summaryrefslogtreecommitdiffstats
path: root/security/apparmor
AgeCommit message (Expand)AuthorLines
2022-10-03apparmor: make __aa_path_perm() staticXiu Jianfeng-6/+4
2022-10-03apparmor: Simplify obtain the newest label on a credGaosheng Cui-14/+1
2022-10-03apparmor: Fix regression in stacking due to label flagsJohn Johansen-5/+7
2022-10-03apparmor: fix aa_class_names[] to match reserved classesJohn Johansen-1/+16
2022-10-03apparmor: rework profile->rules to be a listJohn Johansen-57/+142
2022-10-03apparmor: refactor profile rules and attachmentsJohn Johansen-239/+308
2022-10-03apparmor: verify loaded permission bits masks don't overlapJohn Johansen-4/+30
2022-10-03apparmor: cleanup: move perm accumulation into perms.hJohn Johansen-52/+53
2022-10-03apparmor: make sure perm indexes are accumulatedJohn Johansen-2/+25
2022-10-03apparmor: verify permission table indexesJohn Johansen-1/+34
2022-10-03apparmor: add the ability for policy to specify a permission tableJohn Johansen-11/+98
2022-10-03apparmor: make unpack_array return a trianary valueJohn Johansen-22/+33
2022-10-03apparmor: group dfa policydb unpackingJohn Johansen-38/+63
2022-10-03apparmor: make transition table unpack generic so it can be reusedJohn Johansen-10/+12
2022-10-03apparmor: add user mode flagJohn Johansen-5/+9
2022-10-03apparmor: add mediation class information to auditingJohn Johansen-13/+48
2022-10-03apparmor: extend permissions to support a label and tag stringJohn Johansen-27/+32
2022-10-03apparmor: isolate policy backwards compatibility to its own fileJohn Johansen-287/+359
2022-10-03apparmor: extend xindex sizeJohn Johansen-17/+16
2022-10-03apparmor: move dfa perm macros into policy_unpackJohn Johansen-51/+49
2022-10-03apparmor: extend policydb permission set by making use of the xbitsJohn Johansen-4/+27
2022-10-03apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen-4/+9
2022-10-03apparmor: Fix abi check to include v8 abiJohn Johansen-1/+1
2022-10-03apparmor: preparse for state being more than just an integerJohn Johansen-102/+101
2022-10-03apparmor: convert policy lookup to use accept as an indexJohn Johansen-24/+33
2022-10-03apparmor: cleanup shared permission structJohn Johansen-12/+9
2022-10-03apparmor: convert xmatch lookup to use accept as an indexJohn Johansen-4/+7
2022-10-03apparmor: convert fperm lookup to use accept as an indexJohn Johansen-19/+44
2022-10-03apparmor: convert xmatch to using the new shared policydb structJohn Johansen-29/+28
2022-10-03apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen-59/+40
2022-10-03apparmor: compute policydb permission on profile loadJohn Johansen-86/+90
2022-10-03apparmor: convert xmatch to use aa_perms structureJohn Johansen-7/+13
2022-10-03apparmor: rework and cleanup fperm computationJohn Johansen-32/+38
2022-10-03apparmor: move fperm computation into policy_unpackJohn Johansen-98/+98
2022-10-03apparmor: compute xmatch permissions on profile loadMike Salvatore-3/+26
2022-10-03apparmor: compute file permissions on profile loadMike Salvatore-48/+110
2022-10-03apparmor: expose compression level limits in sysfsJon Tourville-0/+16
2022-10-03apparmor: use zstd compression for profile dataJon Tourville-102/+81
2022-10-03apparmor: reserve mediation classesJohn Johansen-1/+8
2022-10-03apparmor: fix lockdep warning when removing a namespaceJohn Johansen-1/+1
2022-10-03apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui-1/+3
2022-09-01->getprocattr(): attribute name is const char *, TYVM...Al Viro-1/+1
2022-07-20apparmor: correct config reference to intended oneLukas Bulwahn-1/+1
2022-07-19apparmor: move ptrace mediation to more logical task.{h,c}John Johansen-128/+133
2022-07-19apparmor: extend policydb permission set by making use of the xbitsJohn Johansen-5/+25
2022-07-19apparmor: allow label to carry debug flagsJohn Johansen-8/+20
2022-07-19apparmor: fix overlapping attachment computationJohn Johansen-2/+2
2022-07-19apparmor: fix setting unconfined mode on a loaded profileJohn Johansen-5/+7
2022-07-19apparmor: Fix some kernel-doc commentsYang Li-6/+6
2022-07-19apparmor: Mark alloc_unconfined() as staticSouptick Joarder (HPE)-1/+1