summaryrefslogtreecommitdiffstats
path: root/security/apparmor/domain.c
Commit message (Expand)AuthorAgeFilesLines
* apparmor: Fix regression in profile conflict logicMatthew Garrett2018-01-121-4/+5
* apparmor: fix locking when creating a new complain profile.John Johansen2017-11-211-3/+15
* apparmor: fix profile attachment for special unconfined profilesJohn Johansen2017-11-211-1/+3
* apparmor: ensure that undecidable profile attachments failJohn Johansen2017-11-211-14/+32
* Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2017-09-231-2/+2
|\
| * apparmor: add mount mediationJohn Johansen2017-09-221-2/+2
* | apparmor: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-18/+1
* | exec: Rename bprm->cred_prepared to called_set_credsKees Cook2017-08-011-1/+1
|/
* apparmor: move change_profile mediation to using labelsJohn Johansen2017-06-101-68/+123
* apparmor: move change_hat mediation to using labelsJohn Johansen2017-06-101-102/+201
* apparmor: move exec domain mediation to using labelsJohn Johansen2017-06-101-258/+592
* apparmor: update aa_audit_file() to use labelsJohn Johansen2017-06-101-2/+4
* apparmor: move ptrace checks to using labelsJohn Johansen2017-06-101-7/+10
* apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-101-35/+42
* apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen2017-06-101-13/+13
* apparmor: convert to profile block critical sectionsJohn Johansen2017-06-101-2/+3
* apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen2017-06-101-30/+0
* apparmor: switch from file_perms to aa_permsJohn Johansen2017-06-101-9/+9
* apparmor: Move path lookup to using preallocated buffersJohn Johansen2017-06-081-3/+5
* apparmor: allow profiles to provide info to disconnected pathsJohn Johansen2017-06-081-1/+1
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2017-02-231-1/+1
|\
| * exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman2017-01-241-1/+1
* | apparmor: convert change_profile to use fqname later to give better controlJohn Johansen2017-01-161-42/+19
* | apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen2017-01-161-7/+6
* | apparmor: change op from int to const char *John Johansen2017-01-161-2/+2
* | apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen2017-01-161-21/+21
* | apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-161-3/+5
* | apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-161-12/+12
* | apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-161-0/+1
|/
* apparmor: fix change_hat not finding hat after policy replacementJohn Johansen2016-11-211-2/+4
* apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
* apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2016-07-121-1/+1
* LSM: Switch to lists of hooksCasey Schaufler2015-05-121-8/+4
* sched: move no_new_privs into new atomic flagsKees Cook2014-07-181-2/+2
* apparmor: remove the "task" arg from may_change_ptraced_domain()Oleg Nesterov2013-10-291-8/+6
* apparmor: fix capability to not use the current task, during reportingJohn Johansen2013-10-291-1/+1
* apparmor: allow setting any profile into the unconfined stateJohn Johansen2013-08-141-2/+2
* apparmor: update how unconfined is handledJohn Johansen2013-08-141-1/+1
* apparmor: change how profile replacement update is doneJohn Johansen2013-08-141-2/+2
* apparmor: convert profile lists to RCU based lockingJohn Johansen2013-08-141-4/+10
* apparmor: localize getting the security context to a few macrosJohn Johansen2013-04-281-3/+3
* apparmor: use common fn to clear task_context for domain transitionsJohn Johansen2013-04-281-5/+1
* apparmor: add utility function to get an arbitrary tasks profile.John Johansen2013-04-281-7/+3
* apparmor: Remove -W1 warningsJohn Johansen2013-04-281-2/+0
* apparmor: fix auditing of domain transition failures due to incomplete policyJohn Johansen2013-04-281-0/+2
* new helper: file_inode(file)Al Viro2013-02-221-2/+2
* userns: Convert apparmor to use kuid and kgid where appropriateEric W. Biederman2012-09-211-2/+2
* Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVSJohn Johansen2012-04-141-4/+35
* Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsAndy Lutomirski2012-04-141-0/+4
* apparmor: Fix change_onexec when called from a confined taskJohn Johansen2012-03-281-1/+2
OpenPOWER on IntegriCloud