projects
/
linux-2.6-microblaze.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
apparmor: move capability checks to using labels
2017-06-11
John Johansen
apparmor: move capability checks to using labels
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: update query interface to support label queries
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: switch getprocattr to using label_print fns()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: switch from profiles to using labels on contexts
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add the base fns() for domain labels
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: revalidate files during exec
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: convert aa_change_XXX bool parameters to...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: cleanup remove unused and not fully implemented...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: refactor updating profiles to the newest...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: share profile name on replacement
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: convert to profile block critical sections
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: move bprm_committing_creds/committed_creds...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: fix display of ns name
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: fix apparmor_query data
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: fix policy load/remove semantics
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add namespace lookup fns()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: cleanup __find_child()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: provide information about path buffer size...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add profile permission query ability
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: switch from file_perms to aa_perms
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add gerneric permissions struct and support fns
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add fn to test if profile supports a given...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: speed up transactional queries
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add label data availability to the feature set
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add mkdir/rmdir interface to manage policy...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: add policy revision file interface
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-11
John Johansen
apparmor: provide finer control over policy management
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-09
John Johansen
apparmor: rework perm mapping to a slightly broader set
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: move permissions into their own file to be...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: convert from securityfs to apparmorfs for...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: allow specifying an already created dir to...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: rename apparmor file fns and data to indicate use
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: add custom apparmorfs that will be used by...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: use macro template to simplify namespace...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: use macro template to simplify profile seq_files
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: move to per loaddata files, instead of replicating...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
securityfs: add the ability to support symlinks
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: Move path lookup to using preallocated buffers
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: allow profiles to provide info to disconnected...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: make internal lib fn skipn_spaces available...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
John Johansen
apparmor: move file context into file.h
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
Thomas Schneider
security/apparmor: Use POSIX-compatible "printf '%s'"
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
Dan Carpenter
apparmor: Fix error cod in __aa_fs_profile_mkdir()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
Markus Elfring
apparmorfs: Use seq_putc() in two functions
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-06-08
Markus Elfring
apparmorfs: Combine two function calls into one in...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: fix undefined reference to `aa_g_hash_policy'
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: replace remaining BUG_ON() asserts with AA_BUG()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: fix restricted endian type warnings for policy...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: fix restricted endian type warnings for dfa...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add check for apparmor enabled in module...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add per cpu work buffers to avoid allocating...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
Tyler Hicks
apparmor: sysctl to enable unprivileged user ns AppArmor...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
William Hua
apparmor: support querying extended trusted helper...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: update cap audit to check SECURITY_CAP_NOAUDIT
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: make computing policy hashes conditional...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: convert change_profile to use fqname later...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: fix change_hat debug output
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: remove unused op parameter from simple_write_to_bu...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: change aad apparmor_audit_data macro to a...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: change op from int to const char *
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: rename context abreviation cxt to the more...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: fail task profile update if current_cred...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add per policy ns .load, .replace, .remove...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: pass the subject profile into profile replace...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: audit policy ns specified in policy load
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: allow introspecting the loaded policy pre...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add ns name to the audit data for policy...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add profile and ns params to aa_may_manage_policy()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add ns being viewed as a param to policy_admin_cap...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add ns being viewed as a param to policy_view_capa...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: allow specifying the profile doing the management
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: allow introspecting the policy namespace...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: Make aa_remove_profile() callable from a...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: track ns level so it can be used to help...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add special .null file used to "close" fds...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: provide userspace flag indicating binfmt_elf_mmap...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add a default null dfa
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: allow policydb to be used as the file dfa
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add get_dfa() fn
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: prepare to support newer versions of policy
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add support for force complain flag to support...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: remove paranoid load switch
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: name null-XXX profiles after the executable
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: pass gfp_t parameter into profile allocation
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: refactor prepare_ns() and make usable from...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: update policy_destroy to use new debug asserts
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: pass gfp param into aa_policy_init()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: constify policy name and hname
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: rename hname_tail to basename
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: rename mediated_filesystem() to path_mediated_fs()
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add debug assert AA_BUG and Kconfig to control...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add macro for bug asserts to check that a...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: allow ns visibility question to consider...
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add fn to lookup profiles by fqname
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add lib fn to find the "split" for fqnames
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add strn version of aa_find_ns
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: add strn version of lookup_profile fn
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: rename replacedby to proxy
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
2017-01-16
John Johansen
apparmor: rename PFLAG_INVALID to PFLAG_STALE
Signed-off-by:
John Johansen
<john.johansen@canonical.com>
commit
|
commitdiff
|
tree
next