summaryrefslogtreecommitdiffstats
path: root/security/apparmor/domain.c
Commit message (Expand)AuthorAgeFilesLines
* apparmor: handle idmapped mountsChristian Brauner2021-01-241-3/+6
* xattr: handle idmapped mountsTycho Andersen2021-01-241-2/+2
* treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2020-08-231-1/+1
* mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long2020-08-071-2/+2
* Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2020-06-071-25/+14
|\
| * apparmor: remove duplicate check of xattrs on profile attachment.John Johansen2020-01-211-17/+0
| * apparmor: add outofband transition and use it in xattr matchJohn Johansen2020-01-211-4/+9
| * apparmor: fix nnp subset test for unconfinedJohn Johansen2020-01-211-4/+5
* | Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds2020-06-041-5/+2
|\ \
| * | exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman2020-05-201-5/+2
| |/
* / apparmor: fix potential label refcnt leak in aa_change_profileXiyu Yang2020-05-211-2/+1
|/
* apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen2020-01-041-39/+43
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-031-26/+20
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-221-1/+1
| * apparmor: Switch to GFP_KERNEL where possibleSebastian Andrzej Siewior2019-06-201-10/+10
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-201-16/+10
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
|/
* Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2019-03-071-2/+2
|\
| * security: mark expected switch fall-throughs and add a missing breakGustavo A. R. Silva2019-02-221-1/+1
| * AppArmor: Abstract use of cred security blobCasey Schaufler2019-01-081-1/+1
* | apparmor: Fix aa_label_build() error handling for failed mergesJohn Johansen2019-02-011-1/+4
|/
* apparmor: Fix failure to audit context info in build_change_hatJohn Johansen2018-07-201-1/+1
* apparmor: fix typo "loosen"Zygmunt Krynicki2018-05-031-1/+1
* apparmor: fix error returns checks by making size a ssize_tColin Ian King2018-03-231-1/+1
* apparmor: improve overlapping domain attachment resolutionJohn Johansen2018-02-091-13/+17
* apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen2018-02-091-16/+36
* apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett2018-02-091-25/+127
* apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen2018-02-091-65/+98
* apparmor: move context.h to cred.hJohn Johansen2018-02-091-1/+1
* apparmor: move task related defines and fns to task.X filesJohn Johansen2018-02-091-2/+2
* apparmor: rename tctx to ctxJohn Johansen2018-02-091-8/+8
* apparmor: drop cred_ctx and reference the label directlyJohn Johansen2018-02-091-9/+5
* apparmor: move task domain change info to task securityJohn Johansen2018-02-091-6/+8
* apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen2018-02-091-3/+3
* apparmor: Fix regression in profile conflict logicMatthew Garrett2018-01-121-4/+5
* apparmor: fix locking when creating a new complain profile.John Johansen2017-11-211-3/+15
* apparmor: fix profile attachment for special unconfined profilesJohn Johansen2017-11-211-1/+3
* apparmor: ensure that undecidable profile attachments failJohn Johansen2017-11-211-14/+32
* Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2017-09-231-2/+2
|\
| * apparmor: add mount mediationJohn Johansen2017-09-221-2/+2
* | apparmor: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-18/+1
* | exec: Rename bprm->cred_prepared to called_set_credsKees Cook2017-08-011-1/+1
|/
* apparmor: move change_profile mediation to using labelsJohn Johansen2017-06-101-68/+123
* apparmor: move change_hat mediation to using labelsJohn Johansen2017-06-101-102/+201
* apparmor: move exec domain mediation to using labelsJohn Johansen2017-06-101-258/+592
* apparmor: update aa_audit_file() to use labelsJohn Johansen2017-06-101-2/+4
* apparmor: move ptrace checks to using labelsJohn Johansen2017-06-101-7/+10
* apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-101-35/+42
* apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen2017-06-101-13/+13
* apparmor: convert to profile block critical sectionsJohn Johansen2017-06-101-2/+3