summaryrefslogtreecommitdiffstats
path: root/security/apparmor/lsm.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* apparmor: update policy capable checks to use a labelJohn Johansen2021-02-071-11/+11
* apparmor: check/put label on apparmor_sk_clone_security()Mauricio Faria de Oliveira2020-06-051-0/+5
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-031-37/+161
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-231-15/+35
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-201-27/+84
| * apparmor: Force type-casting of current->real_credBharath Vedartham2019-06-201-1/+1
| * apparmor: Initial implementation of raw policy blob compressionChris Coulson2019-04-111-0/+47
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
|/
* apparmor: Restore Y/N in /sys for apparmor's "enabled"Kees Cook2019-04-101-1/+48
* Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2019-03-071-36/+31
|\
| * LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa2019-01-181-2/+0
| * LSM: generalize flag passing to security_capableMicah Morton2019-01-101-2/+2
| * LSM: Infrastructure management of the task securityCasey Schaufler2019-01-081-12/+3
| * LSM: Infrastructure management of the file securityCasey Schaufler2019-01-081-9/+10
| * Infrastructure management of the cred security blobCasey Schaufler2019-01-081-0/+9
| * AppArmor: Abstract use of cred security blobCasey Schaufler2019-01-081-5/+5
| * apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUEKees Cook2019-01-081-1/+1
| * LSM: Separate idea of "major" LSM from "exclusive" LSMKees Cook2019-01-081-1/+1
| * LSM: Lift LSM selection out of individual LSMsKees Cook2019-01-081-6/+0
| * LSM: Plumb visibility into optional "enabled" stateKees Cook2019-01-081-2/+3
| * LSM: Introduce LSM_FLAG_LEGACY_MAJORKees Cook2019-01-081-0/+1
* | apparmor: Fix warning about unused function apparmor_ipv6_postroutePetr Vorel2019-02-011-0/+2
|/
* vfs: Suppress MS_* flag defs within the kernel unless explicitly enabledDavid Howells2018-12-201-0/+1
* Merge tag 'apparmor-pr-2018-11-01' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2018-11-021-5/+125
|\
| * apparmor: add #ifdef checks for secmark filteringArnd Bergmann2018-10-131-0/+10
| * apparmor: don't try to replace stale label in ptraceme checkJann Horn2018-10-031-2/+2
| * apparmor: Allow filtering based on secmark policyMatthew Garrett2018-10-031-1/+111
| * apparmor: don't try to replace stale label in ptrace access checkJann Horn2018-09-131-2/+2
* | Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2018-10-241-1/+4
|\ \
| * | LSM: Record LSM name in struct lsm_infoKees Cook2018-10-111-0/+1
| * | LSM: Convert security_initcall() into DEFINE_LSM()Kees Cook2018-10-111-1/+3
* | | signal: Distinguish between kernel_siginfo and siginfoEric W. Biederman2018-10-031-1/+1
|/ /
* / ->file_open(): lose cred argumentAl Viro2018-07-121-2/+2
|/
* apparmor: fix ptrace read checkJohn Johansen2018-06-071-1/+2
* apparmor: fixup secid map conversion to using IDRJohn Johansen2018-06-071-0/+2
* apparmor: Add support for audit rule filteringMatthew Garrett2018-06-071-0/+7
* apparmor: Convert to use match_string() helperAndy Shevchenko2018-06-071-14/+11
* apparmor: add the ability to get a task's secidJohn Johansen2018-05-021-0/+8
* apparmor: add support for mapping secids and using secctxesJohn Johansen2018-05-021-0/+5
* Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2018-04-141-33/+434
|\
| * apparmor: add base infastructure for socket mediationJohn Johansen2018-03-141-0/+392
| * apparmor: move context.h to cred.hJohn Johansen2018-02-091-1/+1
| * apparmor: move task related defines and fns to task.X filesJohn Johansen2018-02-091-3/+3
| * apparmor: rename tctx to ctxJohn Johansen2018-02-091-9/+9
| * apparmor: drop cred_ctx and reference the label directlyJohn Johansen2018-02-091-41/+14
| * apparmor: move task domain change info to task securityJohn Johansen2018-02-091-6/+42
| * apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen2018-02-091-13/+13
* | Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2018-04-071-5/+12
|\ \
| * | usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as...Stephen Smalley2018-03-061-5/+12
| |/
* / headers: untangle kmemleak.h from mm.hRandy Dunlap2018-04-061-1/+0
|/