summaryrefslogtreecommitdiffstats
path: root/security/apparmor
Commit message (Expand)AuthorAgeFilesLines
...
| * | apparmor: add get_dfa() fnJohn Johansen2017-01-161-0/+15
| * | apparmor: prepare to support newer versions of policyJohn Johansen2017-01-162-10/+25
| * | apparmor: add support for force complain flag to support learning modeJohn Johansen2017-01-161-1/+3
| * | apparmor: remove paranoid load switchJohn Johansen2017-01-162-16/+10
| * | apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-163-17/+47
| * | apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-164-8/+9
| * | apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-165-38/+79
| * | apparmor: update policy_destroy to use new debug assertsJohn Johansen2017-01-161-9/+2
| * | apparmor: pass gfp param into aa_policy_init()John Johansen2017-01-164-7/+7
| * | apparmor: constify policy name and hnameJohn Johansen2017-01-163-4/+4
| * | apparmor: rename hname_tail to basenameJohn Johansen2017-01-163-4/+4
| * | apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen2017-01-162-8/+8
| * | apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen2017-01-163-4/+43
| * | apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen2017-01-161-0/+11
| * | apparmor: allow ns visibility question to consider subnsesJohn Johansen2017-01-164-8/+14
| * | apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-164-7/+38
| * | apparmor: add lib fn to find the "split" for fqnamesJohn Johansen2017-01-162-0/+55
| * | apparmor: add strn version of aa_find_nsJohn Johansen2017-01-162-6/+29
| * | apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-162-11/+27
| * | apparmor: rename replacedby to proxyJohn Johansen2017-01-165-65/+65
| * | apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-163-5/+5
| * | apparmor: rename sid to secidJohn Johansen2017-01-164-65/+65
| * | apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-168-128/+122
| * | apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-1610-391/+454
| * | apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-164-132/+137
| * | apparmor: move lib definitions into separate lib includeJohn Johansen2017-01-165-82/+99
| * | apparmor: use designated initializersKees Cook2017-01-152-5/+7
| * | AppArmor: Use GFP_KERNEL for __aa_kvmalloc().Tetsuo Handa2017-01-151-1/+2
| |/
* / locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra2017-01-142-8/+2
|/
* apparmor: fix change_hat not finding hat after policy replacementJohn Johansen2016-11-211-2/+4
* fs: Replace CURRENT_TIME with current_time() for inode timestampsDeepa Dinamani2016-09-271-1/+1
* apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann2016-07-273-3/+7
* apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen2016-07-121-1/+1
* apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum2016-07-121-17/+19
* apparmor: do not expose kernel stackHeinrich Schuchardt2016-07-121-1/+3
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-123-13/+29
* apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen2016-07-121-0/+3
* apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen2016-07-121-5/+5
* apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-122-0/+3
* apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney2016-07-121-2/+4
* apparmor: use list_next_entry instead of list_entry_nextGeliang Tang2016-07-121-5/+3
* apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
* apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen2016-07-121-0/+1
* apparmor: check that xindex is in trans_table boundsJohn Johansen2016-07-121-1/+1
* apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
* apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
* apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
* apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
* apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-124-6/+25
* apparmor: internal paths should be treated as disconnectedJohn Johansen2016-07-121-28/+36