summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* apparmor: rework profile->rules to be a listJohn Johansen2022-10-0315-57/+142
* apparmor: refactor profile rules and attachmentsJohn Johansen2022-10-0318-239/+308
* apparmor: verify loaded permission bits masks don't overlapJohn Johansen2022-10-031-4/+30
* apparmor: cleanup: move perm accumulation into perms.hJohn Johansen2022-10-032-52/+53
* apparmor: make sure perm indexes are accumulatedJohn Johansen2022-10-033-2/+25
* apparmor: verify permission table indexesJohn Johansen2022-10-031-1/+34
* apparmor: add the ability for policy to specify a permission tableJohn Johansen2022-10-032-11/+98
* apparmor: make unpack_array return a trianary valueJohn Johansen2022-10-032-22/+33
* apparmor: group dfa policydb unpackingJohn Johansen2022-10-031-38/+63
* apparmor: make transition table unpack generic so it can be reusedJohn Johansen2022-10-031-10/+12
* apparmor: add user mode flagJohn Johansen2022-10-035-5/+9
* apparmor: add mediation class information to auditingJohn Johansen2022-10-0314-13/+48
* apparmor: extend permissions to support a label and tag stringJohn Johansen2022-10-037-27/+32
* apparmor: isolate policy backwards compatibility to its own fileJohn Johansen2022-10-035-287/+359
* apparmor: extend xindex sizeJohn Johansen2022-10-033-17/+16
* apparmor: move dfa perm macros into policy_unpackJohn Johansen2022-10-032-51/+49
* apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-10-031-4/+27
* apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen2022-10-031-4/+9
* apparmor: Fix abi check to include v8 abiJohn Johansen2022-10-031-1/+1
* apparmor: preparse for state being more than just an integerJohn Johansen2022-10-0315-102/+101
* apparmor: convert policy lookup to use accept as an indexJohn Johansen2022-10-037-24/+33
* apparmor: cleanup shared permission structJohn Johansen2022-10-032-12/+9
* apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2022-10-032-4/+7
* apparmor: convert fperm lookup to use accept as an indexJohn Johansen2022-10-032-19/+44
* apparmor: convert xmatch to using the new shared policydb structJohn Johansen2022-10-036-29/+28
* apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen2022-10-037-59/+40
* apparmor: compute policydb permission on profile loadJohn Johansen2022-10-039-86/+90
* apparmor: convert xmatch to use aa_perms structureJohn Johansen2022-10-033-7/+13
* apparmor: rework and cleanup fperm computationJohn Johansen2022-10-031-32/+38
* apparmor: move fperm computation into policy_unpackJohn Johansen2022-10-033-98/+98
* apparmor: compute xmatch permissions on profile loadMike Salvatore2022-10-034-3/+26
* apparmor: compute file permissions on profile loadMike Salvatore2022-10-035-48/+110
* apparmor: expose compression level limits in sysfsJon Tourville2022-10-031-0/+16
* apparmor: use zstd compression for profile dataJon Tourville2022-10-034-102/+81
* apparmor: reserve mediation classesJohn Johansen2022-10-031-1/+8
* apparmor: fix lockdep warning when removing a namespaceJohn Johansen2022-10-031-1/+1
* apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui2022-10-031-1/+3
* Merge tag 'apparmor-pr-2022-08-08' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-08-1029-338/+486
|\
| * apparmor: correct config reference to intended oneLukas Bulwahn2022-07-201-1/+1
| * apparmor: move ptrace mediation to more logical task.{h,c}John Johansen2022-07-195-128/+133
| * apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-07-194-5/+25
| * apparmor: allow label to carry debug flagsJohn Johansen2022-07-196-8/+20
| * apparmor: fix overlapping attachment computationJohn Johansen2022-07-192-2/+2
| * apparmor: fix setting unconfined mode on a loaded profileJohn Johansen2022-07-191-5/+7
| * apparmor: Fix some kernel-doc commentsYang Li2022-07-191-6/+6
| * apparmor: Mark alloc_unconfined() as staticSouptick Joarder (HPE)2022-07-191-1/+1
| * apparmor: disable showing the mode as part of a secid to secctxJohn Johansen2022-07-133-6/+20
| * apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox2022-07-133-32/+13
| * apparmor: add a kernel label to use on kernel objectsJohn Johansen2022-07-134-13/+37
| * apparmor: test: Remove some casts which are no-longer requiredDavid Gow2022-07-091-6/+6
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-17 07:29:27 +0000