summaryrefslogtreecommitdiffstats
path: root/security/apparmor/lsm.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner2023-01-191-9/+7
* Merge tag 'apparmor-pr-2022-12-14' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-12-141-11/+14
|\
| * apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng2022-10-251-2/+2
| * LSM: Fix kernel-docJiapeng Chong2022-10-251-1/+1
| * apparmor: Fix undefined references to zstd_ symbolsJohn Johansen2022-10-031-3/+2
| * apparmor: rework profile->rules to be a listJohn Johansen2022-10-031-2/+5
| * apparmor: refactor profile rules and attachmentsJohn Johansen2022-10-031-2/+2
| * apparmor: add mediation class information to auditingJohn Johansen2022-10-031-1/+2
| * apparmor: use zstd compression for profile dataJon Tourville2022-10-031-5/+5
* | Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-12-131-16/+13
|\ \
| * | lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore2022-11-051-16/+13
* | | Merge tag 'landlock-6.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2022-12-131-0/+6
|\ \ \
| * | | security: Create file_truncate hook from path_truncate hookGünther Noack2022-10-191-0/+6
| |/ /
* / / apparmor: use type safe idmapping helpersChristian Brauner2022-10-261-8/+17
|/ /
* / ->getprocattr(): attribute name is const char *, TYVM...Al Viro2022-09-011-1/+1
|/
* apparmor: correct config reference to intended oneLukas Bulwahn2022-07-201-1/+1
* apparmor: disable showing the mode as part of a secid to secctxJohn Johansen2022-07-141-0/+8
* apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox2022-07-141-2/+0
* apparmor: add a kernel label to use on kernel objectsJohn Johansen2022-07-141-4/+1
* security/apparmor: remove redundant ret variableMinghao Chi2022-07-101-4/+1
* apparmor: Enable tuning of policy paranoid load for embedded systemsJohn Johansen2022-07-101-1/+1
* apparmor: make export of raw binary profile to userspace optionalJohn Johansen2022-07-101-0/+6
* lsm: Fix kernel-docYang Li2022-07-101-5/+5
* LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün2022-05-231-5/+25
* lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore2021-11-221-3/+10
* Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2021-11-111-29/+13
|\
| * apparmor: remove unneeded one-line hook wrappersFlorian Westphal2021-11-031-18/+2
| * apparmor: update policy capable checks to use a labelJohn Johansen2021-02-071-11/+11
| * apparmor: check/put label on apparmor_sk_clone_security()Mauricio Faria de Oliveira2020-06-051-0/+5
* | lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore2021-03-221-1/+2
* | apparmor: handle idmapped mountsChristian Brauner2021-01-241-6/+15
* | security: add const qualifier to struct sock in various placesFlorian Westphal2020-12-031-1/+1
* | Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2020-06-081-0/+5
|\ \
| * | apparmor: check/put label on apparmor_sk_clone_security()Mauricio Faria de Oliveira2020-06-071-0/+5
| |/
* | Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds2020-06-041-1/+1
|\ \
| * | exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman2020-05-201-1/+1
| |/
* / sysctl: pass kernel pointers to ->proc_handlerChristoph Hellwig2020-04-271-1/+1
|/
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-031-37/+161
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-231-15/+35
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-201-27/+84
| * apparmor: Force type-casting of current->real_credBharath Vedartham2019-06-201-1/+1
| * apparmor: Initial implementation of raw policy blob compressionChris Coulson2019-04-111-0/+47
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
|/
* apparmor: Restore Y/N in /sys for apparmor's "enabled"Kees Cook2019-04-101-1/+48
* Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2019-03-071-36/+31
|\
| * LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa2019-01-181-2/+0
| * LSM: generalize flag passing to security_capableMicah Morton2019-01-101-2/+2
| * LSM: Infrastructure management of the task securityCasey Schaufler2019-01-081-12/+3
| * LSM: Infrastructure management of the file securityCasey Schaufler2019-01-081-9/+10
| * Infrastructure management of the cred security blobCasey Schaufler2019-01-081-0/+9