Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-5.4
/
db1231ddc04682f60d56ff42447f13099c6c4a4c
/
security
/
apparmor
/
lsm.c
b886d83
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
by Thomas Gleixner
· 5 years ago
e33c1b9
apparmor: Restore Y/N in /sys for apparmor's "enabled"
by Kees Cook
· 6 years ago
ae5906c
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
a1a0206
apparmor: Fix warning about unused function apparmor_ipv6_postroute
by Petr Vorel
· 6 years ago
1cfb2a5
LSM: Make lsm_early_cred() and lsm_early_task() local functions.
by Tetsuo Handa
· 6 years ago
c1a85a0
LSM: generalize flag passing to security_capable
by Micah Morton
· 6 years ago
f4ad8f2
LSM: Infrastructure management of the task security
by Casey Schaufler
· 6 years ago
33bf60c
LSM: Infrastructure management of the file security
by Casey Schaufler
· 6 years ago
bbd3662
Infrastructure management of the cred security blob
by Casey Schaufler
· 6 years ago
69b5a44
AppArmor: Abstract use of cred security blob
by Casey Schaufler
· 6 years ago
0102fb8
apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE
by Kees Cook
· 6 years ago
14bd99c
LSM: Separate idea of "major" LSM from "exclusive" LSM
by Kees Cook
· 6 years ago
f4941d7
LSM: Lift LSM selection out of individual LSMs
by Kees Cook
· 6 years ago
c5459b8
LSM: Plumb visibility into optional "enabled" state
by Kees Cook
· 6 years ago
47008e5
LSM: Introduce LSM_FLAG_LEGACY_MAJOR
by Kees Cook
· 6 years ago
e262e32d
vfs: Suppress MS_* flag defs within the kernel unless explicitly enabled
by David Howells
· 6 years ago
d81f50b
Merge tag 'apparmor-pr-2018-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 6 years ago
638820d
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
e1af477
apparmor: add #ifdef checks for secmark filtering
by Arnd Bergmann
· 6 years ago
07aed2f
LSM: Record LSM name in struct lsm_info
by Kees Cook
· 6 years ago
3d6e5f6
LSM: Convert security_initcall() into DEFINE_LSM()
by Kees Cook
· 6 years ago
ae7795b
signal: Distinguish between kernel_siginfo and siginfo
by Eric W. Biederman
· 6 years ago
ca3fde5
apparmor: don't try to replace stale label in ptraceme check
by Jann Horn
· 6 years ago
ab9f211
apparmor: Allow filtering based on secmark policy
by Matthew Garrett
· 6 years ago
1f8266f
apparmor: don't try to replace stale label in ptrace access check
by Jann Horn
· 6 years ago
9481769
->file_open(): lose cred argument
by Al Viro
· 6 years ago
338d0be
apparmor: fix ptrace read check
by John Johansen
· 6 years ago
a4c3f89
apparmor: fixup secid map conversion to using IDR
by John Johansen
· 6 years ago
e79c26d
apparmor: Add support for audit rule filtering
by Matthew Garrett
· 7 years ago
5d8779a
apparmor: Convert to use match_string() helper
by Andy Shevchenko
· 7 years ago
a7ae364
apparmor: add the ability to get a task's secid
by John Johansen
· 7 years ago
c092921
apparmor: add support for mapping secids and using secctxes
by John Johansen
· 7 years ago
80a17a5
Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 7 years ago
3612605
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
514c603
headers: untangle kmemleak.h from mm.h
by Randy Dunlap
· 7 years ago
56974a6
apparmor: add base infastructure for socket mediation
by John Johansen
· 7 years ago
6b4f3d0
usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as_cred and security_task_kill
by Stephen Smalley
· 7 years ago
d8889d4
apparmor: move context.h to cred.h
by John Johansen
· 7 years ago
de62de5
apparmor: move task related defines and fns to task.X files
by John Johansen
· 7 years ago
f175221
apparmor: rename tctx to ctx
by John Johansen
· 8 years ago
d9087c4
apparmor: drop cred_ctx and reference the label directly
by John Johansen
· 8 years ago
3b529a7
apparmor: move task domain change info to task security
by John Johansen
· 8 years ago
4d2f8ba
apparmor: rename task_ctx to the more accurate cred_ctx
by John Johansen
· 8 years ago
26064de
Merge tag 'apparmor-pr-2017-11-21' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 7 years ago
954317f
apparmor: Fix bool initialization/comparison
by Thomas Meyer
· 7 years ago
1be2172
Merge tag 'modules-for-v4.15' of git://git.kernel.org/pub/scm/linux/kernel/git/jeyu/linux
by Linus Torvalds
· 7 years ago
e4dca7b
treewide: Fix function prototypes for module_param_call()
by Kees Cook
· 7 years ago
80c094a
Revert "apparmor: add base infastructure for socket mediation"
by Linus Torvalds
· 7 years ago
79444df
Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 7 years ago
651e28c
apparmor: add base infastructure for socket mediation
by John Johansen
· 7 years ago
2ea3ffb
apparmor: add mount mediation
by John Johansen
· 7 years ago
cd1dbf7
apparmor: add the ability to mediate signals
by John Johansen
· 7 years ago
993b3ab
apparmor: Refactor to remove bprm_secureexec hook
by Kees Cook
· 7 years ago
6c5fc8f
apparmor: add stacked domain labels interface
by John Johansen
· 7 years ago
064dc94
apparmor: mediate files when they are received
by John Johansen
· 7 years ago
8014370
apparmor: move path_link mediation to using labels
by John Johansen
· 7 years ago
aebd873
apparmor: refactor path name lookup and permission checks around labels
by John Johansen
· 7 years ago
190a951
apparmor: move aa_file_perm() to use labels
by John Johansen
· 7 years ago
b2d09ae
apparmor: move ptrace checks to using labels
by John Johansen
· 7 years ago
86b92cb
apparmor: move resource checks to using labels
by John Johansen
· 7 years ago
c70c86c
apparmor: move capability checks to using labels
by John Johansen
· 7 years ago
76a1d26
apparmor: switch getprocattr to using label_print fns()
by John Johansen
· 7 years ago
637f688
apparmor: switch from profiles to using labels on contexts
by John Johansen
· 7 years ago
192ca6b
apparmor: revalidate files during exec
by John Johansen
· 7 years ago
2835a13
apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()
by John Johansen
· 7 years ago
df8073c
apparmor: convert aa_change_XXX bool parameters to flags
by John Johansen
· 7 years ago
cf797c0
apparmor: convert to profile block critical sections
by John Johansen
· 7 years ago
fe86482
apparmor: move bprm_committing_creds/committed_creds to lsm.c
by John Johansen
· 7 years ago
39d8482
apparmor: provide information about path buffer size at boot
by John Johansen
· 8 years ago
e53cfe6
apparmor: rework perm mapping to a slightly broader set
by John Johansen
· 7 years ago
622f6e32
apparmor: Make path_max parameter readonly
by John Johansen
· 8 years ago
545de8f
apparmor: fix parameters so that the permission test is bypassed at boot
by John Johansen
· 8 years ago
eea7a05
security/apparmor/lsm.c: set debug messages
by Valentin Rothberg
· 8 years ago
ca97d93
security: mark LSM hooks as __ro_after_init
by James Morris
· 8 years ago
a2a1547
Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
d69dece
LSM: Add /sys/kernel/security/lsm
by Casey Schaufler
· 8 years ago
3ccb76c
apparmor: fix undefined reference to `aa_g_hash_policy'
by John Johansen
· 8 years ago
e6bfa25
apparmor: replace remaining BUG_ON() asserts with AA_BUG()
by John Johansen
· 8 years ago
ca4bd5a
apparmor: add check for apparmor enabled in module parameters missing it
by John Johansen
· 8 years ago
d4669f0
apparmor: add per cpu work buffers to avoid allocating buffers at every hook
by John Johansen
· 8 years ago
e3ea1ca
apparmor: sysctl to enable unprivileged user ns AppArmor policy loading
by Tyler Hicks
· 9 years ago
e025be0
apparmor: support querying extended trusted helper extra data
by William Hua
· 8 years ago
31f75bf
apparmor: make computing policy hashes conditional on kernel parameter
by John Johansen
· 8 years ago
aa9a39a
apparmor: convert change_profile to use fqname later to give better control
by John Johansen
· 8 years ago
ef88a7a
apparmor: change aad apparmor_audit_data macro to a fn macro
by John Johansen
· 8 years ago
47f6e5c
apparmor: change op from int to const char *
by John Johansen
· 8 years ago
55a26eb
apparmor: rename context abreviation cxt to the more standard ctx
by John Johansen
· 8 years ago
fd2a804
apparmor: add ns being viewed as a param to policy_admin_capable()
by John Johansen
· 8 years ago
2bd8dbb
apparmor: add ns being viewed as a param to policy_view_capable()
by John Johansen
· 8 years ago
11c236b
apparmor: add a default null dfa
by John Johansen
· 8 years ago
abbf873
apparmor: remove paranoid load switch
by John Johansen
· 8 years ago
efeee83
apparmor: rename mediated_filesystem() to path_mediated_fs()
by John Johansen
· 8 years ago
680cd62
apparmor: add debug assert AA_BUG and Kconfig to control debug info
by John Johansen
· 8 years ago
cff281f
apparmor: split apparmor policy namespaces code into its own file
by John Johansen
· 8 years ago
8486adf
apparmor: use designated initializers
by Kees Cook
· 8 years ago
b21507e
proc,security: move restriction on writing /proc/pid/attr nodes to proc
by Stephen Smalley
· 8 years ago
7616ac7
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
by Arnd Bergmann
· 8 years ago
d4d03f7
apparmor: fix arg_size computation for when setprocattr is null terminated
by John Johansen
· 8 years ago
e89b808
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
by Vegard Nossum
· 8 years ago
58acf9d
apparmor: fix module parameters can be changed after policy is locked
by John Johansen
· 8 years ago
Next »