summaryrefslogtreecommitdiffstats
path: root/security/apparmor
AgeCommit message (Expand)Author
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen
2017-01-16apparmor: allow specifying the profile doing the managementJohn Johansen
2017-01-16apparmor: allow introspecting the policy namespace nameJohn Johansen
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen
2017-01-16apparmor: track ns level so it can be used to help in view checksJohn Johansen
2017-01-16apparmor: add special .null file used to "close" fds at execJohn Johansen
2017-01-16apparmor: provide userspace flag indicating binfmt_elf_mmap changeJohn Johansen
2017-01-16apparmor: add a default null dfaJohn Johansen
2017-01-16apparmor: allow policydb to be used as the file dfaJohn Johansen
2017-01-16apparmor: add get_dfa() fnJohn Johansen
2017-01-16apparmor: prepare to support newer versions of policyJohn Johansen
2017-01-16apparmor: add support for force complain flag to support learning modeJohn Johansen
2017-01-16apparmor: remove paranoid load switchJohn Johansen
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen
2017-01-16apparmor: update policy_destroy to use new debug assertsJohn Johansen
2017-01-16apparmor: pass gfp param into aa_policy_init()John Johansen
2017-01-16apparmor: constify policy name and hnameJohn Johansen
2017-01-16apparmor: rename hname_tail to basenameJohn Johansen
2017-01-16apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen
2017-01-16apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen
2017-01-16apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen
2017-01-16apparmor: allow ns visibility question to consider subnsesJohn Johansen
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen
2017-01-16apparmor: add lib fn to find the "split" for fqnamesJohn Johansen
2017-01-16apparmor: add strn version of aa_find_nsJohn Johansen
2017-01-16apparmor: add strn version of lookup_profile fnJohn Johansen
2017-01-16apparmor: rename replacedby to proxyJohn Johansen
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen
2017-01-16apparmor: rename sid to secidJohn Johansen
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen
2017-01-16apparmor: split out shared policy_XXX fns to libJohn Johansen
2017-01-16apparmor: move lib definitions into separate lib includeJohn Johansen
2017-01-15apparmor: use designated initializersKees Cook
2017-01-15AppArmor: Use GFP_KERNEL for __aa_kvmalloc().Tetsuo Handa
2016-11-21apparmor: fix change_hat not finding hat after policy replacementJohn Johansen
2016-09-27fs: Replace CURRENT_TIME with current_time() for inode timestampsDeepa Dinamani
2016-07-27apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann
2016-07-12apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen
2016-07-12apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum
2016-07-12apparmor: do not expose kernel stackHeinrich Schuchardt
2016-07-12apparmor: fix module parameters can be changed after policy is lockedJohn Johansen
2016-07-12apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen
2016-07-12apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen
2016-07-12apparmor: add missing id bounds check on dfa verificationJohn Johansen
2016-07-12apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney
2016-07-12apparmor: use list_next_entry instead of list_entry_nextGeliang Tang
2016-07-12apparmor: fix refcount race when finding a child profileJohn Johansen