Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.19
/
8cf037a8b22f71c6659bd0246bfaba9e79766f64
/
security
/
apparmor
« Previous
04dc715
apparmor: audit policy ns specified in policy load
by John Johansen
· 8 years ago
5ac8c35
apparmor: allow introspecting the loaded policy pre internal transform
by John Johansen
· 8 years ago
fc1c9fd
apparmor: add ns name to the audit data for policy loads
by John Johansen
· 8 years ago
078c73c6
apparmor: add profile and ns params to aa_may_manage_policy()
by John Johansen
· 8 years ago
fd2a804
apparmor: add ns being viewed as a param to policy_admin_capable()
by John Johansen
· 8 years ago
2bd8dbb
apparmor: add ns being viewed as a param to policy_view_capable()
by John Johansen
· 8 years ago
a6f2330
apparmor: allow specifying the profile doing the management
by John Johansen
· 8 years ago
3e3e569
apparmor: allow introspecting the policy namespace name
by John Johansen
· 8 years ago
b79473f
apparmor: Make aa_remove_profile() callable from a different view
by John Johansen
· 8 years ago
ee2351e
apparmor: track ns level so it can be used to help in view checks
by John Johansen
· 8 years ago
a71ada3
apparmor: add special .null file used to "close" fds at exec
by John Johansen
· 8 years ago
34c426a
apparmor: provide userspace flag indicating binfmt_elf_mmap change
by John Johansen
· 8 years ago
11c236b
apparmor: add a default null dfa
by John Johansen
· 8 years ago
6604d4c
apparmor: allow policydb to be used as the file dfa
by John Johansen
· 8 years ago
293a488
apparmor: add get_dfa() fn
by John Johansen
· 8 years ago
474d6b75
apparmor: prepare to support newer versions of policy
by John Johansen
· 8 years ago
5ebfb12
apparmor: add support for force complain flag to support learning mode
by John Johansen
· 8 years ago
abbf873
apparmor: remove paranoid load switch
by John Johansen
· 8 years ago
181f7c9
apparmor: name null-XXX profiles after the executable
by John Johansen
· 8 years ago
30b026a
apparmor: pass gfp_t parameter into profile allocation
by John Johansen
· 8 years ago
73688d1
apparmor: refactor prepare_ns() and make usable from different views
by John Johansen
· 8 years ago
5fd1b95
apparmor: update policy_destroy to use new debug asserts
by John Johansen
· 8 years ago
d102d89
apparmor: pass gfp param into aa_policy_init()
by John Johansen
· 8 years ago
bbe4a7c
apparmor: constify policy name and hname
by John Johansen
· 8 years ago
6e474e3
apparmor: rename hname_tail to basename
by John Johansen
· 8 years ago
efeee83
apparmor: rename mediated_filesystem() to path_mediated_fs()
by John Johansen
· 8 years ago
680cd62
apparmor: add debug assert AA_BUG and Kconfig to control debug info
by John Johansen
· 8 years ago
57e36bb
apparmor: add macro for bug asserts to check that a lock is held
by John Johansen
· 8 years ago
92b6d8e
apparmor: allow ns visibility question to consider subnses
by John Johansen
· 8 years ago
31617dd
apparmor: add fn to lookup profiles by fqname
by John Johansen
· 8 years ago
3b0aaf5
apparmor: add lib fn to find the "split" for fqnames
by John Johansen
· 8 years ago
9a2d40c
apparmor: add strn version of aa_find_ns
by John Johansen
· 8 years ago
1741e9e
apparmor: add strn version of lookup_profile fn
by John Johansen
· 8 years ago
8399588
apparmor: rename replacedby to proxy
by John Johansen
· 8 years ago
d97d51d
apparmor: rename PFLAG_INVALID to PFLAG_STALE
by John Johansen
· 8 years ago
121d4a9
apparmor: rename sid to secid
by John Johansen
· 8 years ago
98849df
apparmor: rename namespace to ns to improve code line lengths
by John Johansen
· 8 years ago
cff281f
apparmor: split apparmor policy namespaces code into its own file
by John Johansen
· 8 years ago
fe6bb31
apparmor: split out shared policy_XXX fns to lib
by John Johansen
· 8 years ago
12557dc
apparmor: move lib definitions into separate lib include
by John Johansen
· 8 years ago
8486adf
apparmor: use designated initializers
by Kees Cook
· 8 years ago
a7f6c1b
AppArmor: Use GFP_KERNEL for __aa_kvmalloc().
by Tetsuo Handa
· 8 years ago
6b1ffa0
locking/atomic, kref: Use kref_get_unless_zero() more
by Peter Zijlstra
· 8 years ago
b21507e
proc,security: move restriction on writing /proc/pid/attr nodes to proc
by Stephen Smalley
· 8 years ago
3d40658
apparmor: fix change_hat not finding hat after policy replacement
by John Johansen
· 8 years ago
078cd82
fs: Replace CURRENT_TIME with current_time() for inode timestamps
by Deepa Dinamani
· 8 years ago
7616ac7
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
by Arnd Bergmann
· 8 years ago
d4d03f7
apparmor: fix arg_size computation for when setprocattr is null terminated
by John Johansen
· 8 years ago
e89b808
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
by Vegard Nossum
· 8 years ago
f4ee2de
apparmor: do not expose kernel stack
by Heinrich Schuchardt
· 8 years ago
58acf9d
apparmor: fix module parameters can be changed after policy is locked
by John Johansen
· 8 years ago
5f20fdf
apparmor: fix oops in profile_unpack() when policy_db is not present
by John Johansen
· 8 years ago
3197f5a
apparmor: don't check for vmalloc_addr if kvzalloc() failed
by John Johansen
· 8 years ago
1575617
apparmor: add missing id bounds check on dfa verification
by John Johansen
· 8 years ago
ff11847
apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task
by Jeff Mahoney
· 9 years ago
38dbd7d
apparmor: use list_next_entry instead of list_entry_next
by Geliang Tang
· 9 years ago
de7c4cc
apparmor: fix refcount race when finding a child profile
by John Johansen
· 9 years ago
0b938a2
apparmor: fix ref count leak when profile sha1 hash is read
by John Johansen
· 9 years ago
23ca7b6
apparmor: check that xindex is in trans_table bounds
by John Johansen
· 9 years ago
f7da2de
apparmor: ensure the target profile name is always audited
by John Johansen
· 9 years ago
7ee6da2
apparmor: fix audit full profile hname on successful load
by John Johansen
· 9 years ago
bf15cf0
apparmor: fix log failures for all profiles in a set
by John Johansen
· 9 years ago
f351841
apparmor: fix put() parent ref after updating the active ref
by John Johansen
· 9 years ago
6059f71
apparmor: add parameter to control whether policy hashing is used
by John Johansen
· 10 years ago
bd35db8
apparmor: internal paths should be treated as disconnected
by John Johansen
· 10 years ago
f2e561d
apparmor: fix disconnected bind mnts reconnection
by John Johansen
· 10 years ago
d671e890
apparmor: fix update the mtime of the profile file on replacement
by John Johansen
· 10 years ago
9049a79
apparmor: exec should not be returning ENOENT when it denies
by John Johansen
· 10 years ago
b6b1b81
apparmor: fix uninitialized lsm_audit member
by John Johansen
· 10 years ago
ec34fa2
apparmor: fix replacement bug that adds new child to old parent
by John Johansen
· 9 years ago
dcda617
apparmor: fix refcount bug in profile replacement
by John Johansen
· 9 years ago
3ccee46
constify security_path_{link,rename}
by Al Viro
· 9 years ago
8db0185
apparmor: remove useless checks for NULL ->mnt
by Al Viro
· 9 years ago
d360775
constify security_path_{mkdir,mknod,symlink}
by Al Viro
· 9 years ago
989f74e
constify security_path_{unlink,rmdir}
by Al Viro
· 9 years ago
d6b49f7
apparmor: constify common_perm_...()
by Al Viro
· 9 years ago
3539aaf
apparmor: constify aa_path_link()
by Al Viro
· 9 years ago
741aca7
apparmor: new helper - common_path_perm()
by Al Viro
· 9 years ago
be01f9f
constify chmod_common/security_path_chmod
by Al Viro
· 9 years ago
7fd25da
constify chown_common/security_path_chown
by Al Viro
· 9 years ago
928e1eb
apparmor_path_truncate(): path->mnt is never NULL
by Al Viro
· 9 years ago
81f4c50
constify security_path_truncate()
by Al Viro
· 9 years ago
2c7661f
[apparmor] constify struct path * in a bunch of helpers
by Al Viro
· 9 years ago
083c129
apparmor: clarify CRYPTO dependency
by Arnd Bergmann
· 9 years ago
02201e3
Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
by Linus Torvalds
· 9 years ago
9c27847
kernel/params: constify struct kernel_param_ops uses
by Luis R. Rodriguez
· 9 years ago
b1d9e6b
LSM: Switch to lists of hooks
by Casey Schaufler
· 10 years ago
e20b043
LSM: Add security module hook list heads
by Casey Schaufler
· 10 years ago
3c4ed7b
LSM: Split security.h
by Casey Schaufler
· 10 years ago
ce0b16d
VFS: security/: d_inode() annotations
by David Howells
· 10 years ago
c6f493d
VFS: security/: d_backing_inode() annotations
by David Howells
· 10 years ago
3f7036a
switch security_inode_getattr() to struct path *
by Al Viro
· 10 years ago
729b8a3
Apparmor: Use d_is_positive/negative() rather than testing dentry->d_inode
by David Howells
· 10 years ago
7ac2856
Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sb
by David Howells
· 10 years ago
6a4c264
module: rename KERNEL_PARAM_FL_NOARG to avoid confusion
by Jani Nikula
· 10 years ago
1d4457f
sched: move no_new_privs into new atomic flags
by Kees Cook
· 10 years ago
39f1f78
nick kvfree() from apparmor
by Al Viro
· 11 years ago
29707b2
security: replace strict_strto*() with kstrto*()
by Jingoo Han
· 11 years ago
78dc53c
Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
51775fe
apparmor: remove the "task" arg from may_change_ptraced_domain()
by Oleg Nesterov
· 11 years ago
Next »