Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.19
/
0e70447605f49699b877fea1039b2c5335529d96
/
security
/
apparmor
7616ac7
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
by Arnd Bergmann
· 8 years ago
d4d03f7
apparmor: fix arg_size computation for when setprocattr is null terminated
by John Johansen
· 8 years ago
e89b808
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
by Vegard Nossum
· 8 years ago
f4ee2de
apparmor: do not expose kernel stack
by Heinrich Schuchardt
· 8 years ago
58acf9d
apparmor: fix module parameters can be changed after policy is locked
by John Johansen
· 8 years ago
5f20fdf
apparmor: fix oops in profile_unpack() when policy_db is not present
by John Johansen
· 8 years ago
3197f5a
apparmor: don't check for vmalloc_addr if kvzalloc() failed
by John Johansen
· 8 years ago
1575617
apparmor: add missing id bounds check on dfa verification
by John Johansen
· 9 years ago
ff11847
apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task
by Jeff Mahoney
· 9 years ago
38dbd7d
apparmor: use list_next_entry instead of list_entry_next
by Geliang Tang
· 9 years ago
de7c4cc
apparmor: fix refcount race when finding a child profile
by John Johansen
· 9 years ago
0b938a2
apparmor: fix ref count leak when profile sha1 hash is read
by John Johansen
· 9 years ago
23ca7b6
apparmor: check that xindex is in trans_table bounds
by John Johansen
· 9 years ago
f7da2de
apparmor: ensure the target profile name is always audited
by John Johansen
· 9 years ago
7ee6da2
apparmor: fix audit full profile hname on successful load
by John Johansen
· 9 years ago
bf15cf0
apparmor: fix log failures for all profiles in a set
by John Johansen
· 9 years ago
f351841
apparmor: fix put() parent ref after updating the active ref
by John Johansen
· 9 years ago
6059f71
apparmor: add parameter to control whether policy hashing is used
by John Johansen
· 10 years ago
bd35db8
apparmor: internal paths should be treated as disconnected
by John Johansen
· 10 years ago
f2e561d
apparmor: fix disconnected bind mnts reconnection
by John Johansen
· 10 years ago
d671e890
apparmor: fix update the mtime of the profile file on replacement
by John Johansen
· 10 years ago
9049a79
apparmor: exec should not be returning ENOENT when it denies
by John Johansen
· 10 years ago
b6b1b81
apparmor: fix uninitialized lsm_audit member
by John Johansen
· 10 years ago
ec34fa2
apparmor: fix replacement bug that adds new child to old parent
by John Johansen
· 9 years ago
dcda617
apparmor: fix refcount bug in profile replacement
by John Johansen
· 9 years ago
3ccee46
constify security_path_{link,rename}
by Al Viro
· 9 years ago
8db0185
apparmor: remove useless checks for NULL ->mnt
by Al Viro
· 9 years ago
d360775
constify security_path_{mkdir,mknod,symlink}
by Al Viro
· 9 years ago
989f74e
constify security_path_{unlink,rmdir}
by Al Viro
· 9 years ago
d6b49f7
apparmor: constify common_perm_...()
by Al Viro
· 9 years ago
3539aaf
apparmor: constify aa_path_link()
by Al Viro
· 9 years ago
741aca7
apparmor: new helper - common_path_perm()
by Al Viro
· 9 years ago
be01f9f
constify chmod_common/security_path_chmod
by Al Viro
· 9 years ago
7fd25da
constify chown_common/security_path_chown
by Al Viro
· 9 years ago
928e1eb
apparmor_path_truncate(): path->mnt is never NULL
by Al Viro
· 9 years ago
81f4c50
constify security_path_truncate()
by Al Viro
· 9 years ago
2c7661f
[apparmor] constify struct path * in a bunch of helpers
by Al Viro
· 9 years ago
083c129
apparmor: clarify CRYPTO dependency
by Arnd Bergmann
· 9 years ago
02201e3
Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
by Linus Torvalds
· 9 years ago
9c27847
kernel/params: constify struct kernel_param_ops uses
by Luis R. Rodriguez
· 10 years ago
b1d9e6b
LSM: Switch to lists of hooks
by Casey Schaufler
· 10 years ago
e20b043
LSM: Add security module hook list heads
by Casey Schaufler
· 10 years ago
3c4ed7b
LSM: Split security.h
by Casey Schaufler
· 10 years ago
ce0b16d
VFS: security/: d_inode() annotations
by David Howells
· 10 years ago
c6f493d
VFS: security/: d_backing_inode() annotations
by David Howells
· 10 years ago
3f7036a
switch security_inode_getattr() to struct path *
by Al Viro
· 10 years ago
729b8a3
Apparmor: Use d_is_positive/negative() rather than testing dentry->d_inode
by David Howells
· 10 years ago
7ac2856
Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sb
by David Howells
· 10 years ago
6a4c264
module: rename KERNEL_PARAM_FL_NOARG to avoid confusion
by Jani Nikula
· 10 years ago
1d4457f
sched: move no_new_privs into new atomic flags
by Kees Cook
· 11 years ago
39f1f78
nick kvfree() from apparmor
by Al Viro
· 11 years ago
29707b2
security: replace strict_strto*() with kstrto*()
by Jingoo Han
· 11 years ago
78dc53c
Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
51775fe
apparmor: remove the "task" arg from may_change_ptraced_domain()
by Oleg Nesterov
· 11 years ago
4a7fc30
apparmor: remove parent task info from audit logging
by John Johansen
· 11 years ago
61e3fb8
apparmor: remove tsk field from the apparmor_audit_struct
by John Johansen
· 11 years ago
dd0c6e8
apparmor: fix capability to not use the current task, during reporting
by John Johansen
· 11 years ago
ed2c7da
apparmor: fix bad lock balance when introspecting policy
by John Johansen
· 11 years ago
5cb3e91
apparmor: fix memleak of the profile hash
by John Johansen
· 11 years ago
4cd4fc7
apparmor: fix suspicious RCU usage warning in policy.c/policy.h
by John Johansen
· 11 years ago
71ac7f6
apparmor: Use shash crypto API interface for profile hashes
by Tyler Hicks
· 11 years ago
11c7b03
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
5265fc6
module/lsm: Have apparmor module parameters work with no args
by Steven Rostedt
· 11 years ago
f8eb8a1
apparmor: add the ability to report a sha1 hash of loaded policy
by John Johansen
· 11 years ago
84f1f78
apparmor: export set of capabilities supported by the apparmor module
by John Johansen
· 11 years ago
29b3822
apparmor: add the profile introspection file to interface
by John Johansen
· 11 years ago
556d0be
apparmor: add an optional profile attachment string for profiles
by John Johansen
· 11 years ago
0d259f0
apparmor: add interface files for profiles and namespaces
by John Johansen
· 11 years ago
0381650
apparmor: allow setting any profile into the unconfined state
by John Johansen
· 11 years ago
8651e1d6
apparmor: make free_profile available outside of policy.c
by John Johansen
· 11 years ago
742058b
apparmor: rework namespace free path
by John Johansen
· 11 years ago
fa2ac46
apparmor: update how unconfined is handled
by John Johansen
· 11 years ago
77b071b
apparmor: change how profile replacement update is done
by John Johansen
· 11 years ago
01e2b67
apparmor: convert profile lists to RCU based locking
by John Johansen
· 11 years ago
dd51c848
apparmor: provide base for multiple profiles to be replaced at once
by John Johansen
· 11 years ago
9d910a3
apparmor: add a features/policy dir to interface
by John Johansen
· 11 years ago
c611616
apparmor: enable users to query whether apparmor is enabled
by John Johansen
· 11 years ago
dfe4ac2
apparmor: remove minimum size check for vmalloc()
by Tetsuo Handa
· 11 years ago
b5b3ee6
apparmor: no need to delay vfree()
by Al Viro
· 12 years ago
2654bfb
apparmor: fix fully qualified name parsing
by John Johansen
· 12 years ago
3eea57c
apparmor: fix setprocattr arg processing for onexec
by John Johansen
· 12 years ago
214beac
apparmor: localize getting the security context to a few macros
by John Johansen
· 12 years ago
53fe8b9
apparmor: fix sparse warnings
by John Johansen
· 12 years ago
41d1b3e
apparmor: Fix smatch warning in aa_remove_profiles
by John Johansen
· 12 years ago
b492d50
apparmor: fix the audit type table
by John Johansen
· 12 years ago
ed686308
apparmor: reserve and mask off the top 8 bits of the base field
by John Johansen
· 12 years ago
4da05cc
apparmor: move the free_profile fn ahead of aa_alloc_profile
by John Johansen
· 12 years ago
a498785
apparmor: remove sid from profiles
by John Johansen
· 12 years ago
180a6f5
apparmor: move perm defines into policy_unpack
by John Johansen
· 12 years ago
8e4ff10
apparmor: misc cleanup of match
by John Johansen
· 12 years ago
cf47aed
apparmor: relax the restrictions on setting rlimits
by John Johansen
· 12 years ago
4b7c331
apparmor: remove "permipc" command
by John Johansen
· 12 years ago
7a2871b
apparmor: use common fn to clear task_context for domain transitions
by John Johansen
· 12 years ago
0ca554b
apparmor: add kvzalloc to handle zeroing for kvmalloc
by John Johansen
· 12 years ago
3cfcc19
apparmor: add utility function to get an arbitrary tasks profile.
by John Johansen
· 12 years ago
e573cc3
apparmor: fix error code to failure message mapping for name lookup
by John Johansen
· 12 years ago
50c5ecd5
apparmor: refactor profile mode macros
by John Johansen
· 12 years ago
0426623
apparmor: Remove -W1 warnings
by John Johansen
· 12 years ago
17322cc
apparmor: fix auditing of domain transition failures due to incomplete policy
by John Johansen
· 12 years ago
496ad9a
new helper: file_inode(file)
by Al Viro
· 12 years ago
Next »