summaryrefslogtreecommitdiffstats
path: root/security/apparmor
AgeCommit message (Expand)AuthorLines
6 daysapparmor: fix race between freeing data and fs accessing itJohn Johansen-101/+153
6 daysapparmor: fix race on rawdata dereferenceJohn Johansen-57/+93
6 daysapparmor: fix differential encoding verificationJohn Johansen-4/+20
6 daysapparmor: fix unprivileged local user can do privileged policy managementJohn Johansen-9/+43
6 daysapparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen-0/+1
6 daysapparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer-2/+3
6 daysapparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer-10/+20
6 daysapparmor: fix: limit the number of levels of policy namespacesJohn Johansen-0/+4
6 daysapparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer-3/+27
6 daysapparmor: fix memory leak in verify_headerMassimiliano Pellizzer-1/+0
6 daysapparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer-1/+11
2026-02-21Convert more 'alloc_obj' cases to default GFP_KERNEL argumentsLinus Torvalds-2/+1
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds-14/+14
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook-25/+24
2026-02-18apparmor: fix signedness bug in unpack_tags()Massimiliano Pellizzer-1/+1
2026-02-03apparmor: fix cast in format string DEBUG statementJohn Johansen-1/+1
2026-02-02apparmor: fix aa_label to return state from compount and component matchJohn Johansen-6/+6
2026-02-02apparmor: fix fmt string type error in process_strs_entryJohn Johansen-2/+3
2026-02-02apparmor: fix kernel-doc comments for inviewJohn Johansen-2/+2
2026-02-02apparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia-0/+9
2026-02-01apparmor: add .kunitconfigRyota Sakamoto-0/+5
2026-01-29apparmor: cleanup remove unused percpu critical sections in buffer managementJohn Johansen-5/+0
2026-01-29apparmor: document the buffer hold, add an overflow guardJohn Johansen-2/+26
2026-01-29apparmor: avoid per-cpu hold underflow in aa_get_bufferZhengmian Hu-1/+2
2026-01-29apparmor: split xxx_in_ns into its two separate semantic use casesJohn Johansen-46/+61
2026-01-29apparmor: make label_match return a consistent valueJohn Johansen-11/+9
2026-01-29apparmor: remove apply_modes_to_perms from label_matchJohn Johansen-3/+0
2026-01-29apparmor: fix fast path cache check for unix socketsJohn Johansen-14/+21
2026-01-29apparmor: fix rlimit for posix cpu timersJohn Johansen-0/+5
2026-01-29apparmor: refactor/cleanup cred helper fns.John Johansen-31/+69
2026-01-29apparmor: fix label and profile debug macrosJohn Johansen-1/+3
2026-01-29apparmor: move check for aa_null file to cover all casesJohn Johansen-6/+10
2026-01-29apparmor: guard against free routines being called with a NULLJohn Johansen-0/+6
2026-01-29apparmor: return -ENOMEM in unpack_perms_table upon alloc failureRyan Lee-2/+4
2026-01-29apparmor: account for in_atomic removal in common_file_permRyan Lee-3/+2
2026-01-29apparmor: drop in_atomic flag in common_mmap, and common_file_permJohn Johansen-12/+9
2026-01-29apparmor: fix boolean argument in apparmor_mmap_fileRyan Lee-1/+1
2026-01-29apparmor: userns: Add support for execpath in usernsMaxime Bélair-0/+32
2026-01-29apparmor: add support loading per permission taggingJohn Johansen-18/+269
2026-01-22apparmor: make str table more generic and be able to have multiple entriesJohn Johansen-46/+90
2026-01-22apparmor: Fix & Optimize table creation from possibly unaligned memoryHelge Deller-9/+10
2026-01-22AppArmor: Allow apparmor to handle unaligned dfa tablesHelge Deller-7/+8
2026-01-22apparmor: Replace deprecated strcpy with memcpy in gen_symlink_nameThorsten Blum-4/+8
2026-01-22apparmor: fix NULL sock in aa_sock_file_permJohn Johansen-2/+4
2026-01-18apparmor: fix NULL pointer dereference in __unix_needs_revalidationSystem Administrator-0/+3
2026-01-18apparmor: Replace deprecated strcpy in d_namespace_pathThorsten Blum-5/+8
2026-01-18apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_initThorsten Blum-9/+7
2026-01-16apparmor: replace sprintf with snprintf in aa_new_learning_profileThorsten Blum-6/+9
2025-12-05Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds-4/+9
2025-12-03Merge tag 'lsm-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-7/+14