aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2015-02-22Apparmor: Use d_is_positive/negative() rather than testing dentry->d_inodeDavid Howells1-1/+1
2015-02-22Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sbDavid Howells2-12/+12
2014-08-27module: rename KERNEL_PARAM_FL_NOARG to avoid confusionJani Nikula1-2/+2
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook1-2/+2
2014-05-06nick kvfree() from apparmorAl Viro2-15/+0
2014-02-06security: replace strict_strto*() with kstrto*()Jingoo Han1-1/+1
2013-11-21Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds8-44/+22
2013-10-29apparmor: remove the "task" arg from may_change_ptraced_domain()Oleg Nesterov1-8/+6
2013-10-29apparmor: remove parent task info from audit loggingJohn Johansen2-7/+0
2013-10-29apparmor: remove tsk field from the apparmor_audit_structJohn Johansen1-8/+2
2013-10-29apparmor: fix capability to not use the current task, during reportingJohn Johansen6-22/+15
2013-10-16apparmor: fix bad lock balance when introspecting policyJohn Johansen1-3/+1
2013-10-16apparmor: fix memleak of the profile hashJohn Johansen1-0/+1
2013-09-30apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen2-2/+5
2013-09-30apparmor: Use shash crypto API interface for profile hashesTyler Hicks1-18/+16
2013-09-07Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds20-409/+1502
2013-08-20module/lsm: Have apparmor module parameters work with no argsSteven Rostedt1-0/+2
2013-08-14apparmor: add the ability to report a sha1 hash of loaded policyJohn Johansen8-6/+199
2013-08-14apparmor: export set of capabilities supported by the apparmor moduleJohn Johansen4-1/+15
2013-08-14apparmor: add the profile introspection file to interfaceJohn Johansen1-0/+236
2013-08-14apparmor: add an optional profile attachment string for profilesJohn Johansen4-0/+40
2013-08-14apparmor: add interface files for profiles and namespacesJohn Johansen7-29/+436
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen5-9/+22
2013-08-14apparmor: make free_profile available outside of policy.cJohn Johansen3-7/+7
2013-08-14apparmor: rework namespace free pathJohn Johansen2-35/+10
2013-08-14apparmor: update how unconfined is handledJohn Johansen3-83/+67
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen6-87/+125
2013-08-14apparmor: convert profile lists to RCU based lockingJohn Johansen4-111/+167
2013-08-14apparmor: provide base for multiple profiles to be replaced at onceJohn Johansen4-146/+283
2013-08-14apparmor: add a features/policy dir to interfaceJohn Johansen1-0/+5
2013-08-14apparmor: enable users to query whether apparmor is enabledJohn Johansen1-1/+1
2013-08-14apparmor: remove minimum size check for vmalloc()Tetsuo Handa1-5/+0
2013-05-12apparmor: no need to delay vfree()Al Viro1-21/+3
2013-04-28apparmor: fix fully qualified name parsingJohn Johansen1-2/+4
2013-04-28apparmor: fix setprocattr arg processing for onexecJohn Johansen1-16/+21
2013-04-28apparmor: localize getting the security context to a few macrosJohn Johansen4-21/+24
2013-04-28apparmor: fix sparse warningsJohn Johansen2-11/+11
2013-04-28apparmor: Fix smatch warning in aa_remove_profilesJohn Johansen1-8/+6
2013-04-28apparmor: fix the audit type tableJohn Johansen1-1/+1
2013-04-28apparmor: reserve and mask off the top 8 bits of the base fieldJohn Johansen1-7/+9
2013-04-28apparmor: move the free_profile fn ahead of aa_alloc_profileJohn Johansen1-75/+75
2013-04-28apparmor: remove sid from profilesJohn Johansen4-21/+11
2013-04-28apparmor: move perm defines into policy_unpackJohn Johansen2-2/+3
2013-04-28apparmor: misc cleanup of matchJohn Johansen2-8/+14
2013-04-28apparmor: relax the restrictions on setting rlimitsJohn Johansen1-3/+12
2013-04-28apparmor: remove "permipc" commandJohn Johansen3-9/+0
2013-04-28apparmor: use common fn to clear task_context for domain transitionsJohn Johansen3-16/+20
2013-04-28apparmor: add kvzalloc to handle zeroing for kvmallocJohn Johansen3-8/+22
2013-04-28apparmor: add utility function to get an arbitrary tasks profile.John Johansen4-32/+49
2013-04-28apparmor: fix error code to failure message mapping for name lookupJohn Johansen1-1/+1
2013-04-28apparmor: refactor profile mode macrosJohn Johansen1-6/+6
2013-04-28apparmor: Remove -W1 warningsJohn Johansen2-6/+0
2013-04-28apparmor: fix auditing of domain transition failures due to incomplete policyJohn Johansen1-0/+2
2013-02-22new helper: file_inode(file)Al Viro3-7/+7
2012-10-25apparmor: fix IRQ stack overflow during free_profileJohn Johansen1-1/+23
2012-10-17apparmor: fix apparmor OOPS in audit_log_untrustedstring+0x1c/0x40John Johansen1-1/+1
2012-10-04UAPI: (Scripted) Disintegrate include/asm-genericDavid Howells1-1/+1
2012-10-02Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds5-11/+13
2012-09-21userns: Teach security_path_chown to take kuids and kgidsEric W. Biederman1-1/+1
2012-09-21userns: Convert apparmor to use kuid and kgid where appropriateEric W. Biederman4-10/+12
2012-09-01AppArmor: remove af_names.h from .gitignorePaul Bolle1-1/+0
2012-05-31split ->file_mmap() into ->mmap_addr()/->mmap_file()Al Viro1-11/+4
2012-05-31split cap_mmap_addr() out of cap_file_mmap()Al Viro1-1/+1
2012-05-22Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris10-13/+21
2012-05-18apparmor: fix long path failure due to disconnected pathJohn Johansen1-0/+2
2012-05-18apparmor: fix profile lookup for unconfinedJohn Johansen1-0/+4
2012-04-14Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVSJohn Johansen1-4/+35
2012-04-14Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsAndy Lutomirski1-0/+4
2012-04-09LSM: do not initialize common_audit_data to 0Eric Paris8-8/+8
2012-04-09apparmor: move task from common_audit_data to apparmor_audit_dataEric Paris3-3/+11
2012-04-09LSM: remove the COMMON_AUDIT_DATA_INIT type expansionEric Paris8-8/+8
2012-04-09SELinux: rename dentry_open to file_openEric Paris1-2/+2
2012-04-03lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit...Linus Torvalds1-3/+1
2012-04-03LSM: shrink sizeof LSM specific portion of common_audit_dataEric Paris10-74/+116
2012-03-28apparmor: Fix change_onexec when called from a confined taskJohn Johansen2-1/+4
2012-03-19AppArmor: Fix location of const qualifier on generated string tablesTetsuo Handa1-2/+2
2012-03-14AppArmor: add const qualifiers to string arraysJan Engelhardt4-7/+7
2012-03-14AppArmor: Add ability to load extended policyJohn Johansen4-1/+50
2012-03-14AppArmor: Move path failure information into aa_get_name and renameJohn Johansen4-19/+29
2012-03-14AppArmor: Update dfa matching routines.John Johansen3-4/+81
2012-03-14AppArmor: Minor cleanup of d_namespace_path to consolidate error handlingJohn Johansen1-10/+6
2012-03-14AppArmor: Retrieve the dentry_path for error reporting when path lookup failsJohn Johansen1-6/+9
2012-03-14AppArmor: Add const qualifiers to generated string tablesJohn Johansen1-2/+3
2012-03-14AppArmor: Fix oops in policy unpack auditingJohn Johansen1-2/+3
2012-03-14AppArmor: Fix error returned when a path lookup is disconnectedJohn Johansen1-1/+1
2012-02-27AppArmor: Fix the error case for chroot relative path name lookupJohn Johansen1-3/+2
2012-02-27AppArmor: fix mapping of META_READ to audit and quiet flagsJohn Johansen1-2/+1
2012-02-27AppArmor: Fix underflow in xindex calculationJohn Johansen1-1/+1
2012-02-27AppArmor: Fix dropping of allowed operations that are force auditedJohn Johansen2-3/+3
2012-02-27AppArmor: Add mising end of structure test to caps unpackingJohn Johansen1-0/+2
2012-02-27AppArmor: export known rlimit names/value mappings in securityfsKees Cook4-6/+29
2012-02-27AppArmor: add "file" details to securityfsKees Cook2-0/+16
2012-02-27AppArmor: add initial "features" directory to securityfsKees Cook2-0/+65
2012-02-27AppArmor: refactor securityfs to use structuresKees Cook2-42/+114
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-4/+4
2012-01-13module_param: make bool parameters really bool (drivers & misc)Rusty Russell2-11/+11
2012-01-10Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds2-4/+4
2012-01-09Merge branch 'next' into for-linusJames Morris2-4/+4
2012-01-06switch security_path_chmod() to struct path *Al Viro1-4/+3
2012-01-05capabilities: remove the task from capable LSM hook entirelyEric Paris1-4/+4
2012-01-03switch ->path_mknod() to umode_tAl Viro1-1/+1
2012-01-03switch ->path_mkdir() to umode_tAl Viro1-1/+1
2012-01-03switch securityfs_create_file() to umode_tAl Viro1-1/+1
2012-01-03switch security_path_chmod() to umode_tAl Viro1-1/+1
2012-01-03btrfs, nfs, apparmor: don't pull mnt_namespace.h for no reason...Al Viro1-1/+0
2011-12-16apparmor: fix module parameter handlingRusty Russell1-3/+3
2011-12-09apparmor: add missing rcu_dereference()Kees Cook1-1/+1
2011-12-06fix apparmor dereferencing potentially freed dentry, sanitize __d_path() APIAl Viro1-27/+38
2011-09-09apparmor: sparse fix: include procattr.h in procattr.cJames Morris1-0/+1
2011-09-09apparmor: sparse fix: rename shadowed variables in policy_unpack.cJames Morris1-6/+6
2011-09-09apparmor: sparse fix: add apparmor.h to lib.cJames Morris1-0/+1
2011-09-09apparmor: sparse fix: include ipc.hJames Morris1-0/+1
2011-09-09apparmor: sparse fix: make aa_create_aafs staticJames Morris1-1/+1
2011-07-27Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2-2/+2
2011-07-22Merge branch 'ptrace' of git://git.kernel.org/pub/scm/linux/kernel/git/oleg/miscLinus Torvalds1-1/+1
2011-06-29AppArmor: Fix masking of capabilities in complain modeJohn Johansen1-1/+1
2011-06-29AppArmor: Fix reference to rcu protected pointer outside of rcu_read_lockJohn Johansen1-1/+1
2011-06-22ptrace: s/tracehook_tracer_task()/ptrace_parent()/Tejun Heo1-1/+1
2011-06-21net: remove mm.h inclusion from netdevice.hAlexey Dobriyan1-0/+1
2011-06-09AppArmor: Fix sleep in invalid context from task_setrlimitJohn Johansen1-1/+1
2011-06-01AppArmor: fix oops in apparmor_setprocattrKees Cook1-1/+2
2011-05-19Create Documentation/security/,Randy Dunlap2-3/+3
2011-03-31Fix common misspellingsLucas De Marchi2-2/+2
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn1-2/+3
2011-03-09Merge branch 'security-next' of git://git.kernel.org/pub/scm/linux/kernel/git...James Morris2-7/+33
2011-03-08AppArmor: kill unused macros in lsm.cShan Wei1-2/+0
2011-03-08AppArmor: cleanup generated files correctlyMichal Hocko1-1/+1
2011-03-05AppArmor: Cleanup make file to remove cruft and make it easier to readJohn Johansen1-5/+33
2011-01-13Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jiko...Linus Torvalds1-1/+1
2011-01-10headers: kobject.h reduxAlexey Dobriyan1-0/+1
2011-01-10headers: path.h reduxAlexey Dobriyan1-2/+1
2010-12-22Merge branch 'master' into for-nextJiri Kosina2-3/+5
2010-11-11APPARMOR: Fix memory leak of apparmor_init()wzt.wzt@gmail.com1-2/+4
2010-11-11APPARMOR: Fix memory leak of alloc_namespace()wzt.wzt@gmail.com1-1/+1
2010-11-01tree-wide: fix comment/printk typosUwe Kleine-König1-1/+1
2010-10-25fs: take dcache_lock inside __d_pathChristoph Hellwig1-2/+0
2010-10-22Merge branch 'llseek' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/bklLinus Torvalds1-3/+6
2010-10-21AppArmor: Ensure the size of the copy is < the buffer allocated to hold itJohn Johansen1-1/+3
2010-10-21.gitignore: ignore apparmor/rlim_names.hYong Zhang1-0/+1
2010-10-15llseek: automatically add .llseek fopArnd Bergmann1-3/+6
2010-09-08AppArmor: Fix locking from removal of profile namespaceJohn Johansen1-2/+4
2010-09-08AppArmor: Fix splitting an fqname into separate namespace and profile namesJohn Johansen1-1/+1
2010-09-08AppArmor: Fix security_task_setrlimit logic for 2.6.36 changesJohn Johansen3-11/+15
2010-09-08AppArmor: Drop hack to remove appended " (deleted)" stringJohn Johansen1-27/+11
2010-08-18Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-7/+2
2010-08-18apparmor: use task path helpersNick Piggin1-7/+2
2010-08-17AppArmor: fix task_setrlimit prototypeJiri Slaby1-2/+2
2010-08-11AppArmor: update for module_param_named API changeStephen Rothwell1-12/+24
2010-08-05apparmor: depends on NETRandy Dunlap1-1/+1
2010-08-02AppArmor: fix build warnings for non-const use of get_task_credJames Morris2-2/+2
2010-08-02AppArmor: Enable configuring and building of the AppArmor security moduleJohn Johansen3-0/+60
2010-08-02AppArmor: update path_truncate method to latest versionJames Morris1-2/+1
2010-08-02AppArmor: core policy routinesJohn Johansen4-0/+1568
2010-08-02AppArmor: policy routines for loading and unpacking policyJohn Johansen2-0/+723
2010-08-02AppArmor: mediation of non file objectsJohn Johansen6-0/+508
2010-08-02AppArmor: LSM interface, and security module initializationJohn Johansen1-0/+939
2010-08-02AppArmor: functions for domain transitionsJohn Johansen2-0/+859
2010-08-02AppArmor: file enforcement routinesJohn Johansen2-0/+674
2010-08-02AppArmor: userspace interfacesJohn Johansen4-0/+455
2010-08-02AppArmor: dfa match engineJohn Johansen2-0/+485
2010-08-02AppArmor: contexts used in attaching policy to system objectsJohn Johansen2-0/+370
2010-08-02AppArmor: basic auditing infrastructure.John Johansen2-0/+338
2010-08-02AppArmor: misc. base functions and definesJohn Johansen4-0/+491