summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include/apparmor.h
Commit message (Collapse)AuthorAgeFilesLines
* apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-121-0/+1
| | | | | | Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com>
* Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sbDavid Howells2015-02-221-2/+2
| | | | | | | | mediated_filesystem() should use dentry->d_sb not dentry->d_inode->i_sb and should avoid file_inode() also since it is really dealing with the path. Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
* nick kvfree() from apparmorAl Viro2014-05-061-1/+0
| | | | | | too many places open-code it Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
* apparmor: convert profile lists to RCU based lockingJohn Johansen2013-08-141-0/+6
| | | | Signed-off-by: John Johansen <john.johansen@canonical.com>
* apparmor: add kvzalloc to handle zeroing for kvmallocJohn Johansen2013-04-281-1/+11
| | | | | Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
* AppArmor: Add ability to load extended policyJohn Johansen2012-03-141-0/+13
| | | | | | | | Add the base support for the new policy extensions. This does not bring any additional functionality, or change current semantics. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com>
* AppArmor: Update dfa matching routines.John Johansen2012-03-141-1/+1
| | | | | | | | | | | Update aa_dfa_match so that it doesn't result in an input string being walked twice (once to get its length and another time to match) Add a single step functions aa_dfa_next Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com>
* module_param: make bool parameters really bool (drivers & misc)Rusty Russell2012-01-131-5/+5
| | | | | | | | | | | | module_param(bool) used to counter-intuitively take an int. In fddd5201 (mid-2009) we allowed bool or int/unsigned int using a messy trick. It's time to remove the int/unsigned int option. For this version it'll simply give a warning, but it'll break next kernel version. Acked-by: Mauro Carvalho Chehab <mchehab@redhat.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* AppArmor: misc. base functions and definesJohn Johansen2010-08-021-0/+92
Miscellaneous functions and defines needed by AppArmor, including the base path resolution routines. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org>