Commits · fc1c9fd10a53a17abb3348adb2ec5d29813a0397 · jan.koester / Linux · GitLab

Jan 16, 2017
- apparmor: add ns name to the audit data for policy loads · fc1c9fd1
  John Johansen authored Jan 16, 2017
  fc1c9fd1
- apparmor: add profile and ns params to aa_may_manage_policy() · 078c73c6
  John Johansen authored Jan 16, 2017
  078c73c6
- apparmor: add ns being viewed as a param to policy_admin_capable() · fd2a8043
  John Johansen authored Jan 16, 2017
  fd2a8043
- apparmor: add ns being viewed as a param to policy_view_capable() · 2bd8dbbf
  John Johansen authored Jan 16, 2017
  2bd8dbbf
- apparmor: allow specifying the profile doing the management · a6f23300
  John Johansen authored Jan 16, 2017
  a6f23300
- apparmor: allow introspecting the policy namespace name · 3e3e5695
  John Johansen authored Jan 16, 2017
  3e3e5695
- apparmor: Make aa_remove_profile() callable from a different view · b79473f2
  John Johansen authored Jan 16, 2017
  b79473f2
- apparmor: track ns level so it can be used to help in view checks · ee2351e4
  John Johansen authored Jan 16, 2017
  ee2351e4
- apparmor: add special .null file used to "close" fds at exec · a71ada30
  John Johansen authored Jan 16, 2017
  a71ada30
- apparmor: provide userspace flag indicating binfmt_elf_mmap change · 34c426ac
  John Johansen authored Jan 16, 2017
  34c426ac
- apparmor: add a default null dfa · 11c236b8
  John Johansen authored Jan 16, 2017
  11c236b8
- apparmor: allow policydb to be used as the file dfa · 6604d4c1
  John Johansen authored Jan 16, 2017
  6604d4c1
- apparmor: add get_dfa() fn · 293a4886
  John Johansen authored Jan 16, 2017
  293a4886
- apparmor: prepare to support newer versions of policy · 474d6b75
  John Johansen authored Jan 16, 2017
  474d6b75
- apparmor: add support for force complain flag to support learning mode · 5ebfb128
  John Johansen authored Jan 16, 2017
  5ebfb128
- apparmor: remove paranoid load switch · abbf8734
  John Johansen authored Jan 16, 2017
  abbf8734
- apparmor: name null-XXX profiles after the executable · 181f7c97
  John Johansen authored Jan 16, 2017
  181f7c97
- apparmor: pass gfp_t parameter into profile allocation · 30b026a8
  John Johansen authored Jan 16, 2017
  30b026a8
- apparmor: refactor prepare_ns() and make usable from different views · 73688d1e
  John Johansen authored Jan 16, 2017
  73688d1e
- apparmor: update policy_destroy to use new debug asserts · 5fd1b95f
  John Johansen authored Jan 16, 2017
  5fd1b95f
- apparmor: pass gfp param into aa_policy_init() · d102d895
  John Johansen authored Jan 16, 2017
  d102d895
- apparmor: constify policy name and hname · bbe4a7c8
  John Johansen authored Jan 16, 2017
  bbe4a7c8
- apparmor: rename hname_tail to basename · 6e474e30
  John Johansen authored Jan 16, 2017
  6e474e30
- apparmor: rename mediated_filesystem() to path_mediated_fs() · efeee83a
  John Johansen authored Jan 16, 2017
  efeee83a
- apparmor: add debug assert AA_BUG and Kconfig to control debug info · 680cd62e
  John Johansen authored Jan 16, 2017
  680cd62e
- apparmor: add macro for bug asserts to check that a lock is held · 57e36bbd
  John Johansen authored Jan 16, 2017
  57e36bbd
- apparmor: allow ns visibility question to consider subnses · 92b6d8ef
  John Johansen authored Jan 16, 2017
  92b6d8ef
- apparmor: add fn to lookup profiles by fqname · 31617ddf
  John Johansen authored Jan 16, 2017
  31617ddf
- apparmor: add lib fn to find the "split" for fqnames · 3b0aaf58
  John Johansen authored Jan 16, 2017
  3b0aaf58
- apparmor: add strn version of aa_find_ns · 9a2d40c1
  John Johansen authored Jan 16, 2017
  9a2d40c1
- apparmor: add strn version of lookup_profile fn · 1741e9eb
  John Johansen authored Jan 16, 2017
  1741e9eb
- apparmor: rename replacedby to proxy · 8399588a
  John Johansen authored Jan 16, 2017
  8399588a
- apparmor: rename PFLAG_INVALID to PFLAG_STALE · d97d51d2
  John Johansen authored Jan 16, 2017
  d97d51d2
- apparmor: rename sid to secid · 121d4a91
  John Johansen authored Jan 16, 2017
  121d4a91
- apparmor: rename namespace to ns to improve code line lengths · 98849dff
  John Johansen authored Jan 16, 2017
  98849dff
- apparmor: split apparmor policy namespaces code into its own file · cff281f6
  John Johansen authored Jan 16, 2017
  cff281f6
- apparmor: split out shared policy_XXX fns to lib · fe6bb31f
  John Johansen authored Jan 16, 2017
  fe6bb31f
- apparmor: move lib definitions into separate lib include · 12557dcb
  John Johansen authored Jan 16, 2017
  12557dcb
- apparmor: use designated initializers · 8486adf0
  Kees Cook authored Dec 16, 2016
  8486adf0
Jan 15, 2017
- AppArmor: Use GFP_KERNEL for __aa_kvmalloc(). · a7f6c1b6
  Tetsuo Handa authored Nov 14, 2016
  a7f6c1b6