aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor/domain.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2018-01-12apparmor: Fix regression in profile conflict logicMatthew Garrett1-4/+5
2017-11-21apparmor: fix locking when creating a new complain profile.John Johansen1-3/+15
2017-11-21apparmor: fix profile attachment for special unconfined profilesJohn Johansen1-1/+3
2017-11-21apparmor: ensure that undecidable profile attachments failJohn Johansen1-14/+32
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmorLinus Torvalds1-2/+2
2017-09-22apparmor: add mount mediationJohn Johansen1-2/+2
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook1-18/+1
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-06-10apparmor: move change_profile mediation to using labelsJohn Johansen1-68/+123
2017-06-10apparmor: move change_hat mediation to using labelsJohn Johansen1-102/+201
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen1-258/+592
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen1-2/+4
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen1-7/+10
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen1-35/+42
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen1-13/+13
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen1-2/+3
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen1-30/+0
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen1-9/+9
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen1-3/+5
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen1-1/+1
2017-02-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespaceLinus Torvalds1-1/+1
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman1-1/+1
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen1-42/+19
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-7/+6
2017-01-16apparmor: change op from int to const char *John Johansen1-2/+2
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-21/+21
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen1-3/+5
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen1-12/+12
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-0/+1
2016-11-21apparmor: fix change_hat not finding hat after policy replacementJohn Johansen1-2/+4
2016-07-12apparmor: ensure the target profile name is always auditedJohn Johansen1-11/+9
2016-07-12apparmor: exec should not be returning ENOENT when it deniesJohn Johansen1-1/+1
2015-05-12LSM: Switch to lists of hooksCasey Schaufler1-8/+4
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook1-2/+2
2013-10-29apparmor: remove the "task" arg from may_change_ptraced_domain()Oleg Nesterov1-8/+6
2013-10-29apparmor: fix capability to not use the current task, during reportingJohn Johansen1-1/+1
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen1-2/+2
2013-08-14apparmor: update how unconfined is handledJohn Johansen1-1/+1
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen1-2/+2
2013-08-14apparmor: convert profile lists to RCU based lockingJohn Johansen1-4/+10
2013-04-28apparmor: localize getting the security context to a few macrosJohn Johansen1-3/+3
2013-04-28apparmor: use common fn to clear task_context for domain transitionsJohn Johansen1-5/+1
2013-04-28apparmor: add utility function to get an arbitrary tasks profile.John Johansen1-7/+3
2013-04-28apparmor: Remove -W1 warningsJohn Johansen1-2/+0
2013-04-28apparmor: fix auditing of domain transition failures due to incomplete policyJohn Johansen1-0/+2
2013-02-22new helper: file_inode(file)Al Viro1-2/+2
2012-09-21userns: Convert apparmor to use kuid and kgid where appropriateEric W. Biederman1-2/+2
2012-04-14Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVSJohn Johansen1-4/+35
2012-04-14Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsAndy Lutomirski1-0/+4
2012-03-28apparmor: Fix change_onexec when called from a confined taskJohn Johansen1-1/+2