summaryrefslogtreecommitdiffstats
path: root/security/apparmor
AgeCommit message (Expand)AuthorLines
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen-529/+686
2017-06-10apparmor: add the base fns() for domain labelsJohn Johansen-0/+2561
2017-06-10apparmor: revalidate files during execJohn Johansen-0/+81
2017-06-10apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen-11/+16
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen-32/+29
2017-06-10apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen-37/+2
2017-06-10apparmor: refactor updating profiles to the newest parentJohn Johansen-4/+31
2017-06-10apparmor: share profile name on replacementJohn Johansen-9/+72
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen-56/+162
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen-32/+30
2017-06-10apparmor: fix display of ns nameJohn Johansen-1/+1
2017-06-10apparmor: fix apparmor_query dataJohn Johansen-2/+6
2017-06-10apparmor: fix policy load/remove semanticsJohn Johansen-15/+13
2017-06-10apparmor: add namespace lookup fns()John Johansen-4/+73
2017-06-10apparmor: cleanup __find_child()John Johansen-8/+8
2017-06-10apparmor: provide information about path buffer size at bootJohn Johansen-2/+9
2017-06-10apparmor: add profile permission query abilityJohn Johansen-1/+102
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen-48/+29
2017-06-10apparmor: add gerneric permissions struct and support fnsJohn Johansen-17/+153
2017-06-10apparmor: add fn to test if profile supports a given mediation classJohn Johansen-0/+10
2017-06-10apparmor: speed up transactional queriesJohn Johansen-11/+114
2017-06-10apparmor: add label data availability to the feature setJohn Johansen-0/+10
2017-06-10apparmor: add mkdir/rmdir interface to manage policy namespacesJohn Johansen-1/+94
2017-06-10apparmor: add policy revision file interfaceJohn Johansen-1/+116
2017-06-10apparmor: provide finer control over policy managementJohn Johansen-23/+35
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen-53/+133
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen-19/+43
2017-06-08apparmor: convert from securityfs to apparmorfs for policy ns filesJohn Johansen-26/+37
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen-7/+8
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen-127/+172
2017-06-08apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen-17/+336
2017-06-08apparmor: use macro template to simplify namespace seq_filesJohn Johansen-29/+24
2017-06-08apparmor: use macro template to simplify profile seq_filesJohn Johansen-61/+36
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen-69/+409
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen-86/+53
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen-17/+34
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen-1/+2
2017-06-08apparmor: move file context into file.hJohn Johansen-32/+32
2017-06-08security/apparmor: Use POSIX-compatible "printf '%s'"Thomas Schneider-2/+2
2017-06-08apparmor: Fix error cod in __aa_fs_profile_mkdir()Dan Carpenter-2/+4
2017-06-08apparmorfs: Use seq_putc() in two functionsMarkus Elfring-2/+2
2017-06-08apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()Markus Elfring-4/+3
2017-05-18doc: ReSTify apparmor.txtKees Cook-2/+2
2017-05-08apparmorfs: replace CURRENT_TIME with current_time()Deepa Dinamani-1/+1
2017-05-08mm: introduce kv[mz]alloc helpersMichal Hocko-44/+3
2017-04-07apparmor: Make path_max parameter readonlyJohn Johansen-1/+1
2017-04-07apparmor: fix parameters so that the permission test is bypassed at bootJohn Johansen-26/+23
2017-04-07apparmor: fix invalid reference to index variable of iterator line 836John Johansen-2/+4
2017-04-07apparmor: use SHASH_DESC_ON_STACKNicolas Iooss-19/+13
2017-04-07security/apparmor/lsm.c: set debug messagesValentin Rothberg-1/+1