Log - a3479c7fc096a1a7a2dccbfbdc6fcf86b805711a - SHIFTPHONES/mainline/linux

a4c3f89 apparmor: fixup secid map conversion to using IDR by John Johansen · 7 years ago
e79c26d apparmor: Add support for audit rule filtering by Matthew Garrett · 7 years ago
38125c2 apparmor: improve get_buffers macro by using get_cpu_ptr by John Johansen · 7 years ago
c092921 apparmor: add support for mapping secids and using secctxes by John Johansen · 7 years ago
80a17a5 Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
cf14f27 macro: introduce COUNT_ARGS() macro by Alexei Starovoitov · 7 years ago
b9590ad apparmor: remove POLICY_MEDIATES_SAFE by John Johansen · 7 years ago
56974a6 apparmor: add base infastructure for socket mediation by John Johansen · 8 years ago
21f6066 apparmor: improve overlapping domain attachment resolution by John Johansen · 7 years ago
73f488c apparmor: convert attaching profiles via xattrs to use dfa matching by John Johansen · 7 years ago
8e51f90 apparmor: Add support for attaching profiles via xattr, presence and value by Matthew Garrett · 7 years ago
031dcc8 apparmor: dfa add support for state differential encoding by John Johansen · 7 years ago
9fcf78c apparmor: update domain transitions that are subsets of confinement at nnp by John Johansen · 7 years ago
d8889d4 apparmor: move context.h to cred.h by John Johansen · 7 years ago
de62de5 apparmor: move task related defines and fns to task.X files by John Johansen · 7 years ago
d065f2f apparmor: cleanup, drop unused fn __aa_task_is_confined() by John Johansen · 7 years ago
d9087c4 apparmor: drop cred_ctx and reference the label directly by John Johansen · 8 years ago
3b529a7 apparmor: move task domain change info to task security by John Johansen · 8 years ago
4d2f8ba apparmor: rename task_ctx to the more accurate cred_ctx by John Johansen · 8 years ago
3acfd5f apparmor: audit unknown signal numbers by John Johansen · 7 years ago
95652ca apparmor: provide a bounded version of label_parse by John Johansen · 7 years ago
6e0654d apparmor: use the dfa to do label parse string splitting by John Johansen · 7 years ago
cf65fab apparmor: add first substr match to dfa by John Johansen · 7 years ago
a6a5257 apparmor: split load data into management struct and data blob by John Johansen · 7 years ago
98cf5bb apparmor: fix logging of the existence test for signals by John Johansen · 7 years ago
b5beb07 apparmor: fix resource audit messages when auditing peer by John Johansen · 7 years ago
0dda0b3 apparmor: fix ptrace label match when matching stacked labels by John Johansen · 7 years ago
df8ba95 Merge tag 'apparmor-pr-2017-11-30' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
b12cbb2 apparmor: fix oops in audit_signal_cb hook by John Johansen · 7 years ago
1751e8a Rename superblock flags (MS_xyz -> SB_xyz) by Linus Torvalds · 7 years ago
8c5db92 Merge branch 'linus' into locking/core, to resolve conflicts by Ingo Molnar · 7 years ago
80c094a Revert "apparmor: add base infastructure for socket mediation" by Linus Torvalds · 7 years ago
26c4eb1 locking/rwsem, security/apparmor: Replace homebrew use of write_can_lock() with lockdep by Will Deacon · 7 years ago
79444df Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
b1545db apparmor: fix build failure on sparc caused by undeclared signals by John Johansen · 7 years ago
651e28c apparmor: add base infastructure for socket mediation by John Johansen · 8 years ago
2410aa9 apparmor: make policy_unpack able to audit different info messages by John Johansen · 8 years ago
26b7899 apparmor: add support for absolute root view based labels by John Johansen · 7 years ago
2ea3ffb apparmor: add mount mediation by John Johansen · 8 years ago
cd1dbf7 apparmor: add the ability to mediate signals by John Johansen · 8 years ago
993b3ab apparmor: Refactor to remove bprm_secureexec hook by Kees Cook · 8 years ago
40cde7f apparmor: add domain label stacking info to apparmorfs by John Johansen · 8 years ago
93c98a4 apparmor: move exec domain mediation to using labels by John Johansen · 8 years ago
064dc94 apparmor: mediate files when they are received by John Johansen · 8 years ago
8014370 apparmor: move path_link mediation to using labels by John Johansen · 8 years ago
aebd873 apparmor: refactor path name lookup and permission checks around labels by John Johansen · 8 years ago
98c3d18 apparmor: update aa_audit_file() to use labels by John Johansen · 8 years ago
190a951 apparmor: move aa_file_perm() to use labels by John Johansen · 8 years ago
290f458 apparmor: allow ptrace checks to be finer grained than just capability by John Johansen · 8 years ago
b2d09ae apparmor: move ptrace checks to using labels by John Johansen · 8 years ago
ca916e8 apparmor: add cross check permission helper macros by John Johansen · 8 years ago
86b92cb apparmor: move resource checks to using labels by John Johansen · 8 years ago
c70c86c apparmor: move capability checks to using labels by John Johansen · 8 years ago
76a1d26 apparmor: switch getprocattr to using label_print fns() by John Johansen · 8 years ago
637f688 apparmor: switch from profiles to using labels on contexts by John Johansen · 8 years ago
f1bd904 apparmor: add the base fns() for domain labels by John Johansen · 8 years ago
192ca6b apparmor: revalidate files during exec by John Johansen · 8 years ago
2835a13 apparmor: cleanup rename XXX_file_context() to XXX_file_ctx() by John Johansen · 8 years ago
df8073c apparmor: convert aa_change_XXX bool parameters to flags by John Johansen · 8 years ago
a1bd627 apparmor: share profile name on replacement by John Johansen · 8 years ago
cf797c0 apparmor: convert to profile block critical sections by John Johansen · 8 years ago
fe86482 apparmor: move bprm_committing_creds/committed_creds to lsm.c by John Johansen · 8 years ago
3664268 apparmor: add namespace lookup fns() by John Johansen · 8 years ago
2d679f3 apparmor: switch from file_perms to aa_perms by John Johansen · 8 years ago
aa9aeea apparmor: add gerneric permissions struct and support fns by John Johansen · 8 years ago
b5b2557 apparmor: add fn to test if profile supports a given mediation class by John Johansen · 8 years ago
d9bf2c2 apparmor: add policy revision file interface by John Johansen · 8 years ago
18e99f1 apparmor: provide finer control over policy management by John Johansen · 8 years ago
e53cfe6 apparmor: rework perm mapping to a slightly broader set by John Johansen · 8 years ago
fc7e0b2 apparmor: move permissions into their own file to be more easily shared by John Johansen · 8 years ago
98407f0 apparmor: allow specifying an already created dir to create ns entries in by John Johansen · 8 years ago
c97204b apparmor: rename apparmor file fns and data to indicate use by John Johansen · 8 years ago
5d5182ca apparmor: move to per loaddata files, instead of replicating in profiles by John Johansen · 8 years ago
4227c33 apparmor: Move path lookup to using preallocated buffers by John Johansen · 8 years ago
72c8a76 apparmor: allow profiles to provide info to disconnected paths by John Johansen · 8 years ago
b91deb9 apparmor: make internal lib fn skipn_spaces available to the rest of apparmor by John Johansen · 8 years ago
af7caa8 apparmor: move file context into file.h by John Johansen · 8 years ago
a7c3e90 mm: introduce kv[mz]alloc helpers by Michal Hocko · 8 years ago
545de8f apparmor: fix parameters so that the permission test is bypassed at boot by John Johansen · 8 years ago
c9341ee Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
e6e8bf4 apparmor: fix restricted endian type warnings for dfa unpack by John Johansen · 8 years ago
d4669f0 apparmor: add per cpu work buffers to avoid allocating buffers at every hook by John Johansen · 8 years ago
e025be0 apparmor: support querying extended trusted helper extra data by William Hua · 8 years ago
aa9a39a apparmor: convert change_profile to use fqname later to give better control by John Johansen · 8 years ago
ef88a7a apparmor: change aad apparmor_audit_data macro to a fn macro by John Johansen · 8 years ago
47f6e5c apparmor: change op from int to const char * by John Johansen · 8 years ago
55a26eb apparmor: rename context abreviation cxt to the more standard ctx by John Johansen · 8 years ago
b7fd2c0 apparmor: add per policy ns .load, .replace, .remove interface files by John Johansen · 8 years ago
12dd717 apparmor: pass the subject profile into profile replace/remove by John Johansen · 8 years ago
04dc715 apparmor: audit policy ns specified in policy load by John Johansen · 8 years ago
5ac8c35 apparmor: allow introspecting the loaded policy pre internal transform by John Johansen · 8 years ago
fc1c9fd apparmor: add ns name to the audit data for policy loads by John Johansen · 8 years ago
078c73c6 apparmor: add profile and ns params to aa_may_manage_policy() by John Johansen · 8 years ago
fd2a804 apparmor: add ns being viewed as a param to policy_admin_capable() by John Johansen · 8 years ago
2bd8dbb apparmor: add ns being viewed as a param to policy_view_capable() by John Johansen · 8 years ago
b79473f apparmor: Make aa_remove_profile() callable from a different view by John Johansen · 8 years ago
a71ada3 apparmor: add special .null file used to "close" fds at exec by John Johansen · 8 years ago
11c236b apparmor: add a default null dfa by John Johansen · 8 years ago
293a488 apparmor: add get_dfa() fn by John Johansen · 8 years ago
181f7c9 apparmor: name null-XXX profiles after the executable by John Johansen · 8 years ago