Commits · d69dece5f5b6bc7a5e39d2b6136ddc69469331fe · jan.koester / Linux · GitLab

Jan 19, 2017
- LSM: Add /sys/kernel/security/lsm · d69dece5
  Casey Schaufler authored Jan 18, 2017
  d69dece5
Jan 16, 2017
- apparmor: fix undefined reference to `aa_g_hash_policy' · 3ccb76c5
  John Johansen authored Jan 16, 2017
  3ccb76c5
- apparmor: replace remaining BUG_ON() asserts with AA_BUG() · e6bfa25d
  John Johansen authored Jan 16, 2017
  e6bfa25d
- apparmor: fix restricted endian type warnings for policy unpack · 2c17cd36
  John Johansen authored Jan 16, 2017
  2c17cd36
- apparmor: fix restricted endian type warnings for dfa unpack · e6e8bf41
  John Johansen authored Jan 16, 2017
  e6e8bf41
- apparmor: add check for apparmor enabled in module parameters missing it · ca4bd5ae
  John Johansen authored Jan 16, 2017
  ca4bd5ae
- apparmor: add per cpu work buffers to avoid allocating buffers at every hook · d4669f0b
  John Johansen authored Jan 16, 2017
  d4669f0b
- apparmor: sysctl to enable unprivileged user ns AppArmor policy loading · e3ea1ca5
  Tyler Hicks authored Mar 16, 2016
  e3ea1ca5
- apparmor: support querying extended trusted helper extra data · e025be0f
  William Hua authored Jan 15, 2017
  e025be0f
- apparmor: update cap audit to check SECURITY_CAP_NOAUDIT · 12eb87d5
  John Johansen authored Jan 16, 2017
  12eb87d5
- apparmor: make computing policy hashes conditional on kernel parameter · 31f75bfe
  John Johansen authored Jan 16, 2017
  31f75bfe
- apparmor: convert change_profile to use fqname later to give better control · aa9a39ad
  John Johansen authored Jan 16, 2017
  aa9a39ad
- apparmor: fix change_hat debug output · c3e1e584
  John Johansen authored Jan 16, 2017
  c3e1e584
- apparmor: remove unused op parameter from simple_write_to_buffer() · 5ef50d01
  John Johansen authored Jan 16, 2017
  5ef50d01
- apparmor: change aad apparmor_audit_data macro to a fn macro · ef88a7ac
  John Johansen authored Jan 16, 2017
  ef88a7ac
- apparmor: change op from int to const char * · 47f6e5cc
  John Johansen authored Jan 16, 2017
  47f6e5cc
- apparmor: rename context abreviation cxt to the more standard ctx · 55a26ebf
  John Johansen authored Jan 16, 2017
  55a26ebf
- apparmor: fail task profile update if current_cred isn't real_cred · a20aa95f
  John Johansen authored Jan 16, 2017
  a20aa95f
- apparmor: add per policy ns .load, .replace, .remove interface files · b7fd2c03
  John Johansen authored Jan 16, 2017
  b7fd2c03
- apparmor: pass the subject profile into profile replace/remove · 12dd7171
  John Johansen authored Jan 16, 2017
  12dd7171
- apparmor: audit policy ns specified in policy load · 04dc715e
  John Johansen authored Jan 16, 2017
  04dc715e
- apparmor: allow introspecting the loaded policy pre internal transform · 5ac8c355
  John Johansen authored Jan 16, 2017
  5ac8c355
- apparmor: add ns name to the audit data for policy loads · fc1c9fd1
  John Johansen authored Jan 16, 2017
  fc1c9fd1
- apparmor: add profile and ns params to aa_may_manage_policy() · 078c73c6
  John Johansen authored Jan 16, 2017
  078c73c6
- apparmor: add ns being viewed as a param to policy_admin_capable() · fd2a8043
  John Johansen authored Jan 16, 2017
  fd2a8043
- apparmor: add ns being viewed as a param to policy_view_capable() · 2bd8dbbf
  John Johansen authored Jan 16, 2017
  2bd8dbbf
- apparmor: allow specifying the profile doing the management · a6f23300
  John Johansen authored Jan 16, 2017
  a6f23300
- apparmor: allow introspecting the policy namespace name · 3e3e5695
  John Johansen authored Jan 16, 2017
  3e3e5695
- apparmor: Make aa_remove_profile() callable from a different view · b79473f2
  John Johansen authored Jan 16, 2017
  b79473f2
- apparmor: track ns level so it can be used to help in view checks · ee2351e4
  John Johansen authored Jan 16, 2017
  ee2351e4
- apparmor: add special .null file used to "close" fds at exec · a71ada30
  John Johansen authored Jan 16, 2017
  a71ada30
- apparmor: provide userspace flag indicating binfmt_elf_mmap change · 34c426ac
  John Johansen authored Jan 16, 2017
  34c426ac
- apparmor: add a default null dfa · 11c236b8
  John Johansen authored Jan 16, 2017
  11c236b8
- apparmor: allow policydb to be used as the file dfa · 6604d4c1
  John Johansen authored Jan 16, 2017
  6604d4c1
- apparmor: add get_dfa() fn · 293a4886
  John Johansen authored Jan 16, 2017
  293a4886
- apparmor: prepare to support newer versions of policy · 474d6b75
  John Johansen authored Jan 16, 2017
  474d6b75
- apparmor: add support for force complain flag to support learning mode · 5ebfb128
  John Johansen authored Jan 16, 2017
  5ebfb128
- apparmor: remove paranoid load switch · abbf8734
  John Johansen authored Jan 16, 2017
  abbf8734
- apparmor: name null-XXX profiles after the executable · 181f7c97
  John Johansen authored Jan 16, 2017
  181f7c97
- apparmor: pass gfp_t parameter into profile allocation · 30b026a8
  John Johansen authored Jan 16, 2017
  30b026a8