summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include
Commit message (Expand)AuthorAgeFilesLines
* mm: introduce kv[mz]alloc helpersMichal Hocko2017-05-081-11/+0
* apparmor: fix parameters so that the permission test is bypassed at bootJohn Johansen2017-04-071-1/+1
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2017-02-2114-344/+672
|\
| * apparmor: fix restricted endian type warnings for dfa unpackJohn Johansen2017-01-161-3/+3
| * apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen2017-01-161-0/+53
| * apparmor: support querying extended trusted helper extra dataWilliam Hua2017-01-161-0/+16
| * apparmor: convert change_profile to use fqname later to give better controlJohn Johansen2017-01-161-2/+2
| * apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen2017-01-162-13/+32
| * apparmor: change op from int to const char *John Johansen2017-01-163-60/+60
| * apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen2017-01-161-38/+40
| * apparmor: add per policy ns .load, .replace, .remove interface filesJohn Johansen2017-01-161-0/+6
| * apparmor: pass the subject profile into profile replace/removeJohn Johansen2017-01-161-3/+4
| * apparmor: audit policy ns specified in policy loadJohn Johansen2017-01-161-0/+1
| * apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen2017-01-164-3/+39
| * apparmor: add ns name to the audit data for policy loadsJohn Johansen2017-01-161-0/+1
| * apparmor: add profile and ns params to aa_may_manage_policy()John Johansen2017-01-161-1/+1
| * apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen2017-01-161-1/+1
| * apparmor: add ns being viewed as a param to policy_view_capable()John Johansen2017-01-162-1/+9
| * apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen2017-01-161-1/+1
| * apparmor: add special .null file used to "close" fds at execJohn Johansen2017-01-162-0/+4
| * apparmor: add a default null dfaJohn Johansen2017-01-161-0/+5
| * apparmor: add get_dfa() fnJohn Johansen2017-01-161-0/+15
| * apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-161-1/+2
| * apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-161-1/+1
| * apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-162-2/+5
| * apparmor: pass gfp param into aa_policy_init()John Johansen2017-01-161-1/+1
| * apparmor: constify policy name and hnameJohn Johansen2017-01-161-2/+2
| * apparmor: rename hname_tail to basenameJohn Johansen2017-01-161-2/+2
| * apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen2017-01-161-1/+1
| * apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen2017-01-161-1/+13
| * apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen2017-01-161-0/+11
| * apparmor: allow ns visibility question to consider subnsesJohn Johansen2017-01-161-2/+2
| * apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-162-5/+7
| * apparmor: add lib fn to find the "split" for fqnamesJohn Johansen2017-01-161-0/+2
| * apparmor: add strn version of aa_find_nsJohn Johansen2017-01-161-3/+10
| * apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-161-0/+2
| * apparmor: rename replacedby to proxyJohn Johansen2017-01-161-10/+10
| * apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-162-4/+4
| * apparmor: rename sid to secidJohn Johansen2017-01-161-9/+9
| * apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-163-30/+29
| * apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-162-106/+143
| * apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-162-13/+81
| * apparmor: move lib definitions into separate lib includeJohn Johansen2017-01-163-80/+97
* | locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra2017-01-142-8/+2
|/
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-121-0/+2
* apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-121-0/+1
* apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-121-0/+1
* apparmor: constify aa_path_link()Al Viro2016-03-281-1/+1
* [apparmor] constify struct path * in a bunch of helpersAl Viro2016-03-272-2/+2
* Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sbDavid Howells2015-02-221-2/+2