe1c3c3a07
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move ptrace checks to using labels2017-06-11T00:11:41ZJohn Johansenjohn.johansen@canonical.com2017-06-09T21:22:14Zurn:sha1:b2d09ae449cedc6f276ac485c013d22a97d36992
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add cross check permission helper macros2017-06-11T00:11:41ZJohn Johansenjohn.johansen@canonical.com2017-06-09T21:23:09Zurn:sha1:ca916e8e2d88e97134a313eb3100ce9c3d8fd3f2
The cross check permission helper macros will help simplify code
that does cross task permission checks like ptrace.
Signed-off-by: John Johansen <john.johansen@canonical.com>