summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include
Commit message (Expand)AuthorAgeFilesLines
* apparmor: Parse secmark policyMatthew Garrett2018-10-032-0/+13
* apparmor: Add a wildcard secidMatthew Garrett2018-10-031-0/+3
* apparmor: don't try to replace stale label in ptrace access checkJann Horn2018-09-131-0/+2
* apparmor: Check buffer bounds when mapping permissions maskTyler Hicks2018-07-191-1/+2
* apparmor: fixup secid map conversion to using IDRJohn Johansen2018-06-071-1/+3
* apparmor: Add support for audit rule filteringMatthew Garrett2018-06-071-0/+6
* apparmor: improve get_buffers macro by using get_cpu_ptrJohn Johansen2018-06-071-17/+16
* apparmor: add support for mapping secids and using secctxesJohn Johansen2018-05-022-4/+13
* Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2018-04-1311-77/+299
|\
| * apparmor: remove POLICY_MEDIATES_SAFEJohn Johansen2018-03-131-11/+1
| * apparmor: add base infastructure for socket mediationJohn Johansen2018-03-135-3/+128
| * apparmor: improve overlapping domain attachment resolutionJohn Johansen2018-02-091-0/+19
| * apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen2018-02-091-2/+0
| * apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett2018-02-091-0/+6
| * apparmor: dfa add support for state differential encodingJohn Johansen2018-02-091-0/+4
| * apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen2018-02-091-0/+4
| * apparmor: move context.h to cred.hJohn Johansen2018-02-091-0/+0
| * apparmor: move task related defines and fns to task.X filesJohn Johansen2018-02-092-39/+91
| * apparmor: cleanup, drop unused fn __aa_task_is_confined()John Johansen2018-02-091-11/+0
| * apparmor: drop cred_ctx and reference the label directlyJohn Johansen2018-02-091-19/+5
| * apparmor: move task domain change info to task securityJohn Johansen2018-02-091-10/+21
| * apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen2018-02-091-10/+9
| * apparmor: audit unknown signal numbersJohn Johansen2018-02-092-1/+5
| * apparmor: provide a bounded version of label_parseJohn Johansen2018-02-091-0/+3
| * apparmor: use the dfa to do label parse string splittingJohn Johansen2018-02-092-0/+26
| * apparmor: add first substr match to dfaJohn Johansen2018-02-091-0/+4
| * apparmor: split load data into management struct and data blobJohn Johansen2018-02-091-1/+1
| * apparmor: fix logging of the existence test for signalsJohn Johansen2018-02-091-1/+3
| * apparmor: fix resource audit messages when auditing peerJohn Johansen2018-02-091-4/+4
* | macro: introduce COUNT_ARGS() macroAlexei Starovoitov2018-03-281-6/+1
|/
* apparmor: fix ptrace label match when matching stacked labelsJohn Johansen2018-01-121-0/+3
* Merge tag 'apparmor-pr-2017-11-30' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2017-11-301-5/+7
|\
| * apparmor: fix oops in audit_signal_cb hookJohn Johansen2017-11-271-5/+7
* | Rename superblock flags (MS_xyz -> SB_xyz)Linus Torvalds2017-11-271-1/+1
* | Merge branch 'linus' into locking/core, to resolve conflictsIngo Molnar2017-11-074-147/+11
|\ \ | |/
| * Revert "apparmor: add base infastructure for socket mediation"Linus Torvalds2017-10-264-147/+11
* | locking/rwsem, security/apparmor: Replace homebrew use of write_can_lock() wi...Will Deacon2017-10-101-11/+0
|/
* Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2017-09-2310-11/+326
|\
| * apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen2017-09-221-1/+4
| * apparmor: add base infastructure for socket mediationJohn Johansen2017-09-224-11/+147
| * apparmor: make policy_unpack able to audit different info messagesJohn Johansen2017-09-221-2/+2
| * apparmor: add support for absolute root view based labelsJohn Johansen2017-09-221-0/+1
| * apparmor: add mount mediationJohn Johansen2017-09-224-0/+71
| * apparmor: add the ability to mediate signalsJohn Johansen2017-09-224-0/+104
* | apparmor: Refactor to remove bprm_secureexec hookKees Cook2017-08-012-4/+0
|/
* apparmor: add domain label stacking info to apparmorfsJohn Johansen2017-06-102-0/+3
* apparmor: move exec domain mediation to using labelsJohn Johansen2017-06-101-1/+86
* apparmor: mediate files when they are receivedJohn Johansen2017-06-101-0/+1
* apparmor: move path_link mediation to using labelsJohn Johansen2017-06-101-1/+1
* apparmor: refactor path name lookup and permission checks around labelsJohn Johansen2017-06-101-1/+4
OpenPOWER on IntegriCloud