summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
...
| * | | | apparmor: add ns name to the audit data for policy loadsJohn Johansen2017-01-162-10/+25
| * | | | apparmor: add profile and ns params to aa_may_manage_policy()John Johansen2017-01-163-14/+12
| * | | | apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen2017-01-163-10/+16
| * | | | apparmor: add ns being viewed as a param to policy_view_capable()John Johansen2017-01-164-8/+35
| * | | | apparmor: allow specifying the profile doing the managementJohn Johansen2017-01-161-11/+21
| * | | | apparmor: allow introspecting the policy namespace nameJohn Johansen2017-01-161-0/+24
| * | | | apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen2017-01-163-5/+7
| * | | | apparmor: track ns level so it can be used to help in view checksJohn Johansen2017-01-161-0/+1
| * | | | apparmor: add special .null file used to "close" fds at execJohn Johansen2017-01-163-1/+81
| * | | | apparmor: provide userspace flag indicating binfmt_elf_mmap changeJohn Johansen2017-01-161-0/+1
| * | | | apparmor: add a default null dfaJohn Johansen2017-01-166-2/+46
| * | | | apparmor: allow policydb to be used as the file dfaJohn Johansen2017-01-161-4/+8
| * | | | apparmor: add get_dfa() fnJohn Johansen2017-01-161-0/+15
| * | | | apparmor: prepare to support newer versions of policyJohn Johansen2017-01-162-10/+25
| * | | | apparmor: add support for force complain flag to support learning modeJohn Johansen2017-01-161-1/+3
| * | | | apparmor: remove paranoid load switchJohn Johansen2017-01-162-16/+10
| * | | | apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-163-17/+47
| * | | | apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-164-8/+9
| * | | | apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-165-38/+79
| * | | | apparmor: update policy_destroy to use new debug assertsJohn Johansen2017-01-161-9/+2
| * | | | apparmor: pass gfp param into aa_policy_init()John Johansen2017-01-164-7/+7
| * | | | apparmor: constify policy name and hnameJohn Johansen2017-01-163-4/+4
| * | | | apparmor: rename hname_tail to basenameJohn Johansen2017-01-163-4/+4
| * | | | apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen2017-01-162-8/+8
| * | | | apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen2017-01-163-4/+43
| * | | | apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen2017-01-161-0/+11
| * | | | apparmor: allow ns visibility question to consider subnsesJohn Johansen2017-01-164-8/+14
| * | | | apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-164-7/+38
| * | | | apparmor: add lib fn to find the "split" for fqnamesJohn Johansen2017-01-162-0/+55
| * | | | apparmor: add strn version of aa_find_nsJohn Johansen2017-01-162-6/+29
| * | | | apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-162-11/+27
| * | | | apparmor: rename replacedby to proxyJohn Johansen2017-01-165-65/+65
| * | | | apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-163-5/+5
| * | | | apparmor: rename sid to secidJohn Johansen2017-01-164-65/+65
| * | | | apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-168-128/+122
| * | | | apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-1610-391/+454
| * | | | apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-164-132/+137
| * | | | apparmor: move lib definitions into separate lib includeJohn Johansen2017-01-165-82/+99
| * | | | apparmor: use designated initializersKees Cook2017-01-152-5/+7
| * | | | AppArmor: Use GFP_KERNEL for __aa_kvmalloc().Tetsuo Handa2017-01-151-1/+2
| |/ / /
* | | | Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2017-02-202-8/+2
|\ \ \ \ | |_|_|/ |/| | |
| * | | locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra2017-01-142-8/+2
| |/ /
* / / selinux: fix off-by-one in setprocattrStephen Smalley2017-02-081-1/+1
|/ /
* | Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds2016-12-244-4/+4
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2016-12-221-0/+2
|\|
| * selinux: use the kernel headers when building scripts/selinuxPaul Moore2016-12-211-0/+2
* | ima: platform-independent hash valueAndreas Steffen2016-12-201-2/+4
* | ima: define a canonical binary_runtime_measurements list formatMimi Zohar2016-12-205-13/+62
* | ima: support restoring multiple template formatsMimi Zohar2016-12-201-3/+49
* | ima: store the builtin/custom template definitions in a listMimi Zohar2016-12-203-11/+43