summaryrefslogtreecommitdiffstats
path: root/security/apparmor
Commit message (Expand)AuthorAgeFilesLines
* apparmor: make sure the decompression ctx is promperly initializedJohn Johansen2022-10-031-1/+5
* apparmor: Remove unnecessary size check when unpacking trans_tableJohn Johansen2022-10-031-3/+7
* apparmor: Fix doc comment for compute_fpermsJohn Johansen2022-10-031-2/+2
* apparmor: make __aa_path_perm() staticXiu Jianfeng2022-10-032-6/+4
* apparmor: Simplify obtain the newest label on a credGaosheng Cui2022-10-032-14/+1
* apparmor: Fix regression in stacking due to label flagsJohn Johansen2022-10-031-5/+7
* apparmor: fix aa_class_names[] to match reserved classesJohn Johansen2022-10-031-1/+16
* apparmor: rework profile->rules to be a listJohn Johansen2022-10-0315-57/+142
* apparmor: refactor profile rules and attachmentsJohn Johansen2022-10-0318-239/+308
* apparmor: verify loaded permission bits masks don't overlapJohn Johansen2022-10-031-4/+30
* apparmor: cleanup: move perm accumulation into perms.hJohn Johansen2022-10-032-52/+53
* apparmor: make sure perm indexes are accumulatedJohn Johansen2022-10-033-2/+25
* apparmor: verify permission table indexesJohn Johansen2022-10-031-1/+34
* apparmor: add the ability for policy to specify a permission tableJohn Johansen2022-10-032-11/+98
* apparmor: make unpack_array return a trianary valueJohn Johansen2022-10-032-22/+33
* apparmor: group dfa policydb unpackingJohn Johansen2022-10-031-38/+63
* apparmor: make transition table unpack generic so it can be reusedJohn Johansen2022-10-031-10/+12
* apparmor: add user mode flagJohn Johansen2022-10-035-5/+9
* apparmor: add mediation class information to auditingJohn Johansen2022-10-0314-13/+48
* apparmor: extend permissions to support a label and tag stringJohn Johansen2022-10-037-27/+32
* apparmor: isolate policy backwards compatibility to its own fileJohn Johansen2022-10-035-287/+359
* apparmor: extend xindex sizeJohn Johansen2022-10-033-17/+16
* apparmor: move dfa perm macros into policy_unpackJohn Johansen2022-10-032-51/+49
* apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-10-031-4/+27
* apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen2022-10-031-4/+9
* apparmor: Fix abi check to include v8 abiJohn Johansen2022-10-031-1/+1
* apparmor: preparse for state being more than just an integerJohn Johansen2022-10-0315-102/+101
* apparmor: convert policy lookup to use accept as an indexJohn Johansen2022-10-037-24/+33
* apparmor: cleanup shared permission structJohn Johansen2022-10-032-12/+9
* apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2022-10-032-4/+7
* apparmor: convert fperm lookup to use accept as an indexJohn Johansen2022-10-032-19/+44
* apparmor: convert xmatch to using the new shared policydb structJohn Johansen2022-10-036-29/+28
* apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen2022-10-037-59/+40
* apparmor: compute policydb permission on profile loadJohn Johansen2022-10-039-86/+90
* apparmor: convert xmatch to use aa_perms structureJohn Johansen2022-10-033-7/+13
* apparmor: rework and cleanup fperm computationJohn Johansen2022-10-031-32/+38
* apparmor: move fperm computation into policy_unpackJohn Johansen2022-10-033-98/+98
* apparmor: compute xmatch permissions on profile loadMike Salvatore2022-10-034-3/+26
* apparmor: compute file permissions on profile loadMike Salvatore2022-10-035-48/+110
* apparmor: expose compression level limits in sysfsJon Tourville2022-10-031-0/+16
* apparmor: use zstd compression for profile dataJon Tourville2022-10-034-102/+81
* apparmor: reserve mediation classesJohn Johansen2022-10-031-1/+8
* apparmor: fix lockdep warning when removing a namespaceJohn Johansen2022-10-031-1/+1
* apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui2022-10-031-1/+3
* apparmor: correct config reference to intended oneLukas Bulwahn2022-07-201-1/+1
* apparmor: move ptrace mediation to more logical task.{h,c}John Johansen2022-07-195-128/+133
* apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-07-194-5/+25
* apparmor: allow label to carry debug flagsJohn Johansen2022-07-196-8/+20
* apparmor: fix overlapping attachment computationJohn Johansen2022-07-192-2/+2
* apparmor: fix setting unconfined mode on a loaded profileJohn Johansen2022-07-191-5/+7