summaryrefslogtreecommitdiffstats
path: root/security/apparmor/policy.c
Commit message (Expand)AuthorAgeFilesLines
* apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen2018-02-091-5/+1
* apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett2018-02-091-0/+8
* apparmor: move context.h to cred.hJohn Johansen2018-02-091-1/+1
* apparmor: cleanup fixup description of aa_replace_profilesJohn Johansen2018-02-091-2/+3
* apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen2018-02-091-1/+1
* apparmor: fix possible recursive lock warning in __aa_create_nsJohn Johansen2017-11-211-4/+4
* apparmor: fix leak of null profile name if profile allocation failsJohn Johansen2017-11-211-1/+2
* apparmor: fix race condition in null profile creationJohn Johansen2017-09-221-3/+11
* apparmor: move new_null_profile to after profile lookup fns()John Johansen2017-09-221-79/+79
* apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-101-118/+90
* apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen2017-06-101-37/+2
* apparmor: refactor updating profiles to the newest parentJohn Johansen2017-06-101-4/+31
* apparmor: share profile name on replacementJohn Johansen2017-06-101-0/+9
* apparmor: fix policy load/remove semanticsJohn Johansen2017-06-101-11/+11
* apparmor: add namespace lookup fns()John Johansen2017-06-101-4/+6
* apparmor: cleanup __find_child()John Johansen2017-06-101-8/+8
* apparmor: provide finer control over policy managementJohn Johansen2017-06-101-13/+22
* apparmor: rename apparmor file fns and data to indicate useJohn Johansen2017-06-081-3/+3
* apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen2017-06-081-1/+45
* apparmor: fix invalid reference to index variable of iterator line 836John Johansen2017-04-071-2/+4
* sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar2017-03-021-0/+1
* sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Ingo Molnar2017-03-021-0/+1
* apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks2017-01-161-1/+0
* apparmor: support querying extended trusted helper extra dataWilliam Hua2017-01-161-0/+23
* apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen2017-01-161-23/+19
* apparmor: change op from int to const char *John Johansen2017-01-161-3/+4
* apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen2017-01-161-1/+1
* apparmor: pass the subject profile into profile replace/removeJohn Johansen2017-01-161-11/+14
* apparmor: audit policy ns specified in policy loadJohn Johansen2017-01-161-14/+40
* apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen2017-01-161-7/+7
* apparmor: add ns name to the audit data for policy loadsJohn Johansen2017-01-161-10/+24
* apparmor: add profile and ns params to aa_may_manage_policy()John Johansen2017-01-161-12/+10
* apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen2017-01-161-3/+9
* apparmor: add ns being viewed as a param to policy_view_capable()John Johansen2017-01-161-3/+22
* apparmor: allow specifying the profile doing the managementJohn Johansen2017-01-161-11/+21
* apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen2017-01-161-3/+4
* apparmor: add a default null dfaJohn Johansen2017-01-161-0/+2
* apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-161-13/+40
* apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-161-5/+6
* apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-161-2/+4
* apparmor: pass gfp param into aa_policy_init()John Johansen2017-01-161-1/+1
* apparmor: rename hname_tail to basenameJohn Johansen2017-01-161-1/+1
* apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-161-0/+29
* apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-161-11/+25
* apparmor: rename replacedby to proxyJohn Johansen2017-01-161-35/+35
* apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-161-1/+1
* apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-161-16/+16
* apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-161-284/+14
* apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-161-119/+4
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-121-1/+17
OpenPOWER on IntegriCloud