summaryrefslogtreecommitdiff
path: root/security/apparmor/include
AgeCommit message (Expand)AuthorFilesLines
2022-10-03apparmor: add the ability for policy to specify a permission tableJohn Johansen1-1/+4
2022-10-03apparmor: add user mode flagJohn Johansen2-0/+4
2022-10-03apparmor: add mediation class information to auditingJohn Johansen3-3/+8
2022-10-03apparmor: extend permissions to support a label and tag stringJohn Johansen4-8/+12
2022-10-03apparmor: isolate policy backwards compatibility to its own fileJohn Johansen2-0/+34
2022-10-03apparmor: extend xindex sizeJohn Johansen2-11/+10
2022-10-03apparmor: move dfa perm macros into policy_unpackJohn Johansen1-51/+0
2022-10-03apparmor: preparse for state being more than just an integerJohn Johansen5-30/+30
2022-10-03apparmor: convert policy lookup to use accept as an indexJohn Johansen2-8/+12
2022-10-03apparmor: cleanup shared permission structJohn Johansen1-10/+7
2022-10-03apparmor: convert xmatch to using the new shared policydb structJohn Johansen2-3/+2
2022-10-03apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen2-38/+15
2022-10-03apparmor: compute policydb permission on profile loadJohn Johansen2-2/+12
2022-10-03apparmor: convert xmatch to use aa_perms structureJohn Johansen1-1/+2
2022-10-03apparmor: move fperm computation into policy_unpackJohn Johansen1-1/+0
2022-10-03apparmor: compute xmatch permissions on profile loadMike Salvatore1-0/+2
2022-10-03apparmor: compute file permissions on profile loadMike Salvatore1-3/+12
2022-10-03apparmor: reserve mediation classesJohn Johansen1-1/+8
2022-07-19apparmor: move ptrace mediation to more logical task.{h,c}John Johansen2-18/+18
2022-07-19apparmor: extend policydb permission set by making use of the xbitsJohn Johansen1-0/+3
2022-07-19apparmor: allow label to carry debug flagsJohn Johansen4-2/+10
2022-07-19apparmor: fix overlapping attachment computationJohn Johansen1-1/+1
2022-07-13apparmor: disable showing the mode as part of a secid to secctxJohn Johansen1-0/+3
2022-07-13apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox1-2/+0
2022-07-13apparmor: add a kernel label to use on kernel objectsJohn Johansen1-0/+1
2022-07-09apparmor: make export of raw binary profile to userspace optionalJohn Johansen2-0/+15
2022-07-09apparmor: fix absroot causing audited secids to begin with =John Johansen1-0/+5
2021-11-11Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds4-9/+13
2021-11-03apparmor: fix zero-length compiler warning in AA_BUG()John Johansen1-1/+6
2021-11-03apparmor: Remove the repeated declarationShaokun Zhang1-4/+0
2021-11-03apparmor: avoid -Wempty-body warningArnd Bergmann1-1/+1
2021-02-07security: apparmor: file.h: delete duplicated wordRandy Dunlap1-1/+1
2021-02-07apparmor: update policy capable checks to use a labelJohn Johansen2-2/+5
2020-12-03security: add const qualifier to struct sock in various placesFlorian Westphal1-1/+1
2020-08-07mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long1-1/+1
2020-06-07Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2-0/+13
2020-06-07apparmor: Fix memory leak of profile proxyJohn Johansen1-0/+1
2020-05-20exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman1-1/+1
2020-01-21apparmor: add outofband transition and use it in xattr matchJohn Johansen1-1/+8
2020-01-21apparmor: fix nnp subset test for unconfinedJohn Johansen1-0/+1
2020-01-18apparmor: add a valid state flags checkJohn Johansen1-0/+4
2019-12-03Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds5-51/+13
2019-11-22apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2-2/+3
2019-06-20apparmor: increase left match history buffer sizeJohn Johansen1-2/+1
2019-06-20apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior1-47/+2
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen1-1/+10
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner23-115/+23
2019-04-11apparmor: Initial implementation of raw policy blob compressionChris Coulson2-1/+8
2019-03-07Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-2/+1
2019-01-31audit: remove unused actx param from audit_rule_matchRichard Guy Briggs1-2/+1