Commits · d4669f0b036efd67ec2e00e0adc8f42214c1bdf8 · jan.koester / Linux · GitLab

Jan 16, 2017
- apparmor: add per cpu work buffers to avoid allocating buffers at every hook · d4669f0b
  John Johansen authored Jan 16, 2017
  d4669f0b
- apparmor: sysctl to enable unprivileged user ns AppArmor policy loading · e3ea1ca5
  Tyler Hicks authored Mar 16, 2016
  e3ea1ca5
- apparmor: support querying extended trusted helper extra data · e025be0f
  William Hua authored Jan 15, 2017
  e025be0f
- apparmor: update cap audit to check SECURITY_CAP_NOAUDIT · 12eb87d5
  John Johansen authored Jan 16, 2017
  12eb87d5
- apparmor: make computing policy hashes conditional on kernel parameter · 31f75bfe
  John Johansen authored Jan 16, 2017
  31f75bfe
- apparmor: convert change_profile to use fqname later to give better control · aa9a39ad
  John Johansen authored Jan 16, 2017
  aa9a39ad
- apparmor: fix change_hat debug output · c3e1e584
  John Johansen authored Jan 16, 2017
  c3e1e584
- apparmor: remove unused op parameter from simple_write_to_buffer() · 5ef50d01
  John Johansen authored Jan 16, 2017
  5ef50d01
- apparmor: change aad apparmor_audit_data macro to a fn macro · ef88a7ac
  John Johansen authored Jan 16, 2017
  ef88a7ac
- apparmor: change op from int to const char * · 47f6e5cc
  John Johansen authored Jan 16, 2017
  47f6e5cc
- apparmor: rename context abreviation cxt to the more standard ctx · 55a26ebf
  John Johansen authored Jan 16, 2017
  55a26ebf
- apparmor: fail task profile update if current_cred isn't real_cred · a20aa95f
  John Johansen authored Jan 16, 2017
  a20aa95f
- apparmor: add per policy ns .load, .replace, .remove interface files · b7fd2c03
  John Johansen authored Jan 16, 2017
  b7fd2c03
- apparmor: pass the subject profile into profile replace/remove · 12dd7171
  John Johansen authored Jan 16, 2017
  12dd7171
- apparmor: audit policy ns specified in policy load · 04dc715e
  John Johansen authored Jan 16, 2017
  04dc715e
- apparmor: allow introspecting the loaded policy pre internal transform · 5ac8c355
  John Johansen authored Jan 16, 2017
  5ac8c355
- apparmor: add ns name to the audit data for policy loads · fc1c9fd1
  John Johansen authored Jan 16, 2017
  fc1c9fd1
- apparmor: add profile and ns params to aa_may_manage_policy() · 078c73c6
  John Johansen authored Jan 16, 2017
  078c73c6
- apparmor: add ns being viewed as a param to policy_admin_capable() · fd2a8043
  John Johansen authored Jan 16, 2017
  fd2a8043
- apparmor: add ns being viewed as a param to policy_view_capable() · 2bd8dbbf
  John Johansen authored Jan 16, 2017
  2bd8dbbf
- apparmor: allow specifying the profile doing the management · a6f23300
  John Johansen authored Jan 16, 2017
  a6f23300
- apparmor: allow introspecting the policy namespace name · 3e3e5695
  John Johansen authored Jan 16, 2017
  3e3e5695
- apparmor: Make aa_remove_profile() callable from a different view · b79473f2
  John Johansen authored Jan 16, 2017
  b79473f2
- apparmor: track ns level so it can be used to help in view checks · ee2351e4
  John Johansen authored Jan 16, 2017
  ee2351e4
- apparmor: add special .null file used to "close" fds at exec · a71ada30
  John Johansen authored Jan 16, 2017
  a71ada30
- apparmor: provide userspace flag indicating binfmt_elf_mmap change · 34c426ac
  John Johansen authored Jan 16, 2017
  34c426ac
- apparmor: add a default null dfa · 11c236b8
  John Johansen authored Jan 16, 2017
  11c236b8
- apparmor: allow policydb to be used as the file dfa · 6604d4c1
  John Johansen authored Jan 16, 2017
  6604d4c1
- apparmor: add get_dfa() fn · 293a4886
  John Johansen authored Jan 16, 2017
  293a4886
- apparmor: prepare to support newer versions of policy · 474d6b75
  John Johansen authored Jan 16, 2017
  474d6b75
- apparmor: add support for force complain flag to support learning mode · 5ebfb128
  John Johansen authored Jan 16, 2017
  5ebfb128
- apparmor: remove paranoid load switch · abbf8734
  John Johansen authored Jan 16, 2017
  abbf8734
- apparmor: name null-XXX profiles after the executable · 181f7c97
  John Johansen authored Jan 16, 2017
  181f7c97
- apparmor: pass gfp_t parameter into profile allocation · 30b026a8
  John Johansen authored Jan 16, 2017
  30b026a8
- apparmor: refactor prepare_ns() and make usable from different views · 73688d1e
  John Johansen authored Jan 16, 2017
  73688d1e
- apparmor: update policy_destroy to use new debug asserts · 5fd1b95f
  John Johansen authored Jan 16, 2017
  5fd1b95f
- apparmor: pass gfp param into aa_policy_init() · d102d895
  John Johansen authored Jan 16, 2017
  d102d895
- apparmor: constify policy name and hname · bbe4a7c8
  John Johansen authored Jan 16, 2017
  bbe4a7c8
- apparmor: rename hname_tail to basename · 6e474e30
  John Johansen authored Jan 16, 2017
  6e474e30
- apparmor: rename mediated_filesystem() to path_mediated_fs() · efeee83a
  John Johansen authored Jan 16, 2017
  efeee83a