Code

History

Commits on master to security/apparmor35+
  1. apparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen committed 2 months ago3daad92
  2. apparmor: fix deadlock in complain-mode change_hatJohn Johansen committed 3 months ago4ec11f1
  3. apparmor: constify aa_label parameters on read-only query helpersJohn Johansen committed 3 months agofbedf6d
  4. apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen committed 3 months ago01a915e
  5. apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen committed 3 months ago08066bc
  6. apparmor: constify aa_perms parameters that are read-onlyJohn Johansen committed 3 months agoe3bc982
  7. apparmor: drop use of _confined variant for iterationJohn Johansen committed 3 months agoecaface
  8. apparmor: refactory mount to use check_permsJohn Johansen committed 3 months ago6c27cd2
  9. apparmor: fix auditing of mount binary dataJohn Johansen committed 3 months agob9f2181
  10. apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen committed 1 year ago97dd3f5
  11. apparmor: mark static tables and structs as read onlyJohn Johansen committed 3 months agoa3ed5d4
  12. apparmor: fix error debug output in fn_label_buildJohn Johansen committed 3 months ago1bd6061
  13. apparmor: make table entry count last enum for static tablesJohn Johansen committed 3 months agoef6f394
  14. apparmor: fix race condition in label replacementJohn Johansen committed 2 years agoc37e23f
  15. apparmor: refactor xattr attachment, to take the file pathJohn Johansen committed 3 years ago812aa0a
  16. apparmor: fix unconfined user namespace restriction forced stackJohn Johansen committed 6 months ago08c2f7c
  17. apparmor: reserve mediation class for packet mediationJohn Johansen committed 4 months agoecd4e67
  18. apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen committed 9 months ago27908a4
  19. apparmor: move netfilter functions next to the LSM network operationsJohn Johansen committed 10 months agoa7bc8cc
  20. apparmor: refactor network socket mediation to support compatibilityJohn Johansen committed 4 months ago1af45bf
  21. apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen committed 4 months ago89ac6aa
  22. apparmor: refactor network sock mediation in preparation for inet mediationJohn Johansen committed 5 years ago4f0cafc
  23. apparmor: make MEDIATES_AF_UNIX its own fnJohn Johansen committed 8 years ago7965b1f
  24. apparmor: fix error handling for copy_from_user in policy_updateJohn Johansen committed 4 months ago1bc94d0
  25. apparmor: fix out-of-bounds write when null terminating a label vecHyunwoo Kim committed 3 months ago9f1e401
  26. apparmor: fix integer overflow in verify_tags() bounds checkFabrice Derepas committed 3 months ago465946d
  27. apparmor: optimize current_label_crit_section() with needputJohn Johansen committed 3 months ago1555a0e
  28. apparmor: fix cred UAF caused by begin_current_label_crit_section()Jann Horn committed 3 months ago3f4ae5f
  29. apparmor: use SEND_SIG_NOINFO instead of NULL in aa_audit()Oleg Nesterov committed 4 months ago485d3f5
  30. apparmor: Fix warning: 'decompress_zstd' defined but not usedJohn Johansen committed 3 months agoefede14
  31. apparmor: fix implicit declaration of function 'decompress_zstd'John Johansen committed 3 months agob0c2e98
  32. apparmor: Fix build failure when ZSTD_DECOMPRESS is not enabledJohn Johansen committed 3 months ago1c5f27e
  33. apparmor: compressed_data not described in aa_get_data_from_compressedJohn Johansen committed 3 months ago9e4c1ef
  34. apparmor: switch website link to httpsBaruch Siach committed 3 months ago50507d6
  35. apparmor: leverage audit_log_n_untrustedstring() when possiblePaul Moore committed 3 months ago3693ff4