summaryrefslogtreecommitdiffstats
path: root/security/apparmor/policy.c
Commit message (Expand)AuthorAgeFilesLines
* apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen2020-01-041-2/+2
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-031-2/+3
|\
| * apparmor: fix spelling mistake "immutible" -> "immutable"Colin Ian King2019-04-171-1/+1
| * apparmor: fix blob compression when ns is forced on a policy loadJohn Johansen2019-04-111-1/+2
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-6/+1
|/
* apparmor: fix checkpatch error in Parse secmark policyJohn Johansen2018-11-011-1/+1
* apparmor: Parse secmark policyMatthew Garrett2018-10-031-0/+3
* apparmor: fix memory leak when deduping profile loadJohn Johansen2018-06-071-0/+3
* apparmor: fix typo "preconfinement"Zygmunt Krynicki2018-05-031-1/+1
* apparmor: add support for mapping secids and using secctxesJohn Johansen2018-05-021-1/+1
* apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen2018-02-091-5/+1
* apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett2018-02-091-0/+8
* apparmor: move context.h to cred.hJohn Johansen2018-02-091-1/+1
* apparmor: cleanup fixup description of aa_replace_profilesJohn Johansen2018-02-091-2/+3
* apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen2018-02-091-1/+1
* apparmor: fix possible recursive lock warning in __aa_create_nsJohn Johansen2017-11-211-4/+4
* apparmor: fix leak of null profile name if profile allocation failsJohn Johansen2017-11-211-1/+2
* apparmor: fix race condition in null profile creationJohn Johansen2017-09-221-3/+11
* apparmor: move new_null_profile to after profile lookup fns()John Johansen2017-09-221-79/+79
* apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-101-118/+90
* apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen2017-06-101-37/+2
* apparmor: refactor updating profiles to the newest parentJohn Johansen2017-06-101-4/+31
* apparmor: share profile name on replacementJohn Johansen2017-06-101-0/+9
* apparmor: fix policy load/remove semanticsJohn Johansen2017-06-101-11/+11
* apparmor: add namespace lookup fns()John Johansen2017-06-101-4/+6
* apparmor: cleanup __find_child()John Johansen2017-06-101-8/+8
* apparmor: provide finer control over policy managementJohn Johansen2017-06-101-13/+22
* apparmor: rename apparmor file fns and data to indicate useJohn Johansen2017-06-081-3/+3
* apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen2017-06-081-1/+45
* apparmor: fix invalid reference to index variable of iterator line 836John Johansen2017-04-071-2/+4
* sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar2017-03-021-0/+1
* sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar2017-03-021-0/+1
* apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks2017-01-161-1/+0
* apparmor: support querying extended trusted helper extra dataWilliam Hua2017-01-161-0/+23
* apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen2017-01-161-23/+19
* apparmor: change op from int to const char *John Johansen2017-01-161-3/+4
* apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen2017-01-161-1/+1
* apparmor: pass the subject profile into profile replace/removeJohn Johansen2017-01-161-11/+14
* apparmor: audit policy ns specified in policy loadJohn Johansen2017-01-161-14/+40
* apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen2017-01-161-7/+7
* apparmor: add ns name to the audit data for policy loadsJohn Johansen2017-01-161-10/+24
* apparmor: add profile and ns params to aa_may_manage_policy()John Johansen2017-01-161-12/+10
* apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen2017-01-161-3/+9
* apparmor: add ns being viewed as a param to policy_view_capable()John Johansen2017-01-161-3/+22
* apparmor: allow specifying the profile doing the managementJohn Johansen2017-01-161-11/+21
* apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen2017-01-161-3/+4
* apparmor: add a default null dfaJohn Johansen2017-01-161-0/+2
* apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-161-13/+40
* apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-161-5/+6
* apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-161-2/+4
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-12 10:42:45 +0000