summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include/policy.h
Commit message (Expand)AuthorAgeFilesLines
* treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
* apparmor: Parse secmark policyMatthew Garrett2018-10-031-0/+3
* apparmor: remove POLICY_MEDIATES_SAFEJohn Johansen2018-03-131-11/+1
* apparmor: add base infastructure for socket mediationJohn Johansen2018-03-131-0/+11
* apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen2018-02-091-2/+0
* apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett2018-02-091-0/+6
* Revert "apparmor: add base infastructure for socket mediation"Linus Torvalds2017-10-261-13/+0
* apparmor: add base infastructure for socket mediationJohn Johansen2017-09-221-0/+13
* apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-101-78/+32
* apparmor: add fn to test if profile supports a given mediation classJohn Johansen2017-06-101-0/+10
* apparmor: provide finer control over policy managementJohn Johansen2017-06-101-2/+6
* apparmor: move permissions into their own file to be more easily sharedJohn Johansen2017-06-081-0/+1
* apparmor: allow profiles to provide info to disconnected pathsJohn Johansen2017-06-081-0/+2
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2017-02-211-142/+57
|\
| * apparmor: support querying extended trusted helper extra dataWilliam Hua2017-01-161-0/+16
| * apparmor: change op from int to const char *John Johansen2017-01-161-1/+2
| * apparmor: pass the subject profile into profile replace/removeJohn Johansen2017-01-161-3/+4
| * apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen2017-01-161-2/+3
| * apparmor: add profile and ns params to aa_may_manage_policy()John Johansen2017-01-161-1/+1
| * apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen2017-01-161-1/+1
| * apparmor: add ns being viewed as a param to policy_view_capable()John Johansen2017-01-161-1/+3
| * apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen2017-01-161-1/+1
| * apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-161-1/+2
| * apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-161-1/+1
| * apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-161-1/+2
| * apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-161-0/+2
| * apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-161-0/+2
| * apparmor: rename replacedby to proxyJohn Johansen2017-01-161-10/+10
| * apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-161-3/+3
| * apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-161-4/+4
| * apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-161-106/+6
| * apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-161-13/+0
| * apparmor: move lib definitions into separate lib includeJohn Johansen2017-01-161-0/+1
* | locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra2017-01-141-2/+2
|/
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-121-0/+2
* apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen2013-09-301-1/+3
* apparmor: add the ability to report a sha1 hash of loaded policyJohn Johansen2013-08-141-0/+1
* apparmor: add an optional profile attachment string for profilesJohn Johansen2013-08-141-0/+2
* apparmor: add interface files for profiles and namespacesJohn Johansen2013-08-141-2/+19
* apparmor: allow setting any profile into the unconfined stateJohn Johansen2013-08-141-3/+3
* apparmor: make free_profile available outside of policy.cJohn Johansen2013-08-141-0/+1
* apparmor: rework namespace free pathJohn Johansen2013-08-141-8/+4
* apparmor: update how unconfined is handledJohn Johansen2013-08-141-41/+39
* apparmor: change how profile replacement update is doneJohn Johansen2013-08-141-22/+56
* apparmor: convert profile lists to RCU based lockingJohn Johansen2013-08-141-3/+42
* apparmor: remove sid from profilesJohn Johansen2013-04-281-2/+2
* apparmor: refactor profile mode macrosJohn Johansen2013-04-281-6/+6
* AppArmor: add const qualifiers to string arraysJan Engelhardt2012-03-141-1/+1
* AppArmor: Add ability to load extended policyJohn Johansen2012-03-141-0/+13
* AppArmor: core policy routinesJohn Johansen2010-08-021-0/+305