summaryrefslogtreecommitdiff
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
30 hoursapparmor: fix race between freeing data and fs accessing itJohn Johansen7-101/+153
30 hoursapparmor: fix race on rawdata dereferenceJohn Johansen4-57/+93
30 hoursapparmor: fix differential encoding verificationJohn Johansen2-4/+20
30 hoursapparmor: fix unprivileged local user can do privileged policy managementJohn Johansen3-9/+43
30 hoursapparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen1-0/+1
30 hoursapparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer1-2/+3
30 hoursapparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer1-10/+20
30 hoursapparmor: fix: limit the number of levels of policy namespacesJohn Johansen2-0/+4
30 hoursapparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer1-3/+27
30 hoursapparmor: fix memory leak in verify_headerMassimiliano Pellizzer1-1/+0
30 hoursapparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer1-1/+11
10 daysapparmor: fix aa_label to return state from compount and component matchJohn Johansen1-6/+6
10 daysapparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia1-0/+9
10 daysapparmor: avoid per-cpu hold underflow in aa_get_bufferZhengmian Hu1-1/+2
10 daysapparmor: make label_match return a consistent valueJohn Johansen1-11/+9
10 daysapparmor: remove apply_modes_to_perms from label_matchJohn Johansen1-3/+0
10 daysapparmor: fix rlimit for posix cpu timersJohn Johansen1-0/+5
10 daysapparmor: return -ENOMEM in unpack_perms_table upon alloc failureRyan Lee1-2/+4
10 daysapparmor: Fix & Optimize table creation from possibly unaligned memoryHelge Deller2-9/+10
10 daysAppArmor: Allow apparmor to handle unaligned dfa tablesHelge Deller1-7/+8
10 daysapparmor: fix NULL sock in aa_sock_file_permJohn Johansen1-2/+4
2025-08-28apparmor: Fix 8-byte alignment for initial dfa blob streamsHelge Deller1-2/+2
2025-08-20apparmor: fix x_table_lookup when stacking is not the first entryJohn Johansen1-23/+29
2025-08-20apparmor: use the condition in AA_BUG_FMT even with debug disabledMateusz Guzik1-1/+5
2025-08-20apparmor: shift ouid when mediating hard links in usernsGabriel Totev1-2/+4
2025-08-15apparmor: Fix unaligned memory accesses in KUnit testHelge Deller1-2/+4
2025-08-15apparmor: fix loop detection used in conflicting attachment resolutionRyan Lee2-15/+12
2025-08-15apparmor: ensure WB_HISTORY_SIZE value is a power of 2Ryan Lee2-1/+3
2025-01-23apparmor: allocate xmatch for nullpdb inside aa_alloc_nullRyan Lee1-0/+1
2024-12-05apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan1-0/+6
2024-12-05apparmor: fix 'Do simple duplicate message elimination'chao liu1-0/+2
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro1-1/+1
2024-09-16Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-19/+3
2024-08-25apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck1-3/+3
2024-07-29lsm: infrastructure management of the sock securityCasey Schaufler3-19/+3
2024-07-27Merge tag 'apparmor-pr-2024-07-25' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds8-34/+65
2024-07-24sysctl: treewide: constify the ctl_table argument of proc_handlersJoel Granados1-1/+1
2024-07-24apparmor: unpack transition table if dfa is not presentGeorgia Garcia1-17/+25
2024-07-24apparmor: try to avoid refing the label in apparmor_file_openMateusz Guzik2-2/+23
2024-07-24apparmor: test: add MODULE_DESCRIPTION()Jeff Johnson1-0/+1
2024-07-24apparmor: take nosymfollow flag into accountAlexander Mikhalitsyn1-0/+2
2024-06-13ima: Avoid blocking in RCU read-side critical sectionGUO Zihua2-4/+4
2024-05-10apparmor: fix possible NULL pointer dereferenceLeesoo Ahn1-0/+4
2024-05-10apparmor: fix typo in kernel docChristian Göttsche1-1/+1
2024-05-10apparmor: remove useless static inline function is_deletedColin Ian King1-13/+0
2024-05-10apparmor: use kvfree_sensitive to free data->dataFedor Pchelkin2-1/+2
2024-05-10apparmor: Fix null pointer deref when receiving skb during sock creationXiao Liang1-0/+7
2024-04-15lsm: remove the now superfluous sentinel element from ctl_table arrayJoel Granados1-1/+0
2024-03-14lsm: use 32-bit compatible data types in LSM syscallsCasey Schaufler1-2/+2
2024-02-27Merge tag 'lsm-pr-20240227' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+1