summaryrefslogtreecommitdiff
path: root/security/apparmor/domain.c
AgeCommit message (Expand)Author
2018-01-12apparmor: Fix regression in profile conflict logicMatthew Garrett
2017-11-21apparmor: fix locking when creating a new complain profile.John Johansen
2017-11-21apparmor: fix profile attachment for special unconfined profilesJohn Johansen
2017-11-21apparmor: ensure that undecidable profile attachments failJohn Johansen
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2017-09-22apparmor: add mount mediationJohn Johansen
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook
2017-06-10apparmor: move change_profile mediation to using labelsJohn Johansen
2017-06-10apparmor: move change_hat mediation to using labelsJohn Johansen
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen
2017-02-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen
2017-01-16apparmor: change op from int to const char *John Johansen
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen
2016-11-21apparmor: fix change_hat not finding hat after policy replacementJohn Johansen
2016-07-12apparmor: ensure the target profile name is always auditedJohn Johansen
2016-07-12apparmor: exec should not be returning ENOENT when it deniesJohn Johansen
2015-05-12LSM: Switch to lists of hooksCasey Schaufler
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook
2013-10-29apparmor: remove the "task" arg from may_change_ptraced_domain()Oleg Nesterov
2013-10-29apparmor: fix capability to not use the current task, during reportingJohn Johansen
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen
2013-08-14apparmor: update how unconfined is handledJohn Johansen
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen
2013-08-14apparmor: convert profile lists to RCU based lockingJohn Johansen
2013-04-28apparmor: localize getting the security context to a few macrosJohn Johansen
2013-04-28apparmor: use common fn to clear task_context for domain transitionsJohn Johansen
2013-04-28apparmor: add utility function to get an arbitrary tasks profile.John Johansen
2013-04-28apparmor: Remove -W1 warningsJohn Johansen
2013-04-28apparmor: fix auditing of domain transition failures due to incomplete policyJohn Johansen
2013-02-22new helper: file_inode(file)Al Viro
2012-09-21userns: Convert apparmor to use kuid and kgid where appropriateEric W. Biederman
2012-04-14Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVSJohn Johansen
2012-04-14Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsAndy Lutomirski
2012-03-28apparmor: Fix change_onexec when called from a confined taskJohn Johansen