Commits · 286054a7a8674b256da16564d96772b88896eb35 · jan.koester / Linux · GitLab

Jul 27, 2016
- apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling · 7616ac70
  Arnd Bergmann authored Jul 25, 2016
  7616ac70
Jul 21, 2016
- qstr: constify dentry_init_security · 4f3ccd76
  Al Viro authored Jul 20, 2016
  4f3ccd76
Jul 12, 2016
- apparmor: fix arg_size computation for when setprocattr is null terminated · d4d03f74
  John Johansen authored Jul 09, 2016
  d4d03f74
- apparmor: fix oops, validate buffer size in apparmor_setprocattr() · e89b8081
  Vegard Nossum authored Jul 07, 2016
  e89b8081
- apparmor: do not expose kernel stack · f4ee2def
  Heinrich Schuchardt authored Jun 10, 2016
  f4ee2def
- apparmor: fix module parameters can be changed after policy is locked · 58acf9d9
  John Johansen authored Jun 22, 2016
  58acf9d9
- apparmor: fix oops in profile_unpack() when policy_db is not present · 5f20fdfe
  John Johansen authored Jun 15, 2016
  5f20fdfe
- apparmor: don't check for vmalloc_addr if kvzalloc() failed · 3197f5ad
  John Johansen authored Jun 15, 2016
  3197f5ad
- apparmor: add missing id bounds check on dfa verification · 15756178
  John Johansen authored Jun 02, 2016
  15756178
- apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task · ff118479
  Jeff Mahoney authored Nov 06, 2015
  ff118479
- apparmor: use list_next_entry instead of list_entry_next · 38dbd7d8
  Geliang Tang authored Nov 16, 2015
  38dbd7d8
- apparmor: fix refcount race when finding a child profile · de7c4cc9
  John Johansen authored Dec 16, 2015
  de7c4cc9
- apparmor: fix ref count leak when profile sha1 hash is read · 0b938a2e
  John Johansen authored Nov 18, 2015
  0b938a2e
- apparmor: check that xindex is in trans_table bounds · 23ca7b64
  John Johansen authored Mar 17, 2016
  23ca7b64
- apparmor: ensure the target profile name is always audited · f7da2de0
  John Johansen authored Apr 20, 2016
  f7da2de0
- apparmor: fix audit full profile hname on successful load · 7ee6da25
  John Johansen authored Apr 16, 2016
  7ee6da25
- apparmor: fix log failures for all profiles in a set · bf15cf0c
  John Johansen authored Apr 16, 2016
  bf15cf0c
- apparmor: fix put() parent ref after updating the active ref · f351841f
  John Johansen authored Apr 16, 2016
  f351841f
- apparmor: add parameter to control whether policy hashing is used · 6059f71f
  John Johansen authored Oct 24, 2014
  6059f71f
- apparmor: internal paths should be treated as disconnected · bd35db8b
  John Johansen authored Jul 25, 2014
  bd35db8b
- apparmor: fix disconnected bind mnts reconnection · f2e561d1
  John Johansen authored Jul 25, 2014
  f2e561d1
- apparmor: fix update the mtime of the profile file on replacement · d671e890
  John Johansen authored Jul 25, 2014
  d671e890
- apparmor: exec should not be returning ENOENT when it denies · 9049a792
  John Johansen authored Jul 25, 2014
  9049a792
- apparmor: fix uninitialized lsm_audit member · b6b1b81b
  John Johansen authored Jun 08, 2014
  b6b1b81b
- apparmor: fix replacement bug that adds new child to old parent · ec34fa24
  John Johansen authored Apr 11, 2016
  ec34fa24
- apparmor: fix refcount bug in profile replacement · dcda617a
  John Johansen authored Apr 11, 2016
  dcda617a
Jul 08, 2016
- apparmor: fix oops, validate buffer size in apparmor_setprocattr() · 30a46a46
  Vegard Nossum authored Jul 07, 2016
  30a46a46
Jul 05, 2016
- evm: Translate user/group ids relative to s_user_ns when computing HMAC · 0b3c9761
  Seth Forshee authored Feb 05, 2015
  0b3c9761
Jun 30, 2016
- ima: extend the measurement entry specific pcr · 544e1cea
  Eric Richter authored Jun 01, 2016
  544e1cea
- ima: change integrity cache to store measured pcr · a422638d
  Eric Richter authored Jun 01, 2016
  a422638d
- ima: redefine duplicate template entries · 67696f6d
  Eric Richter authored Jun 01, 2016
  67696f6d
- ima: change ima_measurements_show() to display the entry specific pcr · 5f6f027b
  Eric Richter authored Jun 01, 2016
  5f6f027b
- ima: include pcr for each measurement log entry · 14b1da85
  Eric Richter authored Jun 01, 2016
  14b1da85
- ima: extend ima_get_action() to return the policy pcr · 725de7fa
  Eric Richter authored Jun 01, 2016
  725de7fa
- ima: add policy support for extending different pcrs · 0260643c
  Eric Richter authored Jun 01, 2016
  0260643c
- integrity: add measured_pcrs field to integrity cache · 96d450bb
  Eric Richter authored Jun 01, 2016
  96d450bb
Jun 27, 2016
- calipso: Add a label cache. · 4fee5242
  Huw Davies authored Jun 27, 2016
  4fee5242
- netlabel: Pass a family parameter to netlbl_skbuff_err(). · a04e71f6
  Huw Davies authored Jun 27, 2016
  a04e71f6
- calipso: Allow the lsm to label the skbuff directly. · 2917f57b
  Huw Davies authored Jun 27, 2016
  2917f57b
- calipso: Allow request sockets to be relabelled by the lsm. · e1adea92
  Huw Davies authored Jun 27, 2016
  e1adea92