summaryrefslogtreecommitdiff
path: root/security/apparmor/lsm.c
AgeCommit message (Expand)Author
2022-10-25apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng
2022-10-25LSM: Fix kernel-docJiapeng Chong
2022-10-03apparmor: Fix undefined references to zstd_ symbolsJohn Johansen
2022-10-03apparmor: rework profile->rules to be a listJohn Johansen
2022-10-03apparmor: refactor profile rules and attachmentsJohn Johansen
2022-10-03apparmor: add mediation class information to auditingJohn Johansen
2022-10-03apparmor: use zstd compression for profile dataJon Tourville
2022-07-20apparmor: correct config reference to intended oneLukas Bulwahn
2022-07-13apparmor: disable showing the mode as part of a secid to secctxJohn Johansen
2022-07-13apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox
2022-07-13apparmor: add a kernel label to use on kernel objectsJohn Johansen
2022-07-09security/apparmor: remove redundant ret variableMinghao Chi
2022-07-09apparmor: Enable tuning of policy paranoid load for embedded systemsJohn Johansen
2022-07-09apparmor: make export of raw binary profile to userspace optionalJohn Johansen
2022-07-09lsm: Fix kernel-docYang Li
2022-05-23LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün
2021-11-22lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore
2021-11-11Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2021-11-03apparmor: remove unneeded one-line hook wrappersFlorian Westphal
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore
2021-02-07apparmor: update policy capable checks to use a labelJohn Johansen
2021-01-24apparmor: handle idmapped mountsChristian Brauner
2020-12-03security: add const qualifier to struct sock in various placesFlorian Westphal
2020-06-07Merge tag 'apparmor-pr-2020-06-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2020-06-07apparmor: check/put label on apparmor_sk_clone_security()Mauricio Faria de Oliveira
2020-06-05apparmor: check/put label on apparmor_sk_clone_security()Mauricio Faria de Oliveira
2020-06-04Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds
2020-05-20exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman
2020-04-27sysctl: pass kernel pointers to ->proc_handlerChristoph Hellwig
2019-12-03Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2019-11-22apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen
2019-06-20apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior
2019-06-20apparmor: Force type-casting of current->real_credBharath Vedartham
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner
2019-04-11apparmor: Initial implementation of raw policy blob compressionChris Coulson
2019-04-10apparmor: Restore Y/N in /sys for apparmor's "enabled"Kees Cook
2019-03-07Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2019-02-01apparmor: Fix warning about unused function apparmor_ipv6_postroutePetr Vorel
2019-01-18LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa
2019-01-10LSM: generalize flag passing to security_capableMicah Morton
2019-01-08LSM: Infrastructure management of the task securityCasey Schaufler
2019-01-08LSM: Infrastructure management of the file securityCasey Schaufler
2019-01-08Infrastructure management of the cred security blobCasey Schaufler
2019-01-08AppArmor: Abstract use of cred security blobCasey Schaufler
2019-01-08apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUEKees Cook
2019-01-08LSM: Separate idea of "major" LSM from "exclusive" LSMKees Cook
2019-01-08LSM: Lift LSM selection out of individual LSMsKees Cook
2019-01-08LSM: Plumb visibility into optional "enabled" stateKees Cook
2019-01-08LSM: Introduce LSM_FLAG_LEGACY_MAJORKees Cook
2018-12-20vfs: Suppress MS_* flag defs within the kernel unless explicitly enabledDavid Howells