aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2024-03-14lsm: use 32-bit compatible data types in LSM syscallsCasey Schaufler1-2/+2
2024-02-27Merge tag 'lsm-pr-20240227' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+1
2024-02-23apparmor: fix lsm_get_self_attr()Mickaël Salaün1-1/+1
2024-01-24exec: Check __FMODE_EXEC instead of in_execve for LSMsKees Cook1-1/+3
2024-01-19Merge tag 'apparmor-pr-2024-01-18' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds9-74/+54
2024-01-11Merge tag 'pull-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-6/+1
2024-01-09Merge tag 'lsm-pr-20240105' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-12/+90
2024-01-09apparmor: Fix memory leak in unpack_profile()Gaosheng Cui1-0/+2
2024-01-04apparmor: avoid crash when parsed profile name is emptyFedor Pchelkin1-0/+4
2024-01-04apparmor: fix possible memory leak in unpack_trans_tableFedor Pchelkin2-4/+4
2024-01-03apparmor: Fix move_mount mediation by detecting if source is detachedJohn Johansen2-0/+5
2024-01-03apparmor: free the allocated pdb objectsFedor Pchelkin1-6/+7
2023-12-29apparmor: Fix ref count leak in task_killJohn Johansen1-1/+0
2023-12-21apparmorfs: don't duplicate kfree_link()Al Viro1-6/+1
2023-11-26apparmor: cleanup network hook commentsJohn Johansen1-44/+16
2023-11-19apparmor: add missing params to aa_may_ptrace kernel-doc commentsJohn Johansen1-0/+2
2023-11-19apparmor: declare nulldfa as staticJohn Johansen1-1/+1
2023-11-19apparmor: declare stack_msg as staticJohn Johansen1-1/+1
2023-11-19apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256Dimitri John Ledkov3-17/+17
2023-11-12lsm: mark the lsm_id variables are marked as staticPaul Moore1-1/+1
2023-11-12lsm: consolidate buffer size handling into lsm_fill_user_ctx()Paul Moore1-12/+3
2023-11-12AppArmor: Add selfattr hooksCasey Schaufler3-11/+92
2023-11-12LSM: Identify modules by more than nameCasey Schaufler1-1/+7
2023-11-03Merge tag 'apparmor-pr-2023-11-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds32-848/+1336
2023-10-30Merge tag 'lsm-pr-20231030' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-2/+2
2023-10-23apparmor: Fix some kernel-doc commentsYang Li1-2/+2
2023-10-23apparmor: Fix one kernel-doc commentYang Li1-1/+1
2023-10-23apparmor: Fix some kernel-doc commentsYang Li1-2/+2
2023-10-22apparmor: mark new functions staticArnd Bergmann1-2/+2
2023-10-18apparmor: Fix regression in mount mediationJohn Johansen3-22/+51
2023-10-18apparmor: cache buffers on percpu list if there is lock contentionJohn Johansen1-5/+62
2023-10-18apparmor: add io_uring mediationGeorgia Garcia6-2/+131
2023-10-18apparmor: add user namespace creation mediationJohn Johansen7-2/+75
2023-10-18apparmor: allow restricting unprivileged change_profileJohn Johansen5-0/+39
2023-10-18apparmor: advertise disconnected.path is availableJohn Johansen1-0/+1
2023-10-18apparmor: refcount the pdbJohn Johansen15-210/+260
2023-10-18apparmor: provide separate audit messages for file and policy checksJohn Johansen1-5/+11
2023-10-18apparmor: pass cred through to audit info.John Johansen20-211/+388
2023-10-18apparmor: rename audit_data->label to audit_data->subj_labelJohn Johansen10-18/+17
2023-10-18apparmor: combine common_audit_data and apparmor_audit_dataJohn Johansen15-245/+257
2023-10-18apparmor: rename SK_CTX() to aa_sock and make it an inline fnJohn Johansen2-11/+16
2023-10-18apparmor: convert to new timestamp accessorsJeff Layton2-5/+6
2023-10-15apparmor: Optimize retrieving current task secidVinicius Costa Gomes1-2/+2
2023-10-15apparmor: remove unused functions in policy_ns.c/.hXiu Jianfeng2-51/+0
2023-10-15apparmor: remove unneeded #ifdef in decompress_zstd()Xiu Jianfeng1-2/+0
2023-09-14lsm: constify 'bprm' parameter in security_bprm_committed_creds()Khadija Kamran1-1/+1
2023-09-13lsm: constify 'bprm' parameter in security_bprm_committing_creds()Khadija Kamran1-1/+1
2023-08-30Merge tag 'lsm-pr-20230829' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+1
2023-08-22apparmor: fix invalid reference on profile->disconnectedGeorgia Garcia2-2/+4
2023-08-08lsm: constify the 'target' parameter in security_capget()Khadija Kamran1-1/+1
2023-08-08apparmor: remove unused PROF_* macrosGONG, Ruiqi1-3/+0
2023-08-08apparmor: cleanup unused functions in file.hXiu Jianfeng1-37/+0
2023-08-08apparmor: cleanup unused declarations in policy.hXiu Jianfeng1-6/+0
2023-08-08apparmor: fixup return comments for kernel doc cleanups by Gaosheng CuiJohn Johansen2-4/+4
2023-07-24apparmor: convert to ctime accessor functionsJeff Layton2-5/+5
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/policy.cGaosheng Cui1-7/+10
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/policy_compat.cGaosheng Cui1-0/+1
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/policy_unpack.cGaosheng Cui1-1/+1
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/resource.cGaosheng Cui1-4/+4
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/match.cGaosheng Cui1-2/+2
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/lib.cGaosheng Cui1-2/+2
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/label.cGaosheng Cui1-9/+11
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/file.cGaosheng Cui1-3/+3
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/domain.cGaosheng Cui1-4/+6
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/capability.cGaosheng Cui1-2/+2
2023-07-10apparmor: Fix kernel-doc warnings in apparmor/audit.cGaosheng Cui1-0/+1
2023-07-10apparmor: update ctime whenever the mtime changes on an inodeJeff Layton2-6/+12
2023-07-09apparmor: use passed in gfp flags in aa_alloc_null()Dan Carpenter1-2/+2
2023-07-09apparmor: advertise availability of exended permsJohn Johansen1-0/+3
2023-07-09apparmor: remove unused macroGONG, Ruiqi1-1/+0
2023-07-09apparmor: make aa_set_current_onexec return voidQuanfa Fu3-6/+3
2023-07-07Merge tag 'apparmor-pr-2023-07-06' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds8-68/+110
2023-07-06apparmor: Fix kernel-doc header for verify_dfa_accept_indexJohn Johansen1-1/+1
2023-07-06apparmor: fix: kzalloc perms tables for shared dfasJohn Johansen2-4/+35
2023-07-06apparmor: fix profile verification and enable itJohn Johansen2-25/+27
2023-07-06apparmor: fix policy_compat permission remap with extended permissionsJohn Johansen1-12/+19
2023-07-06apparmor: aa_buffer: Convert 1-element array to flexible arrayKees Cook1-4/+4
2023-07-06apparmor: add missing failure check in compute_xmatch_permsJohn Johansen1-0/+2
2023-07-06apparmor: fix missing error check for rhashtable_insert_fastDanila Chernetsov1-2/+7
2023-07-06apparmor: Return directly after a failed kzalloc() in two functionsMarkus Elfring1-5/+5
2023-07-06AppArmor: Fix some kernel-doc commentsYang Li1-1/+1
2023-07-06apparmor: fix use of strcpy in policy_unpack_testRae Moar1-7/+6
2023-06-26apparmor: Free up __cleanup() namePeter Zijlstra1-3/+3
2023-04-27Merge tag 'sysctl-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m...Linus Torvalds1-7/+1
2023-04-13apparmor: simplify sysctls with register_sysctl_init()Luis Chamberlain1-7/+1
2023-03-20selinux: remove the runtime disable functionalityPaul Moore1-3/+3
2023-03-01capability: just use a 'u64' instead of a 'u32[2]' arrayLinus Torvalds1-10/+30
2023-02-23Merge tag 'mm-stable-2023-02-20-13-37' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds1-10/+1
2023-02-20Merge tag 'fs.idmapped.v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds4-13/+11
2023-02-15apparmor: Fix regression in compat permissions for getattrJohn Johansen1-2/+1
2023-01-19fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner3-11/+9
2023-01-19fs: port ->permission() to pass mnt_idmapChristian Brauner1-1/+1
2023-01-19fs: port ->mkdir() to pass mnt_idmapChristian Brauner1-1/+1
2023-01-18mm: new primitive kvmemdup()Hao Sun1-10/+1
2023-01-10apparmor: fix kernel-doc complaintsRandy Dunlap3-8/+4
2022-12-14Merge tag 'apparmor-pr-2022-12-14' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds35-914/+1632
2022-12-13Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-18/+14
2022-12-13Merge tag 'landlock-6.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-0/+6
2022-12-12Merge tag 'fs.vfsuid.conversion.v6.2' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds3-13/+24
2022-12-12apparmor: test: make static symbols visible during kunit testingRae Moar5-168/+196
2022-11-18lsm,fs: fix vfs_getxattr_alloc() return type and caller error pathsPaul Moore1-2/+1
2022-11-04lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore1-16/+13
2022-11-01apparmor: Fix uninitialized symbol 'array_size' in policy_unpack_test.cJohn Johansen1-2/+2
2022-11-01apparmor: Add __init annotation to aa_{setup/teardown}_dfa_engine()Xiu Jianfeng1-2/+2
2022-11-01apparmor: Fix memleak in alloc_ns()Xiu Jianfeng1-1/+1
2022-10-26apparmor: use type safe idmapping helpersChristian Brauner3-13/+24
2022-10-25apparmor: Fix memleak issue in unpack_profile()Xiu Jianfeng1-3/+12
2022-10-25apparmor: fix a memleak in free_ruleset()Gaosheng Cui1-0/+1
2022-10-25apparmor: Fix spelling of function name in comment blockYang Li1-1/+1
2022-10-25apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng1-2/+2
2022-10-25AppArmor: Fix kernel-docJiapeng Chong1-1/+1
2022-10-25LSM: Fix kernel-docJiapeng Chong1-1/+1
2022-10-25AppArmor: Fix kernel-docJiapeng Chong1-1/+1
2022-10-25apparmor: Fix loading of child before parentJohn Johansen1-9/+78
2022-10-24apparmor: refactor code that alloc null profilesJohn Johansen4-28/+43
2022-10-24apparmor: fix obsoleted comments for aa_getprocattr() and audit_resource()Gaosheng Cui2-6/+7
2022-10-24apparmor: remove useless static inline functionsGaosheng Cui2-19/+0
2022-10-19security: Create file_truncate hook from path_truncate hookGünther Noack1-0/+6
2022-10-10apparmor: Fix unpack_profile() warn: passing zero to 'ERR_PTR'John Johansen1-5/+16
2022-10-10apparmor: fix uninitialize table variable in error in unpack_trans_tableJohn Johansen1-1/+1
2022-10-04apparmor: store return value of unpack_perms_table() to signed variableMuhammad Usama Anjum1-4/+8
2022-10-03apparmor: Fix kunit test for out of bounds arrayJohn Johansen1-2/+1
2022-10-03apparmor: Fix decompression of rawdata for read back to userspaceJohn Johansen2-4/+5
2022-10-03apparmor: Fix undefined references to zstd_ symbolsJohn Johansen3-5/+15
2022-10-03apparmor: make sure the decompression ctx is promperly initializedJohn Johansen1-1/+5
2022-10-03apparmor: Remove unnecessary size check when unpacking trans_tableJohn Johansen1-3/+7
2022-10-03apparmor: Fix doc comment for compute_fpermsJohn Johansen1-2/+2
2022-10-03apparmor: make __aa_path_perm() staticXiu Jianfeng2-6/+4
2022-10-03apparmor: Simplify obtain the newest label on a credGaosheng Cui2-14/+1
2022-10-03apparmor: Fix regression in stacking due to label flagsJohn Johansen1-5/+7
2022-10-03apparmor: fix aa_class_names[] to match reserved classesJohn Johansen1-1/+16
2022-10-03apparmor: rework profile->rules to be a listJohn Johansen15-57/+142
2022-10-03apparmor: refactor profile rules and attachmentsJohn Johansen18-239/+308
2022-10-03apparmor: verify loaded permission bits masks don't overlapJohn Johansen1-4/+30
2022-10-03apparmor: cleanup: move perm accumulation into perms.hJohn Johansen2-52/+53
2022-10-03apparmor: make sure perm indexes are accumulatedJohn Johansen3-2/+25
2022-10-03apparmor: verify permission table indexesJohn Johansen1-1/+34
2022-10-03apparmor: add the ability for policy to specify a permission tableJohn Johansen2-11/+98
2022-10-03apparmor: make unpack_array return a trianary valueJohn Johansen2-22/+33
2022-10-03apparmor: group dfa policydb unpackingJohn Johansen1-38/+63
2022-10-03apparmor: make transition table unpack generic so it can be reusedJohn Johansen1-10/+12
2022-10-03apparmor: add user mode flagJohn Johansen5-5/+9
2022-10-03apparmor: add mediation class information to auditingJohn Johansen14-13/+48
2022-10-03apparmor: extend permissions to support a label and tag stringJohn Johansen7-27/+32
2022-10-03apparmor: isolate policy backwards compatibility to its own fileJohn Johansen5-287/+359
2022-10-03apparmor: extend xindex sizeJohn Johansen3-17/+16
2022-10-03apparmor: move dfa perm macros into policy_unpackJohn Johansen2-51/+49
2022-10-03apparmor: extend policydb permission set by making use of the xbitsJohn Johansen1-4/+27
2022-10-03apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen1-4/+9
2022-10-03apparmor: Fix abi check to include v8 abiJohn Johansen1-1/+1
2022-10-03apparmor: preparse for state being more than just an integerJohn Johansen15-102/+101
2022-10-03apparmor: convert policy lookup to use accept as an indexJohn Johansen7-24/+33
2022-10-03apparmor: cleanup shared permission structJohn Johansen2-12/+9
2022-10-03apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2-4/+7
2022-10-03apparmor: convert fperm lookup to use accept as an indexJohn Johansen2-19/+44
2022-10-03apparmor: convert xmatch to using the new shared policydb structJohn Johansen6-29/+28
2022-10-03apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen7-59/+40
2022-10-03apparmor: compute policydb permission on profile loadJohn Johansen9-86/+90
2022-10-03apparmor: convert xmatch to use aa_perms structureJohn Johansen3-7/+13
2022-10-03apparmor: rework and cleanup fperm computationJohn Johansen1-32/+38
2022-10-03apparmor: move fperm computation into policy_unpackJohn Johansen3-98/+98
2022-10-03apparmor: compute xmatch permissions on profile loadMike Salvatore4-3/+26
2022-10-03apparmor: compute file permissions on profile loadMike Salvatore5-48/+110
2022-10-03apparmor: expose compression level limits in sysfsJon Tourville1-0/+16
2022-10-03apparmor: use zstd compression for profile dataJon Tourville4-102/+81
2022-10-03apparmor: reserve mediation classesJohn Johansen1-1/+8
2022-10-03apparmor: fix lockdep warning when removing a namespaceJohn Johansen1-1/+1
2022-10-03apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui1-1/+3
2022-09-01->getprocattr(): attribute name is const char *, TYVM...Al Viro1-1/+1
2022-07-20apparmor: correct config reference to intended oneLukas Bulwahn1-1/+1
2022-07-19apparmor: move ptrace mediation to more logical task.{h,c}John Johansen5-128/+133
2022-07-19apparmor: extend policydb permission set by making use of the xbitsJohn Johansen4-5/+25
2022-07-19apparmor: allow label to carry debug flagsJohn Johansen6-8/+20
2022-07-19apparmor: fix overlapping attachment computationJohn Johansen2-2/+2
2022-07-19apparmor: fix setting unconfined mode on a loaded profileJohn Johansen1-5/+7
2022-07-19apparmor: Fix some kernel-doc commentsYang Li1-6/+6
2022-07-19apparmor: Mark alloc_unconfined() as staticSouptick Joarder (HPE)1-1/+1
2022-07-13apparmor: disable showing the mode as part of a secid to secctxJohn Johansen3-6/+20
2022-07-13apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox3-32/+13
2022-07-13apparmor: add a kernel label to use on kernel objectsJohn Johansen4-13/+37
2022-07-09apparmor: test: Remove some casts which are no-longer requiredDavid Gow1-6/+6
2022-07-09apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng1-1/+1
2022-07-09apparmor: fix reference count leak in aa_pivotroot()Xin Xiong1-0/+1
2022-07-09apparmor: Fix some kernel-doc commentsYang Li1-2/+1
2022-07-09apparmor: Fix undefined reference to `zlib_deflate_workspacesize'John Johansen2-31/+40
2022-07-09apparmor: fix aa_label_asxprint return checkTom Rix1-3/+3
2022-07-09apparmor: Fix some kernel-doc commentsYang Li1-4/+4
2022-07-09apparmor: Fix some kernel-doc commentsYang Li1-2/+3
2022-07-09apparmor: Fix match_mnt_path_str() and match_mnt() kernel-doc commentYang Li1-2/+2
2022-07-09apparmor: Use struct_size() helper in kmalloc()Gustavo A. R. Silva1-1/+1
2022-07-09apparmor: Fix failed mount permission check error messageJohn Johansen1-3/+4
2022-07-09security/apparmor: remove redundant ret variableMinghao Chi1-4/+1
2022-07-09apparmor: fix quiet_denied for file rulesJohn Johansen1-1/+1
2022-07-09apparmor: resolve uninitialized symbol warnings in policy_unpack_test.cMike Salvatore1-8/+8
2022-07-09apparmor: don't create raw_sha1 symlink if sha1 hashing is disabledJohn Johansen1-8/+9
2022-07-09apparmor: Enable tuning of policy paranoid load for embedded systemsJohn Johansen3-2/+15
2022-07-09apparmor: make export of raw binary profile to userspace optionalJohn Johansen7-52/+111
2022-07-09apparmor: Update help description of policy hash for introspectionJohn Johansen1-1/+4
2022-07-09lsm: Fix kernel-docYang Li1-5/+5
2022-07-09apparmor: Fix kernel-docYang Li3-4/+4
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-09 06:59:39 +0000