summaryrefslogtreecommitdiff
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2016-11-21apparmor: fix change_hat not finding hat after policy replacementJohn Johansen1-2/+4
2016-09-27fs: Replace CURRENT_TIME with current_time() for inode timestampsDeepa Dinamani1-1/+1
2016-07-27apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann3-3/+7
2016-07-12apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen1-1/+1
2016-07-12apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum1-17/+19
2016-07-12apparmor: do not expose kernel stackHeinrich Schuchardt1-1/+3
2016-07-12apparmor: fix module parameters can be changed after policy is lockedJohn Johansen3-13/+29
2016-07-12apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen1-0/+3
2016-07-12apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen1-5/+5
2016-07-12apparmor: add missing id bounds check on dfa verificationJohn Johansen2-0/+3
2016-07-12apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney1-2/+4
2016-07-12apparmor: use list_next_entry instead of list_entry_nextGeliang Tang1-5/+3
2016-07-12apparmor: fix refcount race when finding a child profileJohn Johansen1-1/+3
2016-07-12apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen1-0/+1
2016-07-12apparmor: check that xindex is in trans_table boundsJohn Johansen1-1/+1
2016-07-12apparmor: ensure the target profile name is always auditedJohn Johansen1-11/+9
2016-07-12apparmor: fix audit full profile hname on successful loadJohn Johansen1-1/+1
2016-07-12apparmor: fix log failures for all profiles in a setJohn Johansen1-10/+19
2016-07-12apparmor: fix put() parent ref after updating the active refJohn Johansen1-1/+1
2016-07-12apparmor: add parameter to control whether policy hashing is usedJohn Johansen4-6/+25
2016-07-12apparmor: internal paths should be treated as disconnectedJohn Johansen1-28/+36
2016-07-12apparmor: fix disconnected bind mnts reconnectionJohn Johansen1-1/+4
2016-07-12apparmor: fix update the mtime of the profile file on replacementJohn Johansen1-0/+2
2016-07-12apparmor: exec should not be returning ENOENT when it deniesJohn Johansen1-1/+1
2016-07-12apparmor: fix uninitialized lsm_audit memberJohn Johansen2-2/+4
2016-07-12apparmor: fix replacement bug that adds new child to old parentJohn Johansen1-1/+1
2016-07-12apparmor: fix refcount bug in profile replacementJohn Johansen1-2/+2
2016-03-28constify security_path_{link,rename}Al Viro1-3/+3
2016-03-28apparmor: remove useless checks for NULL ->mntAl Viro1-2/+2
2016-03-28constify security_path_{mkdir,mknod,symlink}Al Viro1-3/+3
2016-03-28constify security_path_{unlink,rmdir}Al Viro1-2/+2
2016-03-28apparmor: constify common_perm_...()Al Viro1-4/+4
2016-03-28apparmor: constify aa_path_link()Al Viro2-2/+2
2016-03-28apparmor: new helper - common_path_perm()Al Viro1-35/+12
2016-03-28constify chmod_common/security_path_chmodAl Viro1-1/+1
2016-03-28constify chown_common/security_path_chownAl Viro1-1/+1
2016-03-28apparmor_path_truncate(): path->mnt is never NULLAl Viro1-1/+1
2016-03-28constify security_path_truncate()Al Viro1-1/+1
2016-03-27[apparmor] constify struct path * in a bunch of helpersAl Viro5-8/+8
2015-10-22apparmor: clarify CRYPTO dependencyArnd Bergmann1-1/+1
2015-07-01Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-3/+3
2015-05-28kernel/params: constify struct kernel_param_ops usesLuis R. Rodriguez1-3/+3
2015-05-12LSM: Switch to lists of hooksCasey Schaufler2-45/+18
2015-05-12LSM: Add security module hook list headsCasey Schaufler1-42/+42
2015-05-12LSM: Split security.hCasey Schaufler1-1/+1
2015-04-15VFS: security/: d_inode() annotationsDavid Howells1-1/+1
2015-04-15VFS: security/: d_backing_inode() annotationsDavid Howells2-12/+12
2015-04-11switch security_inode_getattr() to struct path *Al Viro1-3/+3
2015-02-22Apparmor: Use d_is_positive/negative() rather than testing dentry->d_inodeDavid Howells1-1/+1
2015-02-22Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sbDavid Howells2-12/+12