summaryrefslogtreecommitdiff
path: root/security/apparmor
AgeCommit message (Expand)AuthorFilesLines
2026-03-09apparmor: fix race between freeing data and fs accessing itJohn Johansen7-101/+153
2026-03-09apparmor: fix race on rawdata dereferenceJohn Johansen4-57/+93
2026-03-09apparmor: fix differential encoding verificationJohn Johansen2-4/+20
2026-03-09apparmor: fix unprivileged local user can do privileged policy managementJohn Johansen3-9/+43
2026-03-09apparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen1-0/+1
2026-03-09apparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer1-2/+3
2026-03-09apparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer1-10/+20
2026-03-09apparmor: fix: limit the number of levels of policy namespacesJohn Johansen2-0/+4
2026-03-09apparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer1-3/+27
2026-03-09apparmor: fix memory leak in verify_headerMassimiliano Pellizzer1-1/+0
2026-03-09apparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer1-1/+11
2026-02-21Convert more 'alloc_obj' cases to default GFP_KERNEL argumentsLinus Torvalds1-2/+1
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds6-14/+14
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook10-25/+24
2026-02-18apparmor: fix signedness bug in unpack_tags()Massimiliano Pellizzer1-1/+1
2026-02-03apparmor: fix cast in format string DEBUG statementJohn Johansen1-1/+1
2026-02-02apparmor: fix aa_label to return state from compount and component matchJohn Johansen1-6/+6
2026-02-02apparmor: fix fmt string type error in process_strs_entryJohn Johansen1-2/+3
2026-02-02apparmor: fix kernel-doc comments for inviewJohn Johansen1-2/+2
2026-02-02apparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia1-0/+9
2026-02-01apparmor: add .kunitconfigRyota Sakamoto1-0/+5
2026-01-29apparmor: cleanup remove unused percpu critical sections in buffer managementJohn Johansen1-5/+0
2026-01-29apparmor: document the buffer hold, add an overflow guardJohn Johansen1-2/+26
2026-01-29apparmor: avoid per-cpu hold underflow in aa_get_bufferZhengmian Hu1-1/+2
2026-01-29apparmor: split xxx_in_ns into its two separate semantic use casesJohn Johansen5-46/+61
2026-01-29apparmor: make label_match return a consistent valueJohn Johansen1-11/+9
2026-01-29apparmor: remove apply_modes_to_perms from label_matchJohn Johansen1-3/+0
2026-01-29apparmor: fix fast path cache check for unix socketsJohn Johansen1-14/+21
2026-01-29apparmor: fix rlimit for posix cpu timersJohn Johansen1-0/+5
2026-01-29apparmor: refactor/cleanup cred helper fns.John Johansen1-31/+69
2026-01-29apparmor: fix label and profile debug macrosJohn Johansen1-1/+3
2026-01-29apparmor: move check for aa_null file to cover all casesJohn Johansen2-6/+10
2026-01-29apparmor: guard against free routines being called with a NULLJohn Johansen1-0/+6
2026-01-29apparmor: return -ENOMEM in unpack_perms_table upon alloc failureRyan Lee1-2/+4
2026-01-29apparmor: account for in_atomic removal in common_file_permRyan Lee1-3/+2
2026-01-29apparmor: drop in_atomic flag in common_mmap, and common_file_permJohn Johansen1-12/+9
2026-01-29apparmor: fix boolean argument in apparmor_mmap_fileRyan Lee1-1/+1
2026-01-29apparmor: userns: Add support for execpath in usernsMaxime Bélair1-0/+32
2026-01-29apparmor: add support loading per permission taggingJohn Johansen8-18/+269
2026-01-22apparmor: make str table more generic and be able to have multiple entriesJohn Johansen5-46/+90
2026-01-22apparmor: Fix & Optimize table creation from possibly unaligned memoryHelge Deller2-9/+10
2026-01-22AppArmor: Allow apparmor to handle unaligned dfa tablesHelge Deller1-7/+8
2026-01-22apparmor: Replace deprecated strcpy with memcpy in gen_symlink_nameThorsten Blum1-4/+8
2026-01-22apparmor: fix NULL sock in aa_sock_file_permJohn Johansen1-2/+4
2026-01-18apparmor: fix NULL pointer dereference in __unix_needs_revalidationSystem Administrator1-0/+3
2026-01-18apparmor: Replace deprecated strcpy in d_namespace_pathThorsten Blum1-5/+8
2026-01-18apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_initThorsten Blum1-9/+7
2026-01-16apparmor: replace sprintf with snprintf in aa_new_learning_profileThorsten Blum1-6/+9
2025-12-05Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-4/+9
2025-12-03Merge tag 'lsm-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds5-7/+14