summaryrefslogtreecommitdiffstats
path: root/security/apparmor/domain.c
Commit message (Expand)AuthorAgeFilesLines
* apparmor: Fix one kernel-doc commentYang Li2023-10-231-1/+1
* apparmor: allow restricting unprivileged change_profileJohn Johansen2023-10-181-0/+24
* apparmor: refcount the pdbJohn Johansen2023-10-181-30/+30
* apparmor: pass cred through to audit info.John Johansen2023-10-181-33/+64
* apparmor: Fix kernel-doc warnings in apparmor/domain.cGaosheng Cui2023-07-101-4/+6
* apparmor: make aa_set_current_onexec return voidQuanfa Fu2023-07-091-1/+1
* fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner2023-01-191-1/+1
* fs: port ->permission() to pass mnt_idmapChristian Brauner2023-01-191-1/+1
* Merge tag 'apparmor-pr-2022-12-14' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-12-141-71/+78
|\
| * apparmor: refactor code that alloc null profilesJohn Johansen2022-10-241-6/+6
| * apparmor: rework profile->rules to be a listJohn Johansen2022-10-031-8/+16
| * apparmor: refactor profile rules and attachmentsJohn Johansen2022-10-031-35/+46
| * apparmor: extend permissions to support a label and tag stringJohn Johansen2022-10-031-18/+0
| * apparmor: preparse for state being more than just an integerJohn Johansen2022-10-031-12/+13
| * apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2022-10-031-4/+6
| * apparmor: convert xmatch to using the new shared policydb structJohn Johansen2022-10-031-10/+12
| * apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen2022-10-031-3/+4
| * apparmor: convert xmatch to use aa_perms structureJohn Johansen2022-10-031-2/+2
| * apparmor: compute xmatch permissions on profile loadMike Salvatore2022-10-031-2/+2
| * apparmor: compute file permissions on profile loadMike Salvatore2022-10-031-5/+5
* | Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-12-131-2/+1
|\ \
| * | lsm,fs: fix vfs_getxattr_alloc() return type and caller error pathsPaul Moore2022-11-181-2/+1
| |/
* / apparmor: use type safe idmapping helpersChristian Brauner2022-10-261-4/+4
|/
* apparmor: fix overlapping attachment computationJohn Johansen2022-07-191-1/+1
* apparmor: Fix some kernel-doc commentsYang Li2022-07-091-2/+1
* tracehook: Remove tracehook.hEric W. Biederman2022-03-101-1/+0
* apparmor: handle idmapped mountsChristian Brauner2021-01-241-3/+6
* xattr: handle idmapped mountsTycho Andersen2021-01-241-2/+2
* treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2020-08-231-1/+1
* mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long2020-08-071-2/+2
* Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2020-06-071-25/+14
|\
| * apparmor: remove duplicate check of xattrs on profile attachment.John Johansen2020-01-211-17/+0
| * apparmor: add outofband transition and use it in xattr matchJohn Johansen2020-01-211-4/+9
| * apparmor: fix nnp subset test for unconfinedJohn Johansen2020-01-211-4/+5
* | Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds2020-06-041-5/+2
|\ \
| * | exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman2020-05-201-5/+2
| |/
* / apparmor: fix potential label refcnt leak in aa_change_profileXiyu Yang2020-05-211-2/+1
|/
* apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen2020-01-041-39/+43
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-031-26/+20
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-221-1/+1
| * apparmor: Switch to GFP_KERNEL where possibleSebastian Andrzej Siewior2019-06-201-10/+10
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-201-16/+10
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
|/
* Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2019-03-071-2/+2
|\
| * security: mark expected switch fall-throughs and add a missing breakGustavo A. R. Silva2019-02-221-1/+1
| * AppArmor: Abstract use of cred security blobCasey Schaufler2019-01-081-1/+1
* | apparmor: Fix aa_label_build() error handling for failed mergesJohn Johansen2019-02-011-1/+4
|/
* apparmor: Fix failure to audit context info in build_change_hatJohn Johansen2018-07-201-1/+1
* apparmor: fix typo "loosen"Zygmunt Krynicki2018-05-031-1/+1
* apparmor: fix error returns checks by making size a ssize_tColin Ian King2018-03-231-1/+1