summaryrefslogtreecommitdiffstats
path: root/security/apparmor/lsm.c
AgeCommit message (Expand)AuthorFilesLines
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-0/+472
2017-09-22apparmor: add base infastructure for socket mediationJohn Johansen1-0/+387
2017-09-22apparmor: add mount mediationJohn Johansen1-0/+64
2017-09-22apparmor: add the ability to mediate signalsJohn Johansen1-0/+21
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook1-1/+0
2017-06-10apparmor: add stacked domain labels interfaceJohn Johansen1-0/+5
2017-06-10apparmor: mediate files when they are receivedJohn Johansen1-0/+6
2017-06-10apparmor: move path_link mediation to using labelsJohn Johansen1-2/+1
2017-06-10apparmor: refactor path name lookup and permission checks around labelsJohn Johansen1-9/+4
2017-06-10apparmor: move aa_file_perm() to use labelsJohn Johansen1-21/+3
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen1-2/+21
2017-06-10apparmor: move resource checks to using labelsJohn Johansen1-4/+2
2017-06-10apparmor: move capability checks to using labelsJohn Johansen1-6/+14
2017-06-10apparmor: switch getprocattr to using label_print fns()John Johansen1-1/+1
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen1-62/+72
2017-06-10apparmor: revalidate files during execJohn Johansen1-0/+6
2017-06-10apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen1-6/+4
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen1-8/+5
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen1-12/+29
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen1-0/+30
2017-06-10apparmor: provide information about path buffer size at bootJohn Johansen1-2/+9
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen1-5/+5
2017-04-07apparmor: Make path_max parameter readonlyJohn Johansen1-1/+1
2017-04-07apparmor: fix parameters so that the permission test is bypassed at bootJohn Johansen1-25/+22
2017-04-07security/apparmor/lsm.c: set debug messagesValentin Rothberg1-1/+1
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-5/+2
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-1/+2
2017-01-16apparmor: fix undefined reference to `aa_g_hash_policy'John Johansen1-1/+1
2017-01-16apparmor: replace remaining BUG_ON() asserts with AA_BUG()John Johansen1-1/+1
2017-01-16apparmor: add check for apparmor enabled in module parameters missing itJohn Johansen1-0/+10
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen1-1/+50
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks1-0/+47
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+1
2017-01-16apparmor: make computing policy hashes conditional on kernel parameterJohn Johansen1-23/+23
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen1-6/+6
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-8/+4
2017-01-16apparmor: change op from int to const char *John Johansen1-7/+8
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-35/+37
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen1-6/+6
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen1-4/+4
2017-01-16apparmor: add a default null dfaJohn Johansen1-0/+7
2017-01-16apparmor: remove paranoid load switchJohn Johansen1-2/+3
2017-01-16apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen1-7/+7
2017-01-16apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen1-1/+1
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-0/+1
2017-01-15apparmor: use designated initializersKees Cook1-3/+5
2017-01-09proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley1-5/+2
2016-07-27apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann1-1/+3
2016-07-12apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen1-1/+1