summaryrefslogtreecommitdiff
path: root/security/apparmor/include
Commit message (Expand)AuthorAgeFilesLines
* apparmor: add mediation class information to auditingJohn Johansen2022-10-033-3/+8
* apparmor: extend permissions to support a label and tag stringJohn Johansen2022-10-034-8/+12
* apparmor: isolate policy backwards compatibility to its own fileJohn Johansen2022-10-032-0/+34
* apparmor: extend xindex sizeJohn Johansen2022-10-032-13/+12
* apparmor: move dfa perm macros into policy_unpackJohn Johansen2022-10-031-51/+0
* apparmor: preparse for state being more than just an integerJohn Johansen2022-10-035-30/+30
* apparmor: convert policy lookup to use accept as an indexJohn Johansen2022-10-032-8/+12
* apparmor: cleanup shared permission structJohn Johansen2022-10-031-10/+7
* apparmor: convert xmatch to using the new shared policydb structJohn Johansen2022-10-032-3/+2
* apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen2022-10-032-38/+15
* apparmor: compute policydb permission on profile loadJohn Johansen2022-10-032-2/+12
* apparmor: convert xmatch to use aa_perms structureJohn Johansen2022-10-031-1/+2
* apparmor: move fperm computation into policy_unpackJohn Johansen2022-10-031-1/+0
* apparmor: compute xmatch permissions on profile loadMike Salvatore2022-10-031-0/+2
* apparmor: compute file permissions on profile loadMike Salvatore2022-10-031-3/+12
* apparmor: reserve mediation classesJohn Johansen2022-10-031-1/+8
* apparmor: move ptrace mediation to more logical task.{h,c}John Johansen2022-07-192-18/+18
* apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-07-191-0/+3
* apparmor: allow label to carry debug flagsJohn Johansen2022-07-194-2/+10
* apparmor: fix overlapping attachment computationJohn Johansen2022-07-191-1/+1
* apparmor: disable showing the mode as part of a secid to secctxJohn Johansen2022-07-131-0/+3
* apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox2022-07-131-2/+0
* apparmor: add a kernel label to use on kernel objectsJohn Johansen2022-07-131-0/+1
* apparmor: make export of raw binary profile to userspace optionalJohn Johansen2022-07-092-0/+15
* apparmor: fix absroot causing audited secids to begin with =John Johansen2022-07-091-0/+5
* Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2021-11-114-9/+13
|\
| * apparmor: fix zero-length compiler warning in AA_BUG()John Johansen2021-11-031-1/+6
| * apparmor: Remove the repeated declarationShaokun Zhang2021-11-031-4/+0
| * apparmor: avoid -Wempty-body warningArnd Bergmann2021-11-031-1/+1
| * security: apparmor: file.h: delete duplicated wordRandy Dunlap2021-02-071-1/+1
| * apparmor: update policy capable checks to use a labelJohn Johansen2021-02-072-2/+5
* | security: add const qualifier to struct sock in various placesFlorian Westphal2020-12-031-1/+1
* | mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long2020-08-071-1/+1
* | Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2020-06-072-0/+13
|\ \
| * | apparmor: Fix memory leak of profile proxyJohn Johansen2020-06-071-0/+1
| |/
| * apparmor: add outofband transition and use it in xattr matchJohn Johansen2020-01-211-1/+8
| * apparmor: fix nnp subset test for unconfinedJohn Johansen2020-01-211-0/+1
| * apparmor: add a valid state flags checkJohn Johansen2020-01-181-0/+4
* | exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman2020-05-201-1/+1
|/
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-035-51/+13
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-222-2/+3
| * apparmor: increase left match history buffer sizeJohn Johansen2019-06-201-2/+1
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-201-47/+2
| * apparmor: Initial implementation of raw policy blob compressionChris Coulson2019-04-112-1/+8
* | apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen2019-06-181-1/+10
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-0523-115/+23
|/
* Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-03-071-2/+1
|\
| * audit: remove unused actx param from audit_rule_matchRichard Guy Briggs2019-01-311-2/+1
* | apparmor: Adjust offset when accessing task blob.Tetsuo Handa2019-01-221-1/+1
* | LSM: generalize flag passing to security_capableMicah Morton2019-01-101-1/+1