summaryrefslogtreecommitdiff
path: root/security/apparmor/policy.c
AgeCommit message (Expand)AuthorFilesLines
2020-01-04apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen1-2/+2
2019-12-03Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-2/+3
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner1-6/+1
2019-04-17apparmor: fix spelling mistake "immutible" -> "immutable"Colin Ian King1-1/+1
2019-04-11apparmor: fix blob compression when ns is forced on a policy loadJohn Johansen1-1/+2
2018-11-01apparmor: fix checkpatch error in Parse secmark policyJohn Johansen1-1/+1
2018-10-03apparmor: Parse secmark policyMatthew Garrett1-0/+3
2018-06-07apparmor: fix memory leak when deduping profile loadJohn Johansen1-0/+3
2018-05-03apparmor: fix typo "preconfinement"Zygmunt Krynicki1-1/+1
2018-05-02apparmor: add support for mapping secids and using secctxesJohn Johansen1-1/+1
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen1-5/+1
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett1-0/+8
2018-02-09apparmor: move context.h to cred.hJohn Johansen1-1/+1
2018-02-09apparmor: cleanup fixup description of aa_replace_profilesJohn Johansen1-2/+3
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen1-1/+1
2017-11-21apparmor: fix possible recursive lock warning in __aa_create_nsJohn Johansen1-4/+4
2017-11-21apparmor: fix leak of null profile name if profile allocation failsJohn Johansen1-1/+2
2017-09-22apparmor: fix race condition in null profile creationJohn Johansen1-3/+11
2017-09-22apparmor: move new_null_profile to after profile lookup fns()John Johansen1-79/+79
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen1-118/+90
2017-06-10apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen1-37/+2
2017-06-10apparmor: refactor updating profiles to the newest parentJohn Johansen1-4/+31
2017-06-10apparmor: share profile name on replacementJohn Johansen1-0/+9
2017-06-10apparmor: fix policy load/remove semanticsJohn Johansen1-11/+11
2017-06-10apparmor: add namespace lookup fns()John Johansen1-4/+6
2017-06-10apparmor: cleanup __find_child()John Johansen1-8/+8
2017-06-10apparmor: provide finer control over policy managementJohn Johansen1-13/+22
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen1-3/+3
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen1-1/+45
2017-04-07apparmor: fix invalid reference to index variable of iterator line 836John Johansen1-2/+4
2017-03-02sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar1-0/+1
2017-03-02sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar1-0/+1
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks1-1/+0
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua1-0/+23
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen1-23/+19
2017-01-16apparmor: change op from int to const char *John Johansen1-3/+4
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen1-1/+1
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen1-11/+14
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen1-14/+40
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen1-7/+7
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen1-10/+24
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()John Johansen1-12/+10
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen1-3/+9
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen1-3/+22
2017-01-16apparmor: allow specifying the profile doing the managementJohn Johansen1-11/+21
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen1-3/+4
2017-01-16apparmor: add a default null dfaJohn Johansen1-0/+2
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen1-13/+40
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen1-5/+6
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen1-2/+4