aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor/lsm.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-06-10apparmor: refactor path name lookup and permission checks around labelsJohn Johansen1-9/+4
2017-06-10apparmor: move aa_file_perm() to use labelsJohn Johansen1-21/+3
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen1-2/+21
2017-06-10apparmor: move resource checks to using labelsJohn Johansen1-4/+2
2017-06-10apparmor: move capability checks to using labelsJohn Johansen1-6/+14
2017-06-10apparmor: switch getprocattr to using label_print fns()John Johansen1-1/+1
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen1-62/+72
2017-06-10apparmor: revalidate files during execJohn Johansen1-0/+6
2017-06-10apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen1-6/+4
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen1-8/+5
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen1-12/+29
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen1-0/+30
2017-06-10apparmor: provide information about path buffer size at bootJohn Johansen1-2/+9
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen1-5/+5
2017-04-07apparmor: Make path_max parameter readonlyJohn Johansen1-1/+1
2017-04-07apparmor: fix parameters so that the permission test is bypassed at bootJohn Johansen1-25/+22
2017-04-07security/apparmor/lsm.c: set debug messagesValentin Rothberg1-1/+1
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris1-5/+2
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-1/+2
2017-01-16apparmor: fix undefined reference to `aa_g_hash_policy'John Johansen1-1/+1
2017-01-16apparmor: replace remaining BUG_ON() asserts with AA_BUG()John Johansen1-1/+1
2017-01-16apparmor: add check for apparmor enabled in module parameters missing itJohn Johansen1-0/+10
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen1-1/+50
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks1-0/+47
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+1
2017-01-16apparmor: make computing policy hashes conditional on kernel parameterJohn Johansen1-23/+23
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen1-6/+6
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-8/+4
2017-01-16apparmor: change op from int to const char *John Johansen1-7/+8
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-35/+37
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen1-6/+6
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen1-4/+4
2017-01-16apparmor: add a default null dfaJohn Johansen1-0/+7
2017-01-16apparmor: remove paranoid load switchJohn Johansen1-2/+3
2017-01-16apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen1-7/+7
2017-01-16apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen1-1/+1
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen1-0/+1
2017-01-15apparmor: use designated initializersKees Cook1-3/+5
2017-01-09proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley1-5/+2
2016-07-27apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann1-1/+3
2016-07-12apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen1-1/+1
2016-07-12apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum1-17/+19
2016-07-12apparmor: fix module parameters can be changed after policy is lockedJohn Johansen1-12/+10
2016-07-12apparmor: add parameter to control whether policy hashing is usedJohn Johansen1-0/+4
2016-03-28constify security_path_{link,rename}Al Viro1-3/+3
2016-03-28apparmor: remove useless checks for NULL ->mntAl Viro1-2/+2
2016-03-28constify security_path_{mkdir,mknod,symlink}Al Viro1-3/+3
2016-03-28constify security_path_{unlink,rmdir}Al Viro1-2/+2
2016-03-28apparmor: constify common_perm_...()Al Viro1-4/+4