| Commit message (Expand) | Author | Age | Files | Lines |
* | apparmor: update policy capable checks to use a label | John Johansen | 2021-02-07 | 1 | -2/+4 |
* | apparmor: fix PROFILE_MEDIATES for untrusted input | John Johansen | 2019-06-18 | 1 | -1/+10 |
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 | Thomas Gleixner | 2019-06-05 | 1 | -5/+1 |
* | apparmor: Parse secmark policy | Matthew Garrett | 2018-10-03 | 1 | -0/+3 |
* | apparmor: remove POLICY_MEDIATES_SAFE | John Johansen | 2018-03-13 | 1 | -11/+1 |
* | apparmor: add base infastructure for socket mediation | John Johansen | 2018-03-13 | 1 | -0/+11 |
* | apparmor: convert attaching profiles via xattrs to use dfa matching | John Johansen | 2018-02-09 | 1 | -2/+0 |
* | apparmor: Add support for attaching profiles via xattr, presence and value | Matthew Garrett | 2018-02-09 | 1 | -0/+6 |
* | Revert "apparmor: add base infastructure for socket mediation" | Linus Torvalds | 2017-10-26 | 1 | -13/+0 |
* | apparmor: add base infastructure for socket mediation | John Johansen | 2017-09-22 | 1 | -0/+13 |
* | apparmor: switch from profiles to using labels on contexts | John Johansen | 2017-06-10 | 1 | -78/+32 |
* | apparmor: add fn to test if profile supports a given mediation class | John Johansen | 2017-06-10 | 1 | -0/+10 |
* | apparmor: provide finer control over policy management | John Johansen | 2017-06-10 | 1 | -2/+6 |
* | apparmor: move permissions into their own file to be more easily shared | John Johansen | 2017-06-08 | 1 | -0/+1 |
* | apparmor: allow profiles to provide info to disconnected paths | John Johansen | 2017-06-08 | 1 | -0/+2 |
* | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/... | Linus Torvalds | 2017-02-21 | 1 | -142/+57 |
|\ |
|
| * | apparmor: support querying extended trusted helper extra data | William Hua | 2017-01-16 | 1 | -0/+16 |
| * | apparmor: change op from int to const char * | John Johansen | 2017-01-16 | 1 | -1/+2 |
| * | apparmor: pass the subject profile into profile replace/remove | John Johansen | 2017-01-16 | 1 | -3/+4 |
| * | apparmor: allow introspecting the loaded policy pre internal transform | John Johansen | 2017-01-16 | 1 | -2/+3 |
| * | apparmor: add profile and ns params to aa_may_manage_policy() | John Johansen | 2017-01-16 | 1 | -1/+1 |
| * | apparmor: add ns being viewed as a param to policy_admin_capable() | John Johansen | 2017-01-16 | 1 | -1/+1 |
| * | apparmor: add ns being viewed as a param to policy_view_capable() | John Johansen | 2017-01-16 | 1 | -1/+3 |
| * | apparmor: Make aa_remove_profile() callable from a different view | John Johansen | 2017-01-16 | 1 | -1/+1 |
| * | apparmor: name null-XXX profiles after the executable | John Johansen | 2017-01-16 | 1 | -1/+2 |
| * | apparmor: pass gfp_t parameter into profile allocation | John Johansen | 2017-01-16 | 1 | -1/+1 |
| * | apparmor: refactor prepare_ns() and make usable from different views | John Johansen | 2017-01-16 | 1 | -1/+2 |
| * | apparmor: add fn to lookup profiles by fqname | John Johansen | 2017-01-16 | 1 | -0/+2 |
| * | apparmor: add strn version of lookup_profile fn | John Johansen | 2017-01-16 | 1 | -0/+2 |
| * | apparmor: rename replacedby to proxy | John Johansen | 2017-01-16 | 1 | -10/+10 |
| * | apparmor: rename PFLAG_INVALID to PFLAG_STALE | John Johansen | 2017-01-16 | 1 | -3/+3 |
| * | apparmor: rename namespace to ns to improve code line lengths | John Johansen | 2017-01-16 | 1 | -4/+4 |
| * | apparmor: split apparmor policy namespaces code into its own file | John Johansen | 2017-01-16 | 1 | -106/+6 |
| * | apparmor: split out shared policy_XXX fns to lib | John Johansen | 2017-01-16 | 1 | -13/+0 |
| * | apparmor: move lib definitions into separate lib include | John Johansen | 2017-01-16 | 1 | -0/+1 |
* | | locking/atomic, kref: Use kref_get_unless_zero() more | Peter Zijlstra | 2017-01-14 | 1 | -2/+2 |
|/ |
|
* | apparmor: fix module parameters can be changed after policy is locked | John Johansen | 2016-07-12 | 1 | -0/+2 |
* | apparmor: fix suspicious RCU usage warning in policy.c/policy.h | John Johansen | 2013-09-30 | 1 | -1/+3 |
* | apparmor: add the ability to report a sha1 hash of loaded policy | John Johansen | 2013-08-14 | 1 | -0/+1 |
* | apparmor: add an optional profile attachment string for profiles | John Johansen | 2013-08-14 | 1 | -0/+2 |
* | apparmor: add interface files for profiles and namespaces | John Johansen | 2013-08-14 | 1 | -2/+19 |
* | apparmor: allow setting any profile into the unconfined state | John Johansen | 2013-08-14 | 1 | -3/+3 |
* | apparmor: make free_profile available outside of policy.c | John Johansen | 2013-08-14 | 1 | -0/+1 |
* | apparmor: rework namespace free path | John Johansen | 2013-08-14 | 1 | -8/+4 |
* | apparmor: update how unconfined is handled | John Johansen | 2013-08-14 | 1 | -41/+39 |
* | apparmor: change how profile replacement update is done | John Johansen | 2013-08-14 | 1 | -22/+56 |
* | apparmor: convert profile lists to RCU based locking | John Johansen | 2013-08-14 | 1 | -3/+42 |
* | apparmor: remove sid from profiles | John Johansen | 2013-04-28 | 1 | -2/+2 |
* | apparmor: refactor profile mode macros | John Johansen | 2013-04-28 | 1 | -6/+6 |
* | AppArmor: add const qualifiers to string arrays | Jan Engelhardt | 2012-03-14 | 1 | -1/+1 |