git.samba.org / sfrench / cifs-2.6.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
apparmor: move path_link mediation to using labels
2017-06-11 John Johansenapparmor: move path_link mediation to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: refactor path name lookup and permission...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: update aa_audit_file() to use labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move aa_file_perm() to use labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: allow ptrace checks to be finer grained than...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move ptrace checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add cross check permission helper macros
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move resource checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move capability checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: update query interface to support label queries
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: switch getprocattr to using label_print fns()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: switch from profiles to using labels on contexts
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add the base fns() for domain labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: revalidate files during exec
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: cleanup rename XXX_file_context() to XXX_file_ctx()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: convert aa_change_XXX bool parameters to...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: cleanup remove unused and not fully implemented...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: refactor updating profiles to the newest...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: share profile name on replacement
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: convert to profile block critical sections
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: move bprm_committing_creds/committed_creds...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: fix display of ns name
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: fix apparmor_query data
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: fix policy load/remove semantics
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add namespace lookup fns()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: cleanup __find_child()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: provide information about path buffer size...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add profile permission query ability
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: switch from file_perms to aa_perms
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add gerneric permissions struct and support fns
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add fn to test if profile supports a given...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: speed up transactional queries
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add label data availability to the feature set
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add mkdir/rmdir interface to manage policy...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: add policy revision file interface
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-11 John Johansenapparmor: provide finer control over policy management
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-09 John Johansenapparmor: rework perm mapping to a slightly broader set
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: move permissions into their own file to be...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: convert from securityfs to apparmorfs for...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: allow specifying an already created dir to...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: rename apparmor file fns and data to indicate use
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: add custom apparmorfs that will be used by...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: use macro template to simplify namespace...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: use macro template to simplify profile seq_files
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: move to per loaddata files, instead of replicating...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansensecurityfs: add the ability to support symlinks
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: Move path lookup to using preallocated buffers
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: allow profiles to provide info to disconnected...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: make internal lib fn skipn_spaces available...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 John Johansenapparmor: move file context into file.h
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Thomas Schneidersecurity/apparmor: Use POSIX-compatible "printf '%s'"
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Dan Carpenterapparmor: Fix error cod in __aa_fs_profile_mkdir()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Markus Elfringapparmorfs: Use seq_putc() in two functions
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-06-08 Markus Elfringapparmorfs: Combine two function calls into one in...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix undefined reference to `aa_g_hash_policy'
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: replace remaining BUG_ON() asserts with AA_BUG()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix restricted endian type warnings for policy...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix restricted endian type warnings for dfa...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add check for apparmor enabled in module...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add per cpu work buffers to avoid allocating...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 Tyler Hicksapparmor: sysctl to enable unprivileged user ns AppArmor...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 William Huaapparmor: support querying extended trusted helper...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: update cap audit to check SECURITY_CAP_NOAUDIT
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: make computing policy hashes conditional...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: convert change_profile to use fqname later...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fix change_hat debug output
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: remove unused op parameter from simple_write_to_bu...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: change aad apparmor_audit_data macro to a...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: change op from int to const char *
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: rename context abreviation cxt to the more...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: fail task profile update if current_cred...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add per policy ns .load, .replace, .remove...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: pass the subject profile into profile replace...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: audit policy ns specified in policy load
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: allow introspecting the loaded policy pre...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add ns name to the audit data for policy...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add profile and ns params to aa_may_manage_policy()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add ns being viewed as a param to policy_admin_cap...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add ns being viewed as a param to policy_view_capa...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: allow specifying the profile doing the management
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: allow introspecting the policy namespace...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: Make aa_remove_profile() callable from a...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: track ns level so it can be used to help...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add special .null file used to "close" fds...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: provide userspace flag indicating binfmt_elf_mmap...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add a default null dfa
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: allow policydb to be used as the file dfa
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add get_dfa() fn
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: prepare to support newer versions of policy
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add support for force complain flag to support...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: remove paranoid load switch
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: name null-XXX profiles after the executable
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: pass gfp_t parameter into profile allocation
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: refactor prepare_ns() and make usable from...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: update policy_destroy to use new debug asserts
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: pass gfp param into aa_policy_init()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: constify policy name and hname
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: rename hname_tail to basename
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: rename mediated_filesystem() to path_mediated_fs()
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
2017-01-16 John Johansenapparmor: add debug assert AA_BUG and Kconfig to control...
Signed-off-by: John Johansen <john.johansen@canonical.com>
 commit | commitdiff | tree
next
Unnamed repository; edit this file 'description' to name the repository.