aboutsummaryrefslogtreecommitdiff
path: root/security/apparmor/policy.c
AgeCommit message (Expand)AuthorFilesLines
2017-04-07apparmor: fix invalid reference to index variable of iterator line 836Gravatar John Johansen 1-2/+4
2017-03-02sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Gravatar Ingo Molnar 1-0/+1
2017-03-02sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>Gravatar Ingo Molnar 1-0/+1
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingGravatar Tyler Hicks 1-1/+0
2017-01-16apparmor: support querying extended trusted helper extra dataGravatar William Hua 1-0/+23
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroGravatar John Johansen 1-23/+19
2017-01-16apparmor: change op from int to const char *Gravatar John Johansen 1-3/+4
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxGravatar John Johansen 1-1/+1
2017-01-16apparmor: pass the subject profile into profile replace/removeGravatar John Johansen 1-11/+14
2017-01-16apparmor: audit policy ns specified in policy loadGravatar John Johansen 1-14/+40
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformGravatar John Johansen 1-7/+7
2017-01-16apparmor: add ns name to the audit data for policy loadsGravatar John Johansen 1-10/+24
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()Gravatar John Johansen 1-12/+10
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()Gravatar John Johansen 1-3/+9
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()Gravatar John Johansen 1-3/+22
2017-01-16apparmor: allow specifying the profile doing the managementGravatar John Johansen 1-11/+21
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewGravatar John Johansen 1-3/+4
2017-01-16apparmor: add a default null dfaGravatar John Johansen 1-0/+2
2017-01-16apparmor: name null-XXX profiles after the executableGravatar John Johansen 1-13/+40
2017-01-16apparmor: pass gfp_t parameter into profile allocationGravatar John Johansen 1-5/+6
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsGravatar John Johansen 1-2/+4
2017-01-16apparmor: pass gfp param into aa_policy_init()Gravatar John Johansen 1-1/+1
2017-01-16apparmor: rename hname_tail to basenameGravatar John Johansen 1-1/+1
2017-01-16apparmor: add fn to lookup profiles by fqnameGravatar John Johansen 1-0/+29
2017-01-16apparmor: add strn version of lookup_profile fnGravatar John Johansen 1-11/+25
2017-01-16apparmor: rename replacedby to proxyGravatar John Johansen 1-35/+35
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEGravatar John Johansen 1-1/+1
2017-01-16apparmor: rename namespace to ns to improve code line lengthsGravatar John Johansen 1-16/+16
2017-01-16apparmor: split apparmor policy namespaces code into its own fileGravatar John Johansen 1-284/+14
2017-01-16apparmor: split out shared policy_XXX fns to libGravatar John Johansen 1-119/+4
2016-07-12apparmor: fix module parameters can be changed after policy is lockedGravatar John Johansen 1-1/+17
2016-07-12apparmor: fix refcount race when finding a child profileGravatar John Johansen 1-1/+3
2016-07-12apparmor: fix audit full profile hname on successful loadGravatar John Johansen 1-1/+1
2016-07-12apparmor: fix log failures for all profiles in a setGravatar John Johansen 1-10/+19
2016-07-12apparmor: fix put() parent ref after updating the active refGravatar John Johansen 1-1/+1
2016-07-12apparmor: fix replacement bug that adds new child to old parentGravatar John Johansen 1-1/+1
2016-07-12apparmor: fix refcount bug in profile replacementGravatar John Johansen 1-2/+2
2013-10-16apparmor: fix memleak of the profile hashGravatar John Johansen 1-0/+1
2013-09-30apparmor: fix suspicious RCU usage warning in policy.c/policy.hGravatar John Johansen 1-1/+2
2013-08-14apparmor: add interface files for profiles and namespacesGravatar John Johansen 1-12/+63
2013-08-14apparmor: allow setting any profile into the unconfined stateGravatar John Johansen 1-2/+4
2013-08-14apparmor: make free_profile available outside of policy.cGravatar John Johansen 1-5/+4
2013-08-14apparmor: rework namespace free pathGravatar John Johansen 1-27/+6
2013-08-14apparmor: update how unconfined is handledGravatar John Johansen 1-41/+27
2013-08-14apparmor: change how profile replacement update is doneGravatar John Johansen 1-38/+47
2013-08-14apparmor: convert profile lists to RCU based lockingGravatar John Johansen 1-104/+109
2013-08-14apparmor: provide base for multiple profiles to be replaced at onceGravatar John Johansen 1-117/+183
2013-04-28apparmor: Fix smatch warning in aa_remove_profilesGravatar John Johansen 1-8/+6
2013-04-28apparmor: move the free_profile fn ahead of aa_alloc_profileGravatar John Johansen 1-75/+75
2013-04-28apparmor: remove sid from profilesGravatar John Johansen 1-17/+6