projects / linux / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
apparmor: fix locking when creating a new complain profile.
2017-11-21 John Johansenapparmor: fix locking when creating a new complain...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 John Johansenapparmor: fix profile attachment for special unconfined...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 John Johansenapparmor: ensure that undecidable profile attachments...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 John Johansenapparmor: fix leak of null profile name if profile...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 Colin Ian Kingapparmor: remove unused redundant variable stop
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 Thomas Meyerapparmor: Fix bool initialization/comparison
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 Arnd Bergmannapparmor: initialized returned struct aa_perms
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-11-21 Colin Ian Kingapparmor: fix spelling mistake: "resoure" -> "resource"
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: fix apparmorfs DAC access permissions
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: fix build failure on sparc caused by undeclared...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: fix incorrect type assignment when freeing...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: ensure unconfined profiles have dfas initialized
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: fix race condition in null profile creation
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: move new_null_profile to after profile lookup...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: add base infastructure for socket mediation
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: add more debug asserts to apparmorfs
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: make policy_unpack able to audit different...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: add support for absolute root view based...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: cleanup conditional check for label in label_print
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: add mount mediation
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: add the ability to mediate signals
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 John Johansenapparmor: Redundant condition: prev_ns. in [label.c...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 Dan Carpenterapparmor: Fix an error code in aafs_create()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 Christos Gkekasapparmor: Fix logical error in verify_header()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-09-22 Geert Uytterhoevenapparmor: Fix shadowed local variable in unpack_trans_table()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: export that basic profile namespaces are...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add stacked domain labels interface
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add domain label stacking info to apparmorfs
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move change_profile mediation to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move change_hat mediation to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move exec domain mediation to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: support v7 transition format compatible with...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: mediate files when they are received
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: rework file permission to cache file access...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move path_link mediation to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: refactor path name lookup and permission...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: update aa_audit_file() to use labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move aa_file_perm() to use labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: allow ptrace checks to be finer grained than...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move ptrace checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add cross check permission helper macros
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move resource checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move capability checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: update query interface to support label queries
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: switch getprocattr to using label_print fns()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: switch from profiles to using labels on contexts
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add the base fns() for domain labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: revalidate files during exec
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: cleanup rename XXX_file_context() to XXX_file_ctx()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: convert aa_change_XXX bool parameters to...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: cleanup remove unused and not fully implemented...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: refactor updating profiles to the newest...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: share profile name on replacement
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: convert to profile block critical sections
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move bprm_committing_creds/committed_creds...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: fix display of ns name
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: fix apparmor_query data
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: fix policy load/remove semantics
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add namespace lookup fns()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: cleanup __find_child()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: provide information about path buffer size...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add profile permission query ability
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: switch from file_perms to aa_perms
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add gerneric permissions struct and support fns
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add fn to test if profile supports a given...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: speed up transactional queries
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add label data availability to the feature set
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add mkdir/rmdir interface to manage policy...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add policy revision file interface
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: provide finer control over policy management
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-09 John Johansenapparmor: rework perm mapping to a slightly broader set
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: move permissions into their own file to be...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: convert from securityfs to apparmorfs for...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: allow specifying an already created dir to...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: rename apparmor file fns and data to indicate use
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: add custom apparmorfs that will be used by...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: use macro template to simplify namespace...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: use macro template to simplify profile seq_files
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: move to per loaddata files, instead of replicating...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansensecurityfs: add the ability to support symlinks
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: Move path lookup to using preallocated buffers
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: allow profiles to provide info to disconnected...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: make internal lib fn skipn_spaces available...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: move file context into file.h
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Thomas Schneidersecurity/apparmor: Use POSIX-compatible "printf '%s'"
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Dan Carpenterapparmor: Fix error cod in __aa_fs_profile_mkdir()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Markus Elfringapparmorfs: Use seq_putc() in two functions
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Markus Elfringapparmorfs: Combine two function calls into one in...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix undefined reference to `aa_g_hash_policy'
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: replace remaining BUG_ON() asserts with AA_BUG()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix restricted endian type warnings for policy...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix restricted endian type warnings for dfa...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add check for apparmor enabled in module...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add per cpu work buffers to avoid allocating...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 Tyler Hicksapparmor: sysctl to enable unprivileged user ns AppArmor...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 William Huaapparmor: support querying extended trusted helper...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: update cap audit to check SECURITY_CAP_NOAUDIT
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: make computing policy hashes conditional...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: convert change_profile to use fqname later...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix change_hat debug output
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
next
Unnamed repository; edit this file 'description' to name the repository.