summaryrefslogtreecommitdiffstats
path: root/security/apparmor
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2017-09-2324-137/+2088
|\
| * apparmor: fix apparmorfs DAC access permissionsJohn Johansen2017-09-221-4/+4
| * apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen2017-09-221-1/+4
| * apparmor: fix incorrect type assignment when freeing proxiesJohn Johansen2017-09-221-1/+1
| * apparmor: ensure unconfined profiles have dfas initializedJohn Johansen2017-09-221-0/+2
| * apparmor: fix race condition in null profile creationJohn Johansen2017-09-221-3/+11
| * apparmor: move new_null_profile to after profile lookup fns()John Johansen2017-09-221-79/+79
| * apparmor: add base infastructure for socket mediationJohn Johansen2017-09-2212-16/+840
| * apparmor: add more debug asserts to apparmorfsJohn Johansen2017-09-221-0/+17
| * apparmor: make policy_unpack able to audit different info messagesJohn Johansen2017-09-222-16/+40
| * apparmor: add support for absolute root view based labelsJohn Johansen2017-09-222-1/+10
| * apparmor: cleanup conditional check for label in label_printJohn Johansen2017-09-221-14/+8
| * apparmor: add mount mediationJohn Johansen2017-09-229-4/+841
| * apparmor: add the ability to mediate signalsJohn Johansen2017-09-227-0/+231
| * apparmor: Redundant condition: prev_ns. in [label.c:1498]John Johansen2017-09-221-1/+1
| * apparmor: Fix an error code in aafs_create()Dan Carpenter2017-09-221-1/+3
| * apparmor: Fix logical error in verify_header()Christos Gkekas2017-09-221-1/+1
| * apparmor: Fix shadowed local variable in unpack_trans_table()Geert Uytterhoeven2017-09-221-2/+2
* | apparmor: Refactor to remove bprm_secureexec hookKees Cook2017-08-014-23/+1
* | exec: Rename bprm->cred_prepared to called_set_credsKees Cook2017-08-011-1/+1
|/
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2017-07-0534-1786/+7136
|\
| * apparmor: put back designators in struct initialisersStephen Rothwell2017-06-281-2/+2
| * apparmor: export that basic profile namespaces are supportedJohn Johansen2017-06-101-0/+7
| * apparmor: add stacked domain labels interfaceJohn Johansen2017-06-102-0/+8
| * apparmor: add domain label stacking info to apparmorfsJohn Johansen2017-06-103-0/+39
| * apparmor: move change_profile mediation to using labelsJohn Johansen2017-06-101-68/+123
| * apparmor: move change_hat mediation to using labelsJohn Johansen2017-06-101-102/+201
| * apparmor: move exec domain mediation to using labelsJohn Johansen2017-06-102-259/+678
| * apparmor: support v7 transition format compatible with label_parseJohn Johansen2017-06-102-7/+15
| * apparmor: mediate files when they are receivedJohn Johansen2017-06-102-0/+7
| * apparmor: rework file permission to cache file access in file->ctxJohn Johansen2017-06-101-6/+76
| * apparmor: move path_link mediation to using labelsJohn Johansen2017-06-103-47/+59
| * apparmor: refactor path name lookup and permission checks around labelsJohn Johansen2017-06-103-45/+85
| * apparmor: update aa_audit_file() to use labelsJohn Johansen2017-06-103-9/+18
| * apparmor: move aa_file_perm() to use labelsJohn Johansen2017-06-103-37/+64
| * apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen2017-06-103-0/+68
| * apparmor: move ptrace checks to using labelsJohn Johansen2017-06-105-80/+58
| * apparmor: add cross check permission helper macrosJohn Johansen2017-06-101-1/+41
| * apparmor: move resource checks to using labelsJohn Johansen2017-06-103-42/+80
| * apparmor: move capability checks to using labelsJohn Johansen2017-06-105-29/+58
| * apparmor: update query interface to support label queriesJohn Johansen2017-06-101-7/+39
| * apparmor: switch getprocattr to using label_print fns()John Johansen2017-06-103-37/+27
| * apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-1020-529/+686
| * apparmor: add the base fns() for domain labelsJohn Johansen2017-06-102-0/+2561
| * apparmor: revalidate files during execJohn Johansen2017-06-104-0/+81
| * apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen2017-06-102-11/+16
| * apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen2017-06-105-32/+29
| * apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen2017-06-101-37/+2
| * apparmor: refactor updating profiles to the newest parentJohn Johansen2017-06-101-4/+31
| * apparmor: share profile name on replacementJohn Johansen2017-06-103-9/+72
OpenPOWER on IntegriCloud