summaryrefslogtreecommitdiffstats
path: root/security/apparmor/policy.c
Commit message (Expand)AuthorAgeFilesLines
* sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar2017-03-021-0/+1
* sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar2017-03-021-0/+1
* apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks2017-01-161-1/+0
* apparmor: support querying extended trusted helper extra dataWilliam Hua2017-01-161-0/+23
* apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen2017-01-161-23/+19
* apparmor: change op from int to const char *John Johansen2017-01-161-3/+4
* apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen2017-01-161-1/+1
* apparmor: pass the subject profile into profile replace/removeJohn Johansen2017-01-161-11/+14
* apparmor: audit policy ns specified in policy loadJohn Johansen2017-01-161-14/+40
* apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen2017-01-161-7/+7
* apparmor: add ns name to the audit data for policy loadsJohn Johansen2017-01-161-10/+24
* apparmor: add profile and ns params to aa_may_manage_policy()John Johansen2017-01-161-12/+10
* apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen2017-01-161-3/+9
* apparmor: add ns being viewed as a param to policy_view_capable()John Johansen2017-01-161-3/+22
* apparmor: allow specifying the profile doing the managementJohn Johansen2017-01-161-11/+21
* apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen2017-01-161-3/+4
* apparmor: add a default null dfaJohn Johansen2017-01-161-0/+2
* apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-161-13/+40
* apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-161-5/+6
* apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-161-2/+4
* apparmor: pass gfp param into aa_policy_init()John Johansen2017-01-161-1/+1
* apparmor: rename hname_tail to basenameJohn Johansen2017-01-161-1/+1
* apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-161-0/+29
* apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-161-11/+25
* apparmor: rename replacedby to proxyJohn Johansen2017-01-161-35/+35
* apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-161-1/+1
* apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-161-16/+16
* apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-161-284/+14
* apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-161-119/+4
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-121-1/+17
* apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
* apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
* apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
* apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
* apparmor: fix replacement bug that adds new child to old parentJohn Johansen2016-07-121-1/+1
* apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
* apparmor: fix memleak of the profile hashJohn Johansen2013-10-161-0/+1
* apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen2013-09-301-1/+2
* apparmor: add interface files for profiles and namespacesJohn Johansen2013-08-141-12/+63
* apparmor: allow setting any profile into the unconfined stateJohn Johansen2013-08-141-2/+4
* apparmor: make free_profile available outside of policy.cJohn Johansen2013-08-141-5/+4
* apparmor: rework namespace free pathJohn Johansen2013-08-141-27/+6
* apparmor: update how unconfined is handledJohn Johansen2013-08-141-41/+27
* apparmor: change how profile replacement update is doneJohn Johansen2013-08-141-38/+47
* apparmor: convert profile lists to RCU based lockingJohn Johansen2013-08-141-104/+109
* apparmor: provide base for multiple profiles to be replaced at onceJohn Johansen2013-08-141-117/+183
* apparmor: Fix smatch warning in aa_remove_profilesJohn Johansen2013-04-281-8/+6
* apparmor: move the free_profile fn ahead of aa_alloc_profileJohn Johansen2013-04-281-75/+75
* apparmor: remove sid from profilesJohn Johansen2013-04-281-17/+6
* apparmor: fix IRQ stack overflow during free_profileJohn Johansen2012-10-251-1/+23