aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2026-06-13apparmor: put secmark label after secid lookupZygmunt Krynicki1-0/+1
2026-06-13apparmor: aa_getprocattr free procattr leak on format failureZygmunt Krynicki1-0/+2
2026-06-13apparmor: remove unnecessary goto and associated labelJohn Johansen1-4/+1
2026-06-13apparmor: release exe file resources on path failureZygmunt Krynicki1-2/+5
2026-06-13apparmor: fail policy unpack on accept2 allocation failureZygmunt Krynicki1-2/+2
2026-06-13apparmor: Fix return in ns_mkdir_opHongling Zeng1-1/+1
2026-06-13apparmor: remove or add symlinks to rawdata according to export_binaryGeorgia Garcia3-25/+104
2026-06-13apparmor: fix NULL pointer dereference in unpack_pdbGeorgia Garcia1-1/+1
2026-06-13apparmor: make fn_label_build() capable of handling not supportedJohn Johansen1-5/+8
2026-06-13apparmor: change fn_label_build() call to not return NULLJohn Johansen3-35/+35
2026-06-13apparmor: fix potential UAF in aa_replace_profilesMaxime Bélair1-1/+3
2026-06-13apparmor: free rawdata as soon as possibleJohn Johansen1-0/+7
2026-06-13apparmor: grab ns lock and refresh when looking up changehat child profilesRyan Lee1-2/+31
2026-06-13apparmor: fix rawdata_f_data implicit flex arrayJohn Johansen1-4/+3
2026-06-13apparmor: use __label_make_stale in __aa_proxy_redirectRyan Lee1-1/+1
2026-06-13apparmor: propagate -ENOMEM correctly in unpack_tableMaxime Bélair1-9/+13
2026-06-13apparmor: enable differential encodingJohn Johansen1-0/+1
2026-06-13apparmor: aa_label_alloc use aa_label_free on alloc failureZygmunt Krynicki1-1/+1
2026-06-13apparmor: check label build before no_new_privs testRuoyu Wang1-10/+15
2026-06-13security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()Andrew Morton1-0/+2
2026-06-13apparmor: add a conditional version of get_newest_labelJohn Johansen2-11/+43
2026-06-13apparmor: fix refcount leak when updating the sk_ctxJohn Johansen1-2/+4
2026-06-13apparmor: fix race in unix socket mediation when peer_path is usedJohn Johansen1-26/+32
2026-06-13apparmor: fix shadowing of plabel that prevents cache from being updatedJohn Johansen1-2/+1
2026-04-24Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmorLinus Torvalds4-26/+22
2026-04-22apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engineGONG Ruiqi1-0/+1
2026-04-22apparmor: Fix string overrun due to missing terminationDaniel J Blueman1-3/+5
2026-04-22apparmor: Fix wrong dentry in RENAME_EXCHANGE uid checkDudu Lu1-1/+1
2026-04-22apparmor: fix unpack_tags to properly return error in failure casesJohn Johansen1-0/+1
2026-04-22apparmor: fix dfa size checkJohn Johansen1-1/+1
2026-04-22apparmor: Use sysfs_emit in param_get_{audit,mode}Thorsten Blum1-3/+3
2026-04-22apparmor: Remove redundant if check in sk_peer_get_labelThorsten Blum1-5/+1
2026-04-22apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattrThorsten Blum1-4/+1
2026-04-13Merge tag 'vfs-7.1-rc1.kino' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfsLinus Torvalds1-2/+2
2026-04-13Merge tag 'vfs-7.1-rc1.directory' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfsLinus Torvalds1-26/+8
2026-03-09apparmor: fix race between freeing data and fs accessing itJohn Johansen7-101/+153
2026-03-09apparmor: fix race on rawdata dereferenceJohn Johansen4-57/+93
2026-03-09apparmor: fix differential encoding verificationJohn Johansen2-4/+20
2026-03-09apparmor: fix unprivileged local user can do privileged policy managementJohn Johansen3-9/+43
2026-03-09apparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen1-0/+1
2026-03-09apparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer1-2/+3
2026-03-09apparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer1-10/+20
2026-03-09apparmor: fix: limit the number of levels of policy namespacesJohn Johansen2-0/+4
2026-03-09apparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer1-3/+27
2026-03-09apparmor: fix memory leak in verify_headerMassimiliano Pellizzer1-1/+0
2026-03-09apparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer1-1/+11
2026-03-06treewide: change inode->i_ino from unsigned long to u64Jeff Layton1-2/+2
2026-03-06Apparmor: Use simple_start_creating() / simple_done_creating()NeilBrown1-27/+8
2026-02-23apparmor: return error on namespace mismatch in verify_headerMassimiliano Pellizzer1-0/+1
2026-02-23apparmor: use target task's context in apparmor_getprocattr()Cengiz Can1-9/+7
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.