Gitiles
Code Review
Sign In
review.shift-gmbh.com
/
SHIFTPHONES
/
kernel
/
common
/
954317fef2ee789af55f82903dbc574905250f7c
/
security
/
apparmor
/
lsm.c
954317f
apparmor: Fix bool initialization/comparison
by Thomas Meyer
· 7 years ago
80c094a
Revert "apparmor: add base infastructure for socket mediation"
by Linus Torvalds
· 7 years ago
79444df
Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 7 years ago
651e28c
apparmor: add base infastructure for socket mediation
by John Johansen
· 7 years ago
2ea3ffb
apparmor: add mount mediation
by John Johansen
· 7 years ago
cd1dbf7
apparmor: add the ability to mediate signals
by John Johansen
· 7 years ago
993b3ab
apparmor: Refactor to remove bprm_secureexec hook
by Kees Cook
· 7 years ago
6c5fc8f
apparmor: add stacked domain labels interface
by John Johansen
· 8 years ago
064dc94
apparmor: mediate files when they are received
by John Johansen
· 8 years ago
8014370
apparmor: move path_link mediation to using labels
by John Johansen
· 8 years ago
aebd873
apparmor: refactor path name lookup and permission checks around labels
by John Johansen
· 8 years ago
190a951
apparmor: move aa_file_perm() to use labels
by John Johansen
· 8 years ago
b2d09ae
apparmor: move ptrace checks to using labels
by John Johansen
· 8 years ago
86b92cb
apparmor: move resource checks to using labels
by John Johansen
· 8 years ago
c70c86c
apparmor: move capability checks to using labels
by John Johansen
· 8 years ago
76a1d26
apparmor: switch getprocattr to using label_print fns()
by John Johansen
· 8 years ago
637f688
apparmor: switch from profiles to using labels on contexts
by John Johansen
· 8 years ago
192ca6b
apparmor: revalidate files during exec
by John Johansen
· 8 years ago
2835a13
apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()
by John Johansen
· 8 years ago
df8073c
apparmor: convert aa_change_XXX bool parameters to flags
by John Johansen
· 8 years ago
cf797c0
apparmor: convert to profile block critical sections
by John Johansen
· 8 years ago
fe86482
apparmor: move bprm_committing_creds/committed_creds to lsm.c
by John Johansen
· 8 years ago
39d8482
apparmor: provide information about path buffer size at boot
by John Johansen
· 8 years ago
e53cfe6
apparmor: rework perm mapping to a slightly broader set
by John Johansen
· 8 years ago
622f6e3
apparmor: Make path_max parameter readonly
by John Johansen
· 8 years ago
545de8f
apparmor: fix parameters so that the permission test is bypassed at boot
by John Johansen
· 8 years ago
eea7a05
security/apparmor/lsm.c: set debug messages
by Valentin Rothberg
· 8 years ago
ca97d93
security: mark LSM hooks as __ro_after_init
by James Morris
· 8 years ago
a2a1547
Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
d69dece5
LSM: Add /sys/kernel/security/lsm
by Casey Schaufler
· 8 years ago
3ccb76c
apparmor: fix undefined reference to `aa_g_hash_policy'
by John Johansen
· 8 years ago
e6bfa25
apparmor: replace remaining BUG_ON() asserts with AA_BUG()
by John Johansen
· 8 years ago
ca4bd5a
apparmor: add check for apparmor enabled in module parameters missing it
by John Johansen
· 8 years ago
d4669f0
apparmor: add per cpu work buffers to avoid allocating buffers at every hook
by John Johansen
· 8 years ago
e3ea1ca
apparmor: sysctl to enable unprivileged user ns AppArmor policy loading
by Tyler Hicks
· 9 years ago
e025be0
apparmor: support querying extended trusted helper extra data
by William Hua
· 8 years ago
31f75bf
apparmor: make computing policy hashes conditional on kernel parameter
by John Johansen
· 8 years ago
aa9a39a
apparmor: convert change_profile to use fqname later to give better control
by John Johansen
· 8 years ago
ef88a7a
apparmor: change aad apparmor_audit_data macro to a fn macro
by John Johansen
· 8 years ago
47f6e5c
apparmor: change op from int to const char *
by John Johansen
· 8 years ago
55a26eb
apparmor: rename context abreviation cxt to the more standard ctx
by John Johansen
· 8 years ago
fd2a804
apparmor: add ns being viewed as a param to policy_admin_capable()
by John Johansen
· 8 years ago
2bd8dbb
apparmor: add ns being viewed as a param to policy_view_capable()
by John Johansen
· 8 years ago
11c236b
apparmor: add a default null dfa
by John Johansen
· 8 years ago
abbf873
apparmor: remove paranoid load switch
by John Johansen
· 8 years ago
efeee83
apparmor: rename mediated_filesystem() to path_mediated_fs()
by John Johansen
· 8 years ago
680cd62
apparmor: add debug assert AA_BUG and Kconfig to control debug info
by John Johansen
· 8 years ago
cff281f
apparmor: split apparmor policy namespaces code into its own file
by John Johansen
· 8 years ago
8486adf
apparmor: use designated initializers
by Kees Cook
· 8 years ago
b21507e
proc,security: move restriction on writing /proc/pid/attr nodes to proc
by Stephen Smalley
· 8 years ago
7616ac7
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
by Arnd Bergmann
· 8 years ago
d4d03f7
apparmor: fix arg_size computation for when setprocattr is null terminated
by John Johansen
· 9 years ago
e89b808
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
by Vegard Nossum
· 9 years ago
58acf9d
apparmor: fix module parameters can be changed after policy is locked
by John Johansen
· 9 years ago
6059f71
apparmor: add parameter to control whether policy hashing is used
by John Johansen
· 10 years ago
3ccee46
constify security_path_{link,rename}
by Al Viro
· 9 years ago
8db0185
apparmor: remove useless checks for NULL ->mnt
by Al Viro
· 9 years ago
d360775
constify security_path_{mkdir,mknod,symlink}
by Al Viro
· 9 years ago
989f74e
constify security_path_{unlink,rmdir}
by Al Viro
· 9 years ago
d6b49f7
apparmor: constify common_perm_...()
by Al Viro
· 9 years ago
741aca7
apparmor: new helper - common_path_perm()
by Al Viro
· 9 years ago
be01f9f
constify chmod_common/security_path_chmod
by Al Viro
· 9 years ago
7fd25da
constify chown_common/security_path_chown
by Al Viro
· 9 years ago
928e1eb
apparmor_path_truncate(): path->mnt is never NULL
by Al Viro
· 9 years ago
81f4c50
constify security_path_truncate()
by Al Viro
· 9 years ago
2c7661f
[apparmor] constify struct path * in a bunch of helpers
by Al Viro
· 9 years ago
02201e3
Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
by Linus Torvalds
· 10 years ago
9c27847
kernel/params: constify struct kernel_param_ops uses
by Luis R. Rodriguez
· 10 years ago
b1d9e6b
LSM: Switch to lists of hooks
by Casey Schaufler
· 10 years ago
e20b043
LSM: Add security module hook list heads
by Casey Schaufler
· 10 years ago
3c4ed7b
LSM: Split security.h
by Casey Schaufler
· 10 years ago
c6f493d
VFS: security/: d_backing_inode() annotations
by David Howells
· 10 years ago
3f7036a
switch security_inode_getattr() to struct path *
by Al Viro
· 10 years ago
7ac2856
Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sb
by David Howells
· 10 years ago
6a4c264
module: rename KERNEL_PARAM_FL_NOARG to avoid confusion
by Jani Nikula
· 10 years ago
29707b2
security: replace strict_strto*() with kstrto*()
by Jingoo Han
· 11 years ago
dd0c6e8
apparmor: fix capability to not use the current task, during reporting
by John Johansen
· 11 years ago
11c7b03
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
5265fc6
module/lsm: Have apparmor module parameters work with no args
by Steven Rostedt
· 11 years ago
0d259f0
apparmor: add interface files for profiles and namespaces
by John Johansen
· 12 years ago
77b071b
apparmor: change how profile replacement update is done
by John Johansen
· 12 years ago
c611616
apparmor: enable users to query whether apparmor is enabled
by John Johansen
· 12 years ago
3eea57c
apparmor: fix setprocattr arg processing for onexec
by John Johansen
· 12 years ago
214beac
apparmor: localize getting the security context to a few macros
by John Johansen
· 12 years ago
53fe8b9
apparmor: fix sparse warnings
by John Johansen
· 12 years ago
4b7c331
apparmor: remove "permipc" command
by John Johansen
· 12 years ago
0426623
apparmor: Remove -W1 warnings
by John Johansen
· 12 years ago
496ad9a
new helper: file_inode(file)
by Al Viro
· 12 years ago
d2b31ca
userns: Teach security_path_chown to take kuids and kgids
by Eric W. Biederman
· 13 years ago
e546785
split ->file_mmap() into ->mmap_addr()/->mmap_file()
by Al Viro
· 13 years ago
d007794
split cap_mmap_addr() out of cap_file_mmap()
by Al Viro
· 13 years ago
50c205f
LSM: do not initialize common_audit_data to 0
by Eric Paris
· 13 years ago
bd5e50f
LSM: remove the COMMON_AUDIT_DATA_INIT type expansion
by Eric Paris
· 13 years ago
83d4985
SELinux: rename dentry_open to file_open
by Eric Paris
· 13 years ago
3b3b0e4
LSM: shrink sizeof LSM specific portion of common_audit_data
by Eric Paris
· 13 years ago
c49c41a
Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security
by Linus Torvalds
· 13 years ago
90ab5ee
module_param: make bool parameters really bool (drivers & misc)
by Rusty Russell
· 13 years ago
e7691a1
Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security
by Linus Torvalds
· 13 years ago
cdcf116
switch security_path_chmod() to struct path *
by Al Viro
· 13 years ago
6a9de49
capabilities: remove the task from capable LSM hook entirely
by Eric Paris
· 13 years ago
Next »