Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-5.4
/
fcc6da076a38f53d6df374fe5c9f1325eea25a00
/
security
/
apparmor
993b3ab
apparmor: Refactor to remove bprm_secureexec hook
by Kees Cook
· 7 years ago
ddb4a14
exec: Rename bprm->cred_prepared to called_set_creds
by Kees Cook
· 7 years ago
e24dd9e
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
c4758fa
apparmor: put back designators in struct initialisers
by Stephen Rothwell
· 8 years ago
33f2ead
apparmor: export that basic profile namespaces are supported
by John Johansen
· 8 years ago
6c5fc8f
apparmor: add stacked domain labels interface
by John Johansen
· 8 years ago
40cde7f
apparmor: add domain label stacking info to apparmorfs
by John Johansen
· 8 years ago
e00b02bb
apparmor: move change_profile mediation to using labels
by John Johansen
· 8 years ago
89dbf19
apparmor: move change_hat mediation to using labels
by John Johansen
· 8 years ago
93c98a4
apparmor: move exec domain mediation to using labels
by John Johansen
· 8 years ago
5379a33
apparmor: support v7 transition format compatible with label_parse
by John Johansen
· 8 years ago
064dc94
apparmor: mediate files when they are received
by John Johansen
· 8 years ago
496c931
apparmor: rework file permission to cache file access in file->ctx
by John Johansen
· 8 years ago
8014370
apparmor: move path_link mediation to using labels
by John Johansen
· 8 years ago
aebd873
apparmor: refactor path name lookup and permission checks around labels
by John Johansen
· 8 years ago
98c3d18
apparmor: update aa_audit_file() to use labels
by John Johansen
· 8 years ago
190a951
apparmor: move aa_file_perm() to use labels
by John Johansen
· 8 years ago
290f458
apparmor: allow ptrace checks to be finer grained than just capability
by John Johansen
· 8 years ago
b2d09ae
apparmor: move ptrace checks to using labels
by John Johansen
· 8 years ago
ca916e8
apparmor: add cross check permission helper macros
by John Johansen
· 8 years ago
86b92cb
apparmor: move resource checks to using labels
by John Johansen
· 8 years ago
c70c86c
apparmor: move capability checks to using labels
by John Johansen
· 8 years ago
317d9a0
apparmor: update query interface to support label queries
by John Johansen
· 8 years ago
76a1d26
apparmor: switch getprocattr to using label_print fns()
by John Johansen
· 8 years ago
637f688
apparmor: switch from profiles to using labels on contexts
by John Johansen
· 8 years ago
f1bd904
apparmor: add the base fns() for domain labels
by John Johansen
· 8 years ago
192ca6b
apparmor: revalidate files during exec
by John Johansen
· 8 years ago
2835a13
apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()
by John Johansen
· 8 years ago
df8073c
apparmor: convert aa_change_XXX bool parameters to flags
by John Johansen
· 8 years ago
dca9140
apparmor: cleanup remove unused and not fully implemented profile rename
by John Johansen
· 8 years ago
435222b
apparmor: refactor updating profiles to the newest parent
by John Johansen
· 8 years ago
a1bd627
apparmor: share profile name on replacement
by John Johansen
· 8 years ago
cf797c0
apparmor: convert to profile block critical sections
by John Johansen
· 8 years ago
fe86482
apparmor: move bprm_committing_creds/committed_creds to lsm.c
by John Johansen
· 8 years ago
d9f02d9
apparmor: fix display of ns name
by John Johansen
· 8 years ago
5262ef6
apparmor: fix apparmor_query data
by John Johansen
· 8 years ago
60285eb
apparmor: fix policy load/remove semantics
by John Johansen
· 8 years ago
3664268
apparmor: add namespace lookup fns()
by John Johansen
· 8 years ago
ae3b316
apparmor: cleanup __find_child()
by John Johansen
· 8 years ago
39d8482
apparmor: provide information about path buffer size at boot
by John Johansen
· 8 years ago
4f3b3f2
apparmor: add profile permission query ability
by John Johansen
· 8 years ago
2d679f3
apparmor: switch from file_perms to aa_perms
by John Johansen
· 8 years ago
aa9aeea
apparmor: add gerneric permissions struct and support fns
by John Johansen
· 8 years ago
b5b2557
apparmor: add fn to test if profile supports a given mediation class
by John Johansen
· 8 years ago
1dea3b4
apparmor: speed up transactional queries
by John Johansen
· 8 years ago
a83bd86
apparmor: add label data availability to the feature set
by John Johansen
· 8 years ago
4ae47f3
apparmor: add mkdir/rmdir interface to manage policy namespaces
by John Johansen
· 8 years ago
d9bf2c2
apparmor: add policy revision file interface
by John Johansen
· 8 years ago
18e99f1
apparmor: provide finer control over policy management
by John Johansen
· 8 years ago
e53cfe6
apparmor: rework perm mapping to a slightly broader set
by John Johansen
· 8 years ago
fc7e0b2
apparmor: move permissions into their own file to be more easily shared
by John Johansen
· 8 years ago
c961ee5
apparmor: convert from securityfs to apparmorfs for policy ns files
by John Johansen
· 8 years ago
98407f0
apparmor: allow specifying an already created dir to create ns entries in
by John Johansen
· 8 years ago
c97204b
apparmor: rename apparmor file fns and data to indicate use
by John Johansen
· 8 years ago
a481f4d
apparmor: add custom apparmorfs that will be used by policy namespace files
by John Johansen
· 8 years ago
64c8697
apparmor: use macro template to simplify namespace seq_files
by John Johansen
· 8 years ago
52b97de
apparmor: use macro template to simplify profile seq_files
by John Johansen
· 8 years ago
5d5182ca
apparmor: move to per loaddata files, instead of replicating in profiles
by John Johansen
· 8 years ago
4227c33
apparmor: Move path lookup to using preallocated buffers
by John Johansen
· 8 years ago
72c8a76
apparmor: allow profiles to provide info to disconnected paths
by John Johansen
· 8 years ago
b91deb9
apparmor: make internal lib fn skipn_spaces available to the rest of apparmor
by John Johansen
· 8 years ago
af7caa8
apparmor: move file context into file.h
by John Johansen
· 8 years ago
651e549
security/apparmor: Use POSIX-compatible "printf '%s'"
by Thomas Schneider
· 8 years ago
ffac1de
apparmor: Fix error cod in __aa_fs_profile_mkdir()
by Dan Carpenter
· 8 years ago
47dbd1c
apparmorfs: Use seq_putc() in two functions
by Markus Elfring
· 8 years ago
0ff3d97
apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()
by Markus Elfring
· 8 years ago
26fccd9
doc: ReSTify apparmor.txt
by Kees Cook
· 8 years ago
24d0d03
apparmorfs: replace CURRENT_TIME with current_time()
by Deepa Dinamani
· 8 years ago
a7c3e90
mm: introduce kv[mz]alloc helpers
by Michal Hocko
· 8 years ago
622f6e32
apparmor: Make path_max parameter readonly
by John Johansen
· 8 years ago
545de8f
apparmor: fix parameters so that the permission test is bypassed at boot
by John Johansen
· 8 years ago
b9b144b
apparmor: fix invalid reference to index variable of iterator line 836
by John Johansen
· 8 years ago
9814448
apparmor: use SHASH_DESC_ON_STACK
by Nicolas Iooss
· 8 years ago
eea7a05
security/apparmor/lsm.c: set debug messages
by Valentin Rothberg
· 8 years ago
b9c42ac
apparmor: fix boolreturn.cocci warnings
by kbuild test robot
· 8 years ago
ca97d93
security: mark LSM hooks as __ro_after_init
by James Morris
· 8 years ago
b2d0910
sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h> in <linux/sched.h>
by Ingo Molnar
· 8 years ago
5b825c3
sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>
by Ingo Molnar
· 8 years ago
f1ef09f
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 8 years ago
c9341ee
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
a2a1547
Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
9227dd2
exec: Remove LSM_UNSAFE_PTRACE_CAP
by Eric W. Biederman
· 8 years ago
d69dece
LSM: Add /sys/kernel/security/lsm
by Casey Schaufler
· 8 years ago
3ccb76c
apparmor: fix undefined reference to `aa_g_hash_policy'
by John Johansen
· 8 years ago
e6bfa25
apparmor: replace remaining BUG_ON() asserts with AA_BUG()
by John Johansen
· 8 years ago
2c17cd3
apparmor: fix restricted endian type warnings for policy unpack
by John Johansen
· 8 years ago
e6e8bf4
apparmor: fix restricted endian type warnings for dfa unpack
by John Johansen
· 8 years ago
ca4bd5a
apparmor: add check for apparmor enabled in module parameters missing it
by John Johansen
· 8 years ago
d4669f0
apparmor: add per cpu work buffers to avoid allocating buffers at every hook
by John Johansen
· 8 years ago
e3ea1ca
apparmor: sysctl to enable unprivileged user ns AppArmor policy loading
by Tyler Hicks
· 9 years ago
e025be0
apparmor: support querying extended trusted helper extra data
by William Hua
· 8 years ago
12eb87d
apparmor: update cap audit to check SECURITY_CAP_NOAUDIT
by John Johansen
· 8 years ago
31f75bf
apparmor: make computing policy hashes conditional on kernel parameter
by John Johansen
· 8 years ago
aa9a39a
apparmor: convert change_profile to use fqname later to give better control
by John Johansen
· 8 years ago
c3e1e58
apparmor: fix change_hat debug output
by John Johansen
· 8 years ago
5ef50d0
apparmor: remove unused op parameter from simple_write_to_buffer()
by John Johansen
· 8 years ago
ef88a7a
apparmor: change aad apparmor_audit_data macro to a fn macro
by John Johansen
· 8 years ago
47f6e5c
apparmor: change op from int to const char *
by John Johansen
· 8 years ago
55a26eb
apparmor: rename context abreviation cxt to the more standard ctx
by John Johansen
· 8 years ago
a20aa95
apparmor: fail task profile update if current_cred isn't real_cred
by John Johansen
· 8 years ago
Next »