Log - 6d65aeab7bf6e83e75f53cfdbdb84603e52e1182 - SHIFTPHONES/mainline/linux

453431a mm, treewide: rename kzfree() to kfree_sensitive() by Waiman Long · 4 years, 7 months ago
a2b4470 Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 4 years, 9 months ago
3622ad2 apparmor: Fix memory leak of profile proxy by John Johansen · 4 years, 9 months ago
b8bff59 exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds by Eric W. Biederman · 5 years ago
0df34a6 apparmor: add outofband transition and use it in xattr match by John Johansen · 6 years ago
3ed4aaa9 apparmor: fix nnp subset test for unconfined by John Johansen · 5 years ago
c659696 apparmor: add a valid state flags check by John Johansen · 6 years ago
79e178a Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 5 years ago
341c1fd apparmor: make it so work buffers can be allocated from atomic context by John Johansen · 5 years ago
136db994 apparmor: increase left match history buffer size by John Johansen · 6 years ago
df32333 apparmor: Use a memory pool instead per-CPU caches by Sebastian Andrzej Siewior · 6 years ago
23375b1 apparmor: fix PROFILE_MEDIATES for untrusted input by John Johansen · 6 years ago
b886d83c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 by Thomas Gleixner · 6 years ago
63c16c3 apparmor: Initial implementation of raw policy blob compression by Chris Coulson · 6 years ago
be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
6c2976b apparmor: Adjust offset when accessing task blob. by Tetsuo Handa · 6 years ago
c1a85a0 LSM: generalize flag passing to security_capable by Micah Morton · 6 years ago
f4ad8f2 LSM: Infrastructure management of the task security by Casey Schaufler · 6 years ago
33bf60c LSM: Infrastructure management of the file security by Casey Schaufler · 6 years ago
bbd3662 Infrastructure management of the cred security blob by Casey Schaufler · 6 years ago
69b5a44 AppArmor: Abstract use of cred security blob by Casey Schaufler · 6 years ago
9caafbe apparmor: Parse secmark policy by Matthew Garrett · 7 years ago
617a629 apparmor: Add a wildcard secid by Matthew Garrett · 7 years ago
1f8266f apparmor: don't try to replace stale label in ptrace access check by Jann Horn · 7 years ago
7f3ebcf apparmor: Check buffer bounds when mapping permissions mask by Tyler Hicks · 7 years ago
a4c3f89 apparmor: fixup secid map conversion to using IDR by John Johansen · 7 years ago
e79c26d apparmor: Add support for audit rule filtering by Matthew Garrett · 7 years ago
38125c2 apparmor: improve get_buffers macro by using get_cpu_ptr by John Johansen · 7 years ago
c092921 apparmor: add support for mapping secids and using secctxes by John Johansen · 8 years ago
80a17a5 Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
cf14f27 macro: introduce COUNT_ARGS() macro by Alexei Starovoitov · 7 years ago
b9590ad apparmor: remove POLICY_MEDIATES_SAFE by John Johansen · 7 years ago
56974a6 apparmor: add base infastructure for socket mediation by John Johansen · 8 years ago
21f6066 apparmor: improve overlapping domain attachment resolution by John Johansen · 7 years ago
73f488c apparmor: convert attaching profiles via xattrs to use dfa matching by John Johansen · 7 years ago
8e51f90 apparmor: Add support for attaching profiles via xattr, presence and value by Matthew Garrett · 7 years ago
031dcc8 apparmor: dfa add support for state differential encoding by John Johansen · 8 years ago
9fcf78c apparmor: update domain transitions that are subsets of confinement at nnp by John Johansen · 7 years ago
d8889d4 apparmor: move context.h to cred.h by John Johansen · 7 years ago
de62de5 apparmor: move task related defines and fns to task.X files by John Johansen · 7 years ago
d065f2f apparmor: cleanup, drop unused fn __aa_task_is_confined() by John Johansen · 7 years ago
d9087c4 apparmor: drop cred_ctx and reference the label directly by John Johansen · 8 years ago
3b529a7 apparmor: move task domain change info to task security by John Johansen · 8 years ago
4d2f8ba apparmor: rename task_ctx to the more accurate cred_ctx by John Johansen · 8 years ago
3acfd5f apparmor: audit unknown signal numbers by John Johansen · 7 years ago
95652ca apparmor: provide a bounded version of label_parse by John Johansen · 8 years ago
6e0654d apparmor: use the dfa to do label parse string splitting by John Johansen · 8 years ago
cf65fab apparmor: add first substr match to dfa by John Johansen · 8 years ago
a6a5257 apparmor: split load data into management struct and data blob by John Johansen · 7 years ago
98cf5bb apparmor: fix logging of the existence test for signals by John Johansen · 7 years ago
b5beb07 apparmor: fix resource audit messages when auditing peer by John Johansen · 7 years ago
0dda0b3 apparmor: fix ptrace label match when matching stacked labels by John Johansen · 7 years ago
df8ba95 Merge tag 'apparmor-pr-2017-11-30' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
b12cbb2 apparmor: fix oops in audit_signal_cb hook by John Johansen · 7 years ago
1751e8a Rename superblock flags (MS_xyz -> SB_xyz) by Linus Torvalds · 7 years ago
8c5db92 Merge branch 'linus' into locking/core, to resolve conflicts by Ingo Molnar · 7 years ago
80c094a Revert "apparmor: add base infastructure for socket mediation" by Linus Torvalds · 7 years ago
26c4eb1 locking/rwsem, security/apparmor: Replace homebrew use of write_can_lock() with lockdep by Will Deacon · 7 years ago
79444df Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
b1545db apparmor: fix build failure on sparc caused by undeclared signals by John Johansen · 8 years ago
651e28c apparmor: add base infastructure for socket mediation by John Johansen · 8 years ago
2410aa9 apparmor: make policy_unpack able to audit different info messages by John Johansen · 8 years ago
26b7899 apparmor: add support for absolute root view based labels by John Johansen · 8 years ago
2ea3ffb apparmor: add mount mediation by John Johansen · 8 years ago
cd1dbf7 apparmor: add the ability to mediate signals by John Johansen · 8 years ago
993b3ab apparmor: Refactor to remove bprm_secureexec hook by Kees Cook · 8 years ago
40cde7f apparmor: add domain label stacking info to apparmorfs by John Johansen · 8 years ago
93c98a4 apparmor: move exec domain mediation to using labels by John Johansen · 8 years ago
064dc94 apparmor: mediate files when they are received by John Johansen · 8 years ago
8014370 apparmor: move path_link mediation to using labels by John Johansen · 8 years ago
aebd873 apparmor: refactor path name lookup and permission checks around labels by John Johansen · 8 years ago
98c3d18 apparmor: update aa_audit_file() to use labels by John Johansen · 8 years ago
190a951 apparmor: move aa_file_perm() to use labels by John Johansen · 8 years ago
290f458 apparmor: allow ptrace checks to be finer grained than just capability by John Johansen · 8 years ago
b2d09ae apparmor: move ptrace checks to using labels by John Johansen · 8 years ago
ca916e8 apparmor: add cross check permission helper macros by John Johansen · 8 years ago
86b92cb apparmor: move resource checks to using labels by John Johansen · 8 years ago
c70c86c apparmor: move capability checks to using labels by John Johansen · 8 years ago
76a1d26 apparmor: switch getprocattr to using label_print fns() by John Johansen · 8 years ago
637f688 apparmor: switch from profiles to using labels on contexts by John Johansen · 8 years ago
f1bd904 apparmor: add the base fns() for domain labels by John Johansen · 8 years ago
192ca6b apparmor: revalidate files during exec by John Johansen · 8 years ago
2835a13 apparmor: cleanup rename XXX_file_context() to XXX_file_ctx() by John Johansen · 8 years ago
df8073c apparmor: convert aa_change_XXX bool parameters to flags by John Johansen · 8 years ago
a1bd627 apparmor: share profile name on replacement by John Johansen · 8 years ago
cf797c0 apparmor: convert to profile block critical sections by John Johansen · 8 years ago
fe86482 apparmor: move bprm_committing_creds/committed_creds to lsm.c by John Johansen · 8 years ago
3664268 apparmor: add namespace lookup fns() by John Johansen · 8 years ago
2d679f3 apparmor: switch from file_perms to aa_perms by John Johansen · 8 years ago
aa9aeea apparmor: add gerneric permissions struct and support fns by John Johansen · 8 years ago
b5b2557 apparmor: add fn to test if profile supports a given mediation class by John Johansen · 8 years ago
d9bf2c2 apparmor: add policy revision file interface by John Johansen · 8 years ago
18e99f1 apparmor: provide finer control over policy management by John Johansen · 8 years ago
e53cfe6 apparmor: rework perm mapping to a slightly broader set by John Johansen · 8 years ago
fc7e0b2 apparmor: move permissions into their own file to be more easily shared by John Johansen · 8 years ago
98407f0 apparmor: allow specifying an already created dir to create ns entries in by John Johansen · 8 years ago
c97204b apparmor: rename apparmor file fns and data to indicate use by John Johansen · 8 years ago
5d5182ca apparmor: move to per loaddata files, instead of replicating in profiles by John Johansen · 8 years ago
4227c33 apparmor: Move path lookup to using preallocated buffers by John Johansen · 8 years ago