summaryrefslogtreecommitdiffstats
path: root/security/apparmor/domain.c
AgeCommit message (Expand)AuthorFilesLines
2018-03-23apparmor: fix error returns checks by making size a ssize_tColin Ian King1-1/+1
2018-02-09apparmor: improve overlapping domain attachment resolutionJohn Johansen1-13/+17
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen1-16/+36
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett1-25/+127
2018-02-09apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen1-65/+98
2018-02-09apparmor: move context.h to cred.hJohn Johansen1-1/+1
2018-02-09apparmor: move task related defines and fns to task.X filesJohn Johansen1-2/+2
2018-02-09apparmor: rename tctx to ctxJohn Johansen1-8/+8
2018-02-09apparmor: drop cred_ctx and reference the label directlyJohn Johansen1-9/+5
2018-02-09apparmor: move task domain change info to task securityJohn Johansen1-6/+8
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen1-3/+3
2018-01-12apparmor: Fix regression in profile conflict logicMatthew Garrett1-4/+5
2017-11-21apparmor: fix locking when creating a new complain profile.John Johansen1-3/+15
2017-11-21apparmor: fix profile attachment for special unconfined profilesJohn Johansen1-1/+3
2017-11-21apparmor: ensure that undecidable profile attachments failJohn Johansen1-14/+32
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-2/+2
2017-09-22apparmor: add mount mediationJohn Johansen1-2/+2
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook1-18/+1
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-06-10apparmor: move change_profile mediation to using labelsJohn Johansen1-68/+123
2017-06-10apparmor: move change_hat mediation to using labelsJohn Johansen1-102/+201
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen1-258/+592
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen1-2/+4
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen1-7/+10
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen1-35/+42
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen1-13/+13
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen1-2/+3
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen1-30/+0
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen1-9/+9
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen1-3/+5
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen1-1/+1
2017-02-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-1/+1
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman1-1/+1
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen1-42/+19
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-7/+6
2017-01-16apparmor: change op from int to const char *John Johansen1-2/+2
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-21/+21
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen1-3/+5
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen1-12/+12
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-0/+1
2016-11-21apparmor: fix change_hat not finding hat after policy replacementJohn Johansen1-2/+4
2016-07-12apparmor: ensure the target profile name is always auditedJohn Johansen1-11/+9
2016-07-12apparmor: exec should not be returning ENOENT when it deniesJohn Johansen1-1/+1
2015-05-12LSM: Switch to lists of hooksCasey Schaufler1-8/+4
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook1-2/+2
2013-10-29apparmor: remove the "task" arg from may_change_ptraced_domain()Oleg Nesterov1-8/+6
2013-10-29apparmor: fix capability to not use the current task, during reportingJohn Johansen1-1/+1
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen1-2/+2
2013-08-14apparmor: update how unconfined is handledJohn Johansen1-1/+1
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen1-2/+2