summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include
AgeCommit message (Expand)AuthorLines
2017-06-10apparmor: add domain label stacking info to apparmorfsJohn Johansen-0/+3
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen-1/+86
2017-06-10apparmor: mediate files when they are receivedJohn Johansen-0/+1
2017-06-10apparmor: move path_link mediation to using labelsJohn Johansen-1/+1
2017-06-10apparmor: refactor path name lookup and permission checks around labelsJohn Johansen-1/+4
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen-1/+2
2017-06-10apparmor: move aa_file_perm() to use labelsJohn Johansen-8/+21
2017-06-10apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen-0/+6
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen-5/+6
2017-06-10apparmor: add cross check permission helper macrosJohn Johansen-1/+41
2017-06-10apparmor: move resource checks to using labelsJohn Johansen-2/+2
2017-06-10apparmor: move capability checks to using labelsJohn Johansen-2/+4
2017-06-10apparmor: switch getprocattr to using label_print fns()John Johansen-1/+1
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen-166/+132
2017-06-10apparmor: add the base fns() for domain labelsJohn Johansen-0/+441
2017-06-10apparmor: revalidate files during execJohn Johansen-0/+3
2017-06-10apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen-5/+12
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen-8/+8
2017-06-10apparmor: share profile name on replacementJohn Johansen-1/+31
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen-23/+100
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen-2/+0
2017-06-10apparmor: add namespace lookup fns()John Johansen-0/+13
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen-22/+5
2017-06-10apparmor: add gerneric permissions struct and support fnsJohn Johansen-2/+36
2017-06-10apparmor: add fn to test if profile supports a given mediation classJohn Johansen-0/+10
2017-06-10apparmor: add policy revision file interfaceJohn Johansen-0/+3
2017-06-10apparmor: provide finer control over policy managementJohn Johansen-2/+6
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen-21/+53
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen-19/+42
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen-2/+2
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen-31/+31
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen-4/+72
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen-2/+2
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen-1/+4
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen-0/+1
2017-06-08apparmor: move file context into file.hJohn Johansen-32/+32
2017-05-08mm: introduce kv[mz]alloc helpersMichal Hocko-11/+0
2017-04-07apparmor: fix parameters so that the permission test is bypassed at bootJohn Johansen-1/+1
2017-02-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds-344/+672
2017-01-16apparmor: fix restricted endian type warnings for dfa unpackJohn Johansen-3/+3
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen-0/+53
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua-0/+16
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen-2/+2
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen-13/+32
2017-01-16apparmor: change op from int to const char *John Johansen-60/+60
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen-38/+40
2017-01-16apparmor: add per policy ns .load, .replace, .remove interface filesJohn Johansen-0/+6
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen-3/+4
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen-0/+1
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen-3/+39