summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
...
* | apparmor: move path_link mediation to using labelsJohn Johansen2017-06-103-47/+59
* | apparmor: refactor path name lookup and permission checks around labelsJohn Johansen2017-06-103-45/+85
* | apparmor: update aa_audit_file() to use labelsJohn Johansen2017-06-103-9/+18
* | apparmor: move aa_file_perm() to use labelsJohn Johansen2017-06-103-37/+64
* | apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen2017-06-103-0/+68
* | apparmor: move ptrace checks to using labelsJohn Johansen2017-06-105-80/+58
* | apparmor: add cross check permission helper macrosJohn Johansen2017-06-101-1/+41
* | apparmor: move resource checks to using labelsJohn Johansen2017-06-103-42/+80
* | apparmor: move capability checks to using labelsJohn Johansen2017-06-105-29/+58
* | apparmor: update query interface to support label queriesJohn Johansen2017-06-101-7/+39
* | apparmor: switch getprocattr to using label_print fns()John Johansen2017-06-103-37/+27
* | apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-1020-529/+686
* | apparmor: add the base fns() for domain labelsJohn Johansen2017-06-102-0/+2561
* | apparmor: revalidate files during execJohn Johansen2017-06-104-0/+81
* | apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen2017-06-102-11/+16
* | apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen2017-06-105-32/+29
* | apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen2017-06-101-37/+2
* | apparmor: refactor updating profiles to the newest parentJohn Johansen2017-06-101-4/+31
* | apparmor: share profile name on replacementJohn Johansen2017-06-103-9/+72
* | apparmor: convert to profile block critical sectionsJohn Johansen2017-06-108-56/+162
* | apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen2017-06-103-32/+30
* | apparmor: fix display of ns nameJohn Johansen2017-06-101-1/+1
* | apparmor: fix apparmor_query dataJohn Johansen2017-06-101-2/+6
* | apparmor: fix policy load/remove semanticsJohn Johansen2017-06-102-15/+13
* | apparmor: add namespace lookup fns()John Johansen2017-06-103-4/+73
* | apparmor: cleanup __find_child()John Johansen2017-06-101-8/+8
* | apparmor: provide information about path buffer size at bootJohn Johansen2017-06-101-2/+9
* | apparmor: add profile permission query abilityJohn Johansen2017-06-101-1/+102
* | apparmor: switch from file_perms to aa_permsJohn Johansen2017-06-105-48/+29
* | apparmor: add gerneric permissions struct and support fnsJohn Johansen2017-06-104-17/+153
* | apparmor: add fn to test if profile supports a given mediation classJohn Johansen2017-06-101-0/+10
* | apparmor: speed up transactional queriesJohn Johansen2017-06-101-11/+114
* | apparmor: add label data availability to the feature setJohn Johansen2017-06-101-0/+10
* | apparmor: add mkdir/rmdir interface to manage policy namespacesJohn Johansen2017-06-101-1/+94
* | apparmor: add policy revision file interfaceJohn Johansen2017-06-104-1/+116
* | apparmor: provide finer control over policy managementJohn Johansen2017-06-103-23/+35
* | apparmor: rework perm mapping to a slightly broader setJohn Johansen2017-06-095-53/+133
* | apparmor: move permissions into their own file to be more easily sharedJohn Johansen2017-06-084-19/+43
* | apparmor: convert from securityfs to apparmorfs for policy ns filesJohn Johansen2017-06-081-26/+37
* | apparmor: allow specifying an already created dir to create ns entries inJohn Johansen2017-06-083-7/+8
* | apparmor: rename apparmor file fns and data to indicate useJohn Johansen2017-06-089-127/+172
* | apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen2017-06-081-17/+336
* | apparmor: use macro template to simplify namespace seq_filesJohn Johansen2017-06-081-29/+24
* | apparmor: use macro template to simplify profile seq_filesJohn Johansen2017-06-081-61/+36
* | apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen2017-06-087-69/+409
* | securityfs: add the ability to support symlinksJohn Johansen2017-06-081-21/+123
* | apparmor: Move path lookup to using preallocated buffersJohn Johansen2017-06-084-86/+53
* | apparmor: allow profiles to provide info to disconnected pathsJohn Johansen2017-06-086-17/+34
* | apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen2017-06-082-1/+2
* | apparmor: move file context into file.hJohn Johansen2017-06-082-32/+32
OpenPOWER on IntegriCloud