summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2017-06-10apparmor: export that basic profile namespaces are supportedJohn Johansen-0/+7
2017-06-10apparmor: add stacked domain labels interfaceJohn Johansen-0/+8
2017-06-10apparmor: add domain label stacking info to apparmorfsJohn Johansen-0/+39
2017-06-10apparmor: move change_profile mediation to using labelsJohn Johansen-68/+123
2017-06-10apparmor: move change_hat mediation to using labelsJohn Johansen-102/+201
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen-259/+678
2017-06-10apparmor: support v7 transition format compatible with label_parseJohn Johansen-7/+15
2017-06-10apparmor: mediate files when they are receivedJohn Johansen-0/+7
2017-06-10apparmor: rework file permission to cache file access in file->ctxJohn Johansen-6/+76
2017-06-10apparmor: move path_link mediation to using labelsJohn Johansen-47/+59
2017-06-10apparmor: refactor path name lookup and permission checks around labelsJohn Johansen-45/+85
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen-9/+18
2017-06-10apparmor: move aa_file_perm() to use labelsJohn Johansen-37/+64
2017-06-10apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen-0/+68
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen-80/+58
2017-06-10apparmor: add cross check permission helper macrosJohn Johansen-1/+41
2017-06-10apparmor: move resource checks to using labelsJohn Johansen-42/+80
2017-06-10apparmor: move capability checks to using labelsJohn Johansen-29/+58
2017-06-10apparmor: update query interface to support label queriesJohn Johansen-7/+39
2017-06-10apparmor: switch getprocattr to using label_print fns()John Johansen-37/+27
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen-529/+686
2017-06-10apparmor: add the base fns() for domain labelsJohn Johansen-0/+2561
2017-06-10apparmor: revalidate files during execJohn Johansen-0/+81
2017-06-10apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen-11/+16
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen-32/+29
2017-06-10apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen-37/+2
2017-06-10apparmor: refactor updating profiles to the newest parentJohn Johansen-4/+31
2017-06-10apparmor: share profile name on replacementJohn Johansen-9/+72
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen-56/+162
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen-32/+30
2017-06-10apparmor: fix display of ns nameJohn Johansen-1/+1
2017-06-10apparmor: fix apparmor_query dataJohn Johansen-2/+6
2017-06-10apparmor: fix policy load/remove semanticsJohn Johansen-15/+13
2017-06-10apparmor: add namespace lookup fns()John Johansen-4/+73
2017-06-10apparmor: cleanup __find_child()John Johansen-8/+8
2017-06-10apparmor: provide information about path buffer size at bootJohn Johansen-2/+9
2017-06-10apparmor: add profile permission query abilityJohn Johansen-1/+102
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen-48/+29
2017-06-10apparmor: add gerneric permissions struct and support fnsJohn Johansen-17/+153
2017-06-10apparmor: add fn to test if profile supports a given mediation classJohn Johansen-0/+10
2017-06-10apparmor: speed up transactional queriesJohn Johansen-11/+114
2017-06-10apparmor: add label data availability to the feature setJohn Johansen-0/+10
2017-06-10apparmor: add mkdir/rmdir interface to manage policy namespacesJohn Johansen-1/+94
2017-06-10apparmor: add policy revision file interfaceJohn Johansen-1/+116
2017-06-10apparmor: provide finer control over policy managementJohn Johansen-23/+35
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew-4/+38
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee-6/+27
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen-53/+133
2017-06-09KEYS: fix refcount_inc() on zeroMark Rutland-7/+4
2017-06-09KEYS: Convert KEYCTL_DH_COMPUTE to use the crypto KPP APIMat Martineau-103/+171