summaryrefslogtreecommitdiff
path: root/security/apparmor/domain.c
AgeCommit message (Expand)Author
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner
2019-03-07Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2019-02-22security: mark expected switch fall-throughs and add a missing breakGustavo A. R. Silva
2019-02-01apparmor: Fix aa_label_build() error handling for failed mergesJohn Johansen
2019-01-08AppArmor: Abstract use of cred security blobCasey Schaufler
2018-07-20apparmor: Fix failure to audit context info in build_change_hatJohn Johansen
2018-05-03apparmor: fix typo "loosen"Zygmunt Krynicki
2018-03-23apparmor: fix error returns checks by making size a ssize_tColin Ian King
2018-02-09apparmor: improve overlapping domain attachment resolutionJohn Johansen
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett
2018-02-09apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen
2018-02-09apparmor: move context.h to cred.hJohn Johansen
2018-02-09apparmor: move task related defines and fns to task.X filesJohn Johansen
2018-02-09apparmor: rename tctx to ctxJohn Johansen
2018-02-09apparmor: drop cred_ctx and reference the label directlyJohn Johansen
2018-02-09apparmor: move task domain change info to task securityJohn Johansen
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen
2018-01-12apparmor: Fix regression in profile conflict logicMatthew Garrett
2017-11-21apparmor: fix locking when creating a new complain profile.John Johansen
2017-11-21apparmor: fix profile attachment for special unconfined profilesJohn Johansen
2017-11-21apparmor: ensure that undecidable profile attachments failJohn Johansen
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2017-09-22apparmor: add mount mediationJohn Johansen
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook
2017-06-10apparmor: move change_profile mediation to using labelsJohn Johansen
2017-06-10apparmor: move change_hat mediation to using labelsJohn Johansen
2017-06-10apparmor: move exec domain mediation to using labelsJohn Johansen
2017-06-10apparmor: update aa_audit_file() to use labelsJohn Johansen
2017-06-10apparmor: move ptrace checks to using labelsJohn Johansen
2017-06-10apparmor: switch from profiles to using labels on contextsJohn Johansen
2017-06-10apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen
2017-06-10apparmor: convert to profile block critical sectionsJohn Johansen
2017-06-10apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen
2017-02-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen
2017-01-16apparmor: change op from int to const char *John Johansen
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen
2016-11-21apparmor: fix change_hat not finding hat after policy replacementJohn Johansen
2016-07-12apparmor: ensure the target profile name is always auditedJohn Johansen
2016-07-12apparmor: exec should not be returning ENOENT when it deniesJohn Johansen