summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include
AgeCommit message (Expand)AuthorLines
2018-01-12apparmor: fix ptrace label match when matching stacked labelsJohn Johansen-0/+3
2017-11-30Merge tag 'apparmor-pr-2017-11-30' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds-5/+7
2017-11-27apparmor: fix oops in audit_signal_cb hookJohn Johansen-5/+7
2017-11-27Rename superblock flags (MS_xyz -> SB_xyz)Linus Torvalds-1/+1
2017-11-07Merge branch 'linus' into locking/core, to resolve conflictsIngo Molnar-147/+11
2017-10-26Revert "apparmor: add base infastructure for socket mediation"Linus Torvalds-147/+11
2017-10-10locking/rwsem, security/apparmor: Replace homebrew use of write_can_lock() wi...Will Deacon-11/+0
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds-11/+326
2017-09-22apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen-1/+4
2017-09-22apparmor: add base infastructure for socket mediationJohn Johansen-11/+147
2017-09-22apparmor: make policy_unpack able to audit different info messagesJohn Johansen-2/+2
2017-09-22apparmor: add support for absolute root view based labelsJohn Johansen-0/+1
2017-09-22apparmor: add mount mediationJohn Johansen-0/+71
2017-09-22apparmor: add the ability to mediate signalsJohn Johansen-0/+104
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook-4/+0
2017-06-10apparmor: add domain label stacking info to apparmorfsJohn Johansen-0/+3
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen-1/+86
2017-06-10apparmor: mediate files when they are receivedJohn Johansen-0/+1
2017-06-10apparmor: move path_link mediation to using labelsJohn Johansen-1/+1
2017-06-10apparmor: refactor path name lookup and permission checks around labelsJohn Johansen-1/+4
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen-1/+2
2017-06-10apparmor: move aa_file_perm() to use labelsJohn Johansen-8/+21
2017-06-10apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen-0/+6
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen-5/+6
2017-06-10apparmor: add cross check permission helper macrosJohn Johansen-1/+41
2017-06-10apparmor: move resource checks to using labelsJohn Johansen-2/+2
2017-06-10apparmor: move capability checks to using labelsJohn Johansen-2/+4
2017-06-10apparmor: switch getprocattr to using label_print fns()John Johansen-1/+1
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen-166/+132
2017-06-10apparmor: add the base fns() for domain labelsJohn Johansen-0/+441
2017-06-10apparmor: revalidate files during execJohn Johansen-0/+3
2017-06-10apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen-5/+12
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen-8/+8
2017-06-10apparmor: share profile name on replacementJohn Johansen-1/+31
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen-23/+100
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen-2/+0
2017-06-10apparmor: add namespace lookup fns()John Johansen-0/+13
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen-22/+5
2017-06-10apparmor: add gerneric permissions struct and support fnsJohn Johansen-2/+36
2017-06-10apparmor: add fn to test if profile supports a given mediation classJohn Johansen-0/+10
2017-06-10apparmor: add policy revision file interfaceJohn Johansen-0/+3
2017-06-10apparmor: provide finer control over policy managementJohn Johansen-2/+6
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen-21/+53
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen-19/+42
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen-2/+2
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen-31/+31
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen-4/+72
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen-2/+2
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen-1/+4
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen-0/+1