summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include
AgeCommit message (Expand)AuthorFilesLines
2020-06-07Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2-0/+13
2020-06-07apparmor: Fix memory leak of profile proxyJohn Johansen1-0/+1
2020-05-20exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman1-1/+1
2020-01-21apparmor: add outofband transition and use it in xattr matchJohn Johansen1-1/+8
2020-01-21apparmor: fix nnp subset test for unconfinedJohn Johansen1-0/+1
2020-01-18apparmor: add a valid state flags checkJohn Johansen1-0/+4
2019-12-03Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds5-51/+13
2019-11-22apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2-2/+3
2019-06-20apparmor: increase left match history buffer sizeJohn Johansen1-2/+1
2019-06-20apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior1-47/+2
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen1-1/+10
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner23-115/+23
2019-04-11apparmor: Initial implementation of raw policy blob compressionChris Coulson2-1/+8
2019-03-07Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-2/+1
2019-01-31audit: remove unused actx param from audit_rule_matchRichard Guy Briggs1-2/+1
2019-01-22apparmor: Adjust offset when accessing task blob.Tetsuo Handa1-1/+1
2019-01-10LSM: generalize flag passing to security_capableMicah Morton1-1/+1
2019-01-08LSM: Infrastructure management of the task securityCasey Schaufler1-14/+4
2019-01-08LSM: Infrastructure management of the file securityCasey Schaufler1-1/+4
2019-01-08Infrastructure management of the cred security blobCasey Schaufler2-2/+6
2019-01-08AppArmor: Abstract use of cred security blobCasey Schaufler1-1/+15
2018-10-03apparmor: Parse secmark policyMatthew Garrett2-0/+13
2018-10-03apparmor: Add a wildcard secidMatthew Garrett1-0/+3
2018-09-13apparmor: don't try to replace stale label in ptrace access checkJann Horn1-0/+2
2018-07-19apparmor: Check buffer bounds when mapping permissions maskTyler Hicks1-1/+2
2018-06-07apparmor: fixup secid map conversion to using IDRJohn Johansen1-1/+3
2018-06-07apparmor: Add support for audit rule filteringMatthew Garrett1-0/+6
2018-06-07apparmor: improve get_buffers macro by using get_cpu_ptrJohn Johansen1-17/+16
2018-05-02apparmor: add support for mapping secids and using secctxesJohn Johansen2-4/+13
2018-04-13Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds11-77/+299
2018-03-28macro: introduce COUNT_ARGS() macroAlexei Starovoitov1-6/+1
2018-03-13apparmor: remove POLICY_MEDIATES_SAFEJohn Johansen1-11/+1
2018-03-13apparmor: add base infastructure for socket mediationJohn Johansen5-3/+128
2018-02-09apparmor: improve overlapping domain attachment resolutionJohn Johansen1-0/+19
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen1-2/+0
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett1-0/+6
2018-02-09apparmor: dfa add support for state differential encodingJohn Johansen1-0/+4
2018-02-09apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen1-0/+4
2018-02-09apparmor: move context.h to cred.hJohn Johansen1-0/+0
2018-02-09apparmor: move task related defines and fns to task.X filesJohn Johansen2-39/+91
2018-02-09apparmor: cleanup, drop unused fn __aa_task_is_confined()John Johansen1-11/+0
2018-02-09apparmor: drop cred_ctx and reference the label directlyJohn Johansen1-19/+5
2018-02-09apparmor: move task domain change info to task securityJohn Johansen1-10/+21
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen1-10/+9
2018-02-09apparmor: audit unknown signal numbersJohn Johansen2-1/+5
2018-02-09apparmor: provide a bounded version of label_parseJohn Johansen1-0/+3
2018-02-09apparmor: use the dfa to do label parse string splittingJohn Johansen2-0/+26
2018-02-09apparmor: add first substr match to dfaJohn Johansen1-0/+4
2018-02-09apparmor: split load data into management struct and data blobJohn Johansen1-1/+1
2018-02-09apparmor: fix logging of the existence test for signalsJohn Johansen1-1/+3