aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor (follow)
AgeCommit message (Expand)AuthorFilesLines
2025-01-18apparmor: fix dbus permission queries to v9 ABIJohn Johansen1-0/+8
2025-01-18apparmor: gate make fine grained unix mediation behind v9 abiJohn Johansen4-10/+26
2025-01-18apparmor: add fine grained af_unix mediationJohn Johansen12-58/+1063
2025-01-18apparmor: in preparation for finer networking rules rework match_protJohn Johansen2-14/+75
2025-01-18apparmor: lift kernel socket check out of critical sectionJohn Johansen1-1/+5
2025-01-18apparmor: remove af_select macroJohn Johansen2-36/+9
2025-01-18apparmor: add ability to mediate caps with policy state machineJohn Johansen3-6/+62
2025-01-18apparmor: fix x_table_lookup when stacking is not the first entryJohn Johansen1-23/+29
2025-01-18apparmor: add support for profiles to define the kill signalJohn Johansen8-6/+34
2025-01-18apparmor: add additional flags to extended permission.John Johansen7-21/+54
2025-01-18apparmor: carry mediation check on labelJohn Johansen6-24/+68
2025-01-18apparmor: cleanup: refactor file_perm() to doc semantics of some checksJohn Johansen1-2/+15
2025-01-18apparmor: remove explicit restriction that unconfined cannot use change_hatJohn Johansen2-3/+18
2025-01-18apparmor: ensure labels with more than one entry have correct flagsJohn Johansen1-1/+2
2025-01-18apparmor: switch signal mediation to use RULE_MEDIATESJohn Johansen1-5/+5
2025-01-18apparmor: remove redundant unconfined check.John Johansen1-2/+1
2025-01-18apparmor: cleanup: attachment perm lookup to use lookup_perms()John Johansen1-8/+6
2025-01-18apparmor: Improve debug print infrastructureJohn Johansen9-34/+177
2025-01-18apparmor: Use str_yes_no() helper functionThorsten Blum1-4/+4
2024-12-22vfs: support caching symlink lengths in inodesMateusz Guzik1-1/+1
2024-12-04lsm: secctx provider check on releaseCasey Schaufler1-8/+5
2024-12-04lsm: replace context+len with lsm_contextCasey Schaufler2-16/+15
2024-12-04lsm: ensure the correct LSM context releaserCasey Schaufler2-3/+10
2024-12-02module: Convert symbol namespace to string literalPeter Zijlstra1-1/+1
2024-11-26apparmor: lift new_profile declaration to remove C23 extension warningJohn Johansen1-2/+1
2024-11-26apparmor: replace misleading 'scrubbing environment' phrase in debug printRyan Lee1-8/+8
2024-11-26parser: drop dead code for XXX_comb macrosJohn Johansen1-24/+0
2024-11-26apparmor: Remove unused parameter L1 in macro next_combJinjie Ruan1-2/+2
2024-11-26apparmor: audit_cap dedup based on subj_cred instead of profileRyan Lee1-6/+4
2024-11-26apparmor: add a cache entry expiration time aging out capability audit cacheRyan Lee1-3/+8
2024-11-26apparmor: document capability.c:profile_capable ad ptr not being NULLRyan Lee1-1/+1
2024-11-26apparmor: fix 'Do simple duplicate message elimination'chao liu1-0/+2
2024-11-26apparmor: document first entry is in packed perms struct is reservedJohn Johansen1-1/+4
2024-11-26apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan1-0/+6
2024-11-26apparmor: Remove deadcodeDr. David Alan Gilbert9-146/+0
2024-11-26apparmor: Remove unnecessary NULL check before kvfree()Thorsten Blum1-2/+1
2024-11-26apparmor: domain: clean up duplicated parts of handle_onexec()Leesoo Ahn1-26/+12
2024-11-26apparmor: Use IS_ERR_OR_NULL() helper functionHongbo Li1-1/+1
2024-11-26apparmor: add support for 2^24 states to the dfa state machine.John Johansen3-25/+83
2024-11-26apparmor: properly handle cx/px lookup failure for complainRyan Lee1-2/+7
2024-11-26apparmor: allocate xmatch for nullpdb inside aa_alloc_nullRyan Lee1-0/+1
2024-11-18Merge tag 'lsm-pr-20241112' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds5-11/+35
2024-10-11lsm: remove lsm_prop scaffoldingCasey Schaufler3-14/+2
2024-10-11lsm: use lsm_prop in security_current_getsecidCasey Schaufler1-6/+14
2024-10-11lsm: add lsmprop_to_secctx hookCasey Schaufler3-2/+26
2024-10-11lsm: use lsm_prop in security_audit_rule_matchCasey Schaufler2-3/+7
2024-10-07remove pointless includes of <linux/fdtable.h>Al Viro1-1/+0
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro1-1/+1
2024-09-16Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds3-19/+3
2024-08-25apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck1-3/+3