summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler
2017-01-16apparmor: fix undefined reference to `aa_g_hash_policy'John Johansen
2017-01-16apparmor: replace remaining BUG_ON() asserts with AA_BUG()John Johansen
2017-01-16apparmor: fix restricted endian type warnings for policy unpackJohn Johansen
2017-01-16apparmor: fix restricted endian type warnings for dfa unpackJohn Johansen
2017-01-16apparmor: add check for apparmor enabled in module parameters missing itJohn Johansen
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua
2017-01-16apparmor: update cap audit to check SECURITY_CAP_NOAUDITJohn Johansen
2017-01-16apparmor: make computing policy hashes conditional on kernel parameterJohn Johansen
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen
2017-01-16apparmor: fix change_hat debug outputJohn Johansen
2017-01-16apparmor: remove unused op parameter from simple_write_to_buffer()John Johansen
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen
2017-01-16apparmor: change op from int to const char *John Johansen
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen
2017-01-16apparmor: fail task profile update if current_cred isn't real_credJohn Johansen
2017-01-16apparmor: add per policy ns .load, .replace, .remove interface filesJohn Johansen
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()John Johansen
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen
2017-01-16apparmor: allow specifying the profile doing the managementJohn Johansen
2017-01-16apparmor: allow introspecting the policy namespace nameJohn Johansen
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen
2017-01-16apparmor: track ns level so it can be used to help in view checksJohn Johansen
2017-01-16apparmor: add special .null file used to "close" fds at execJohn Johansen
2017-01-16apparmor: provide userspace flag indicating binfmt_elf_mmap changeJohn Johansen
2017-01-16apparmor: add a default null dfaJohn Johansen
2017-01-16apparmor: allow policydb to be used as the file dfaJohn Johansen
2017-01-16apparmor: add get_dfa() fnJohn Johansen
2017-01-16apparmor: prepare to support newer versions of policyJohn Johansen
2017-01-16apparmor: add support for force complain flag to support learning modeJohn Johansen
2017-01-16apparmor: remove paranoid load switchJohn Johansen
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen
2017-01-16apparmor: update policy_destroy to use new debug assertsJohn Johansen
2017-01-16apparmor: pass gfp param into aa_policy_init()John Johansen
2017-01-16apparmor: constify policy name and hnameJohn Johansen
2017-01-16apparmor: rename hname_tail to basenameJohn Johansen
2017-01-16apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen
2017-01-16apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen
2017-01-16apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen
2017-01-16apparmor: allow ns visibility question to consider subnsesJohn Johansen
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen