aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor/policy.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2022-07-09apparmor: make export of raw binary profile to userspace optionalJohn Johansen1-14/+19
2022-07-09apparmor: Fix kernel-docYang Li1-1/+1
2021-11-11Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmorLinus Torvalds1-11/+51
2021-11-03apparmor: Use struct_size() helper in kzalloc()Gustavo A. R. Silva1-2/+1
2021-11-01apparmor: Fix internal policy capable check for policy managementJohn Johansen1-1/+1
2021-02-07apparmor: switch to apparmor to internal capable check for policy managementJohn Johansen1-1/+17
2021-02-07apparmor: update policy capable checks to use a labelJohn Johansen1-8/+33
2020-08-07mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long1-12/+12
2020-06-07apparmor: Fix memory leak of profile proxyJohn Johansen1-0/+1
2020-01-04apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen1-2/+2
2019-12-03Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmorLinus Torvalds1-2/+3
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner1-6/+1
2019-04-17apparmor: fix spelling mistake "immutible" -> "immutable"Colin Ian King1-1/+1
2019-04-11apparmor: fix blob compression when ns is forced on a policy loadJohn Johansen1-1/+2
2018-11-01apparmor: fix checkpatch error in Parse secmark policyJohn Johansen1-1/+1
2018-10-03apparmor: Parse secmark policyMatthew Garrett1-0/+3
2018-06-07apparmor: fix memory leak when deduping profile loadJohn Johansen1-0/+3
2018-05-03apparmor: fix typo "preconfinement"Zygmunt Krynicki1-1/+1
2018-05-02apparmor: add support for mapping secids and using secctxesJohn Johansen1-1/+1
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen1-5/+1
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett1-0/+8
2018-02-09apparmor: move context.h to cred.hJohn Johansen1-1/+1
2018-02-09apparmor: cleanup fixup description of aa_replace_profilesJohn Johansen1-2/+3
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen1-1/+1
2017-11-21apparmor: fix possible recursive lock warning in __aa_create_nsJohn Johansen1-4/+4
2017-11-21apparmor: fix leak of null profile name if profile allocation failsJohn Johansen1-1/+2
2017-09-22apparmor: fix race condition in null profile creationJohn Johansen1-3/+11
2017-09-22apparmor: move new_null_profile to after profile lookup fns()John Johansen1-79/+79
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen1-118/+90
2017-06-10apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen1-37/+2
2017-06-10apparmor: refactor updating profiles to the newest parentJohn Johansen1-4/+31
2017-06-10apparmor: share profile name on replacementJohn Johansen1-0/+9
2017-06-10apparmor: fix policy load/remove semanticsJohn Johansen1-11/+11
2017-06-10apparmor: add namespace lookup fns()John Johansen1-4/+6
2017-06-10apparmor: cleanup __find_child()John Johansen1-8/+8
2017-06-10apparmor: provide finer control over policy managementJohn Johansen1-13/+22
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen1-3/+3
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen1-1/+45
2017-04-07apparmor: fix invalid reference to index variable of iterator line 836John Johansen1-2/+4
2017-03-02sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h> in <linux/sched.h>Ingo Molnar1-0/+1
2017-03-02sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar1-0/+1
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks1-1/+0
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+23
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-23/+19
2017-01-16apparmor: change op from int to const char *John Johansen1-3/+4
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-1/+1
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen1-11/+14
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen1-14/+40
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen1-7/+7
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen1-10/+24